2017
-
Missing: Diversity in Tech
Nov 6
I’ve attended at least 14 tech events in a year, and nearly every one lacked diversity. A stage of nine white men isn’t ‘the open source community.’ Why representation matters, and what we miss without it.
-
World Domination through WordPress Security
Jul 31
I’m tired of lamenting the state of WordPress security and doing nothing to address it. I’m building solutions to turn the conversation around.
-
Managing Gearman Securely
Jul 17
The impact of an improperly-secured Gearman server grows with the importance of the application using it.
-
WordPress.com is not WordPress
May 18
A friend tricked me into using WordPress by taking me to the first WordCamp Portland. Plugins, Core contributions, four years at 10up and several unanswered Automattic applications later, I see a troubling trend: WordPress.com is not WordPress, and the shared name is a problem.
-
Why Phishing Attacks Succeed
May 16
It’s impossible to train consumers on appropriate security behavior when the real ways of interacting with a bank so closely resemble phishing attacks.
-
What S.J. Resolution 34 Means For You
Mar 29
Congress just passed S.J. Resolution 34, rescinding an FCC rule protecting your digital privacy. Learn more about what this means moving forward.
2016
-
Introducing Sessionz
Nov 27
Introducing a new, middleware-inspired session handler for PHP projects (not just WordPress) called Sessionz. It’s open source; take a look!
-
Owning My Internet
Oct 24
For some access, I use an anonymous VPN proxy. When publishers block that kind of a VPN, I instead roll my own network with a Raspberry Pi from home.
-
Email Lock-down
Oct 17
Thanks to the beauty of open source (and other, smarter developers who’ve already traveled down this rabbit hole), I don’t have to figure out how to set up a personal mail server on my own. All of the tools are readily available!
-
Security, Internationalization, and Performance
Apr 6
esc_html_e() looks like a shortcut for echo esc_html(). It isn’t. It runs your text through WordPress’ translation system, one of its most expensive operations. A mistake I’ve made myself, and how to avoid it.
-
Deprecate Magic Constructors in PHP
Apr 1
Along the lines of the argument to make code easier to understand for quick readers, I want to propose something a little less radical and just as useful for devs: Deprecate the magic `__construct()` function.