Month: 3 Adar I 5784 (February 2024)

I'm old enough to remember when you didn't disclose vulnerabilities unless and until the impacted organizations/software projects had the ability to patch and had been given time to patch. But I guess everybody just loved shitting on WordPress too much and it was too easy to just extend that to everything else.

Yay! I haven't gotten a chance to donate yet.

I spent way too much time contributing to WordPress via its accessibility team not to have noticed the absolute glee lots of people outside WordPress felt every time there was a security situation. Oh and also, hanging out and drinking with the security team lol.

I think the security team treats plugin security separate from core security, except for the basic stuff that gets caught during upload to the repo. If a plugin is particularly notorious though for security problems (looking at you Tim Thumb), it gets removed.

@hauntedhideaway Yes you will be much less stressed, mostly because it's over and you're finally a Jew after all the hard work. It's really not bad at all though.