Viewing profile — Otto42

"Cache-Control: private" Google has to be respecting Cache-Control headers, right? Set your AMP pages to return that. Then they won't be allowed to cache them.

Once we were notified of the issue, I manually removed the bad code and shut down further updates. If you have this plugin, update to the latest version immediately.

Plugins do not auto update by default. You have to specifically turn those on, and not via a switch, but via code editing.

Disclaimer: I wrote those guidelines. The "Paypal" loophole is specifically because the first version of the guidelines had people constantly emailing us asking if this Paypal code…

> are there systems in place to blacklist a plugin and remotely remove it from an install (and possibly contact the install owners) We have automated scanning systems for suspiciou…

"Without review" is not quite true. Some of us get an email for every commit. Not kidding. Helps a lot for the scanning of things.

We do monitor that sort of thing. Very closely. Oh, and I got that email too. They didn't really vet that email list very well, or they would have been smarter about it. :)

This is for backwards compatibility. If you checked it again after you login, you'd find that it is not an MD5 password anymore. WordPress uses salted and hashed passwords with the…

@patio11: So, your attack basically amounts to "find RCE, then use RCE to gain control of whole network at once". Okay, the problem with this argument is that it is technically val…

Re: media, one step at a time. :) Re: custom fields: This makes little to no sense to be in core, because custom fields are just that, "custom". There's no point in giving the end …

He's not muffled. He actually sounds like that. :)

Somehow I doubt that we'll decide to drop support for 65.5% of our users (roughly 26 million websites). http://wordpress.org/about/stats/

I wasn't actually responding directly to you, but I will. Doesn't matter if you offer guest commenting by default. I close the browser tab the moment I see the non-standard comment…

Agreed. If I see a third party commenting system, I typically just close the tab instead of leaving a comment. It's not worth the hassle to me to deal with whatever your commenting…

Wait, people actually use Yelp? Seriously? I find that to be the most shocking statement in the article.

I'm sort of shocked that you're shocked. The rigid and inflexible architecture of systems like Rails and Django are the primary reasons for WP's success. There's a reason WP has mo…

So, when you have a problem with the system, then to find the bug you have to look in three or four places instead of one.

Gotta say that I don't get it either. They've basically just added yet-another-HTML-templating system into the mix. Question not answered: "For the love of all that is holy, why?" …

The "serious performance issues" you speak of were fixed in core, about 11 days before your post. See http://core.trac.wordpress.org/changeset/18541

I've gone by the name "Otto" for about half my life. It's a nickname I got in college. Many of my best friends didn't know my real name for years. It just never came up. My mom is …

At the same time, virtually everybody I know who has tried Places has said the exact opposite. To be fair, I have many friends who use Foursquare for its most obvious and intended …

Yeah, writing that importer was certainly annoying. Tumblr's formats are nutty and weird. http://wordpress.org/extend/plugins/tumblr-importer/