2018
-
Release Freeze is Coming
Nov 21
I will not ship any WordPress-related code or updates during the month of December. This is so I can take time to focus on family and 2019 planning. I encourage you to do the same.
-
I Won’t be at ZendCon
Oct 8
Next week kicks off the latest version of ZendCon in Las Vegas. Though I had, for a time, expected to be there … I won’t be. You should know why.
-
System76 Oryx Pro – First Impressions
Jul 12
Here are some photos and first thoughts from my setup experience of the new Oryx Pro by System76 that I purchased a few days ago.
-
Configuring Yubikeys, GPG, and Keybase
Apr 18
I keep my GPG private keys on Yubikeys, not on individual machines. A step-by-step walkthrough: an offline 4096-bit master key, sub-keys for encryption, signing and authentication, publishing to Keybase, signed Git commits, and gpg-agent as ssh-agent.
-
Disclosure: SQL Injection in Cart66 Pro
Apr 6
Last month I discovered a critical SQL injection vulnerability in the no-longer-developed yet still actively used Cart66 Pro plugin for WordPress. Here are the details …
-
Introducing Secure Updates for WordPress
Feb 26
Today I introduce the a new plugin that provides secure updates for WordPress: DGXPCO.
-
Open Letter to the Democratic Party of Washington County
Jan 27
I hereby resign my position as a precinct committee person of the Democratic Party of Washington County.
-
The Value of Repetition
Jan 11
Repetition is the key to memorizing and becoming an expert in almost anything.
-
The Value of Fiction
Jan 10
There’s inherent value in stories that are entirely made up. Part of the magic is that they can be subtle wrappers around tricky issues – it’s easier to discuss a sensitive topic when done within the context of an alien civilization.
-
Software Vulnerabilities, Disclosure, and Marketing
Jan 9
Consumers have a certain amount of upgrade fatigue. It’s not uncommon for end users to ignore an update notification for months to avoid the frustration that comes with trying to fix something that worked before the update.
-
Private Variables in JavaScript
Jan 8
ES6 gave us classes and object inheritance in JavaScript. However, it’s still missing any concept of “privacy” in OO terms. Here’s a hacky workaround to, maybe, make things work.