iiinova — where your digital self keeps evolving

Compatibility with existing systems can be a concern - eg the OBR might still have had this problem due to the Download Manager plugin. Really wants to happen in core. (Compatibility not so much an issue for us.)

100

Yeah, although then you lose the ability to easily browse your files. A suffix on the filename would work too - I think we should definitely consider it in core, given there’s been multiple big leaks this year from it.

110

This is also an issue that happens with other CMSes too, but usually they’re slightly better protected. And of course, it’s possible to fix it for WordPress - we do on @altis.cloud :)

100

Joost de Valk @joost.blog · 14/11/2025

We could potentially build random IDs into uploaded files, which would be better than nothing.

200

Reposted by Ryan McCue

I found out more over the last year as we worked on FAIR, but I also found out more specifically this week, when I was building a Glossary plugin for WordPress we needed for the FAIR website. progressplanner.com/catch-up-to-...

progressplanner.com

WordPress needs to catch up to the web

WordPress needs to modernize. FAIR and new standards based tools show how the platform can evolve with today’s web.

033

Ryan McCue @rmccue.io · 07/11/2025

Hello from DrupalCamp Scotland!

Ryan McCue @rmccue.io · 05/11/2025

My talk on @fair.pm from @loopconf.com is now online - find out why the project exists, and how we're solving the centralisation problem in WP (and making WP more secure too!) www.youtube.com/watch?v=zOtO...

youtube.com

What's Fair is FAIR

YouTube video by LoopConf

130

Reposted by Ryan McCue

Steve Burge @steveburge.com · 27/10/2025

There's a surprising number of niche WordPress events at the moment - PressConf in Arizona - LoopConf in London - Enqueue in Sydney - SomeConf in Minnesotta - Checkout Summit in Palermo I feel like I'm probably missing some more?

032

Ryan McCue @rmccue.io · 22/10/2025

Those sneaky @patchstack.com-ers have done it again with their LinkedIn header. If you're at MSP Global this week, come say hi at their booth where I'll be fighting them irl about this 😡

Steve Burge @steveburge.com · 15/10/2025

Reposted by Ryan McCue

We welcomed Than from @humanmade.com and Zeshan from Green Street News on the PublishPress podcast. They told us how they moved over 40,000 articles to their new WordPress site, using local LLMs to categorize all those new posts.

221

Reposted by Ryan McCue

The Repository @therepository.email · 25/09/2025

New FAIR 1.0 Release Brings Decentralized Package Management to WordPress

therepository.email

012

Reposted by Ryan McCue

LoopConf @loopconf.com · 14/09/2025

Don't sleep on this opportunity! Contact @rzen.net and join us on 25 Sept!

014

Ryan McCue @rmccue.io · 08/09/2025

Specifically, it's is_utf8_charset() which reads the blog_charset option. Something that's also fascinating is that the charset option in the Reading settings will only show up if it's not already set to UTF-8 - I guess it's legacy support?

110

Ryan McCue @rmccue.io · 08/09/2025

Fun fact: esc_html() requires loading the WP database, since it's charset dependent.

120

Ryan McCue @rmccue.io · 26/08/2025

Re multiple directories, I think getting the directory to a "neutral" (multi-stakeholder?) host solves that problem, in the same way we don't need third-party backups for the DNS roots.

000

Ryan McCue @rmccue.io · 26/08/2025

The main thing there is performance, pulling the audit log data could require pagination and DID lookups are already relatively expensive in our flow (see also github.com/did-method-p...). One option we talked about a little is that we could do validation in a labeler, making it opt-in.

Provide ability for bulk lookup · Issue #113 · did-method-plc/did-method-plc

We've got a situation where we want to revalidate ~100k DID documents on a regular basis. Right now, the PLC directory only supports single lookups of DIDs (or pulling down the whole history to red...

110

(Also, the Bluesky client(s) you're using here use only the direct method fyi: github.com/bluesky-soci...)

010

Indeed, although what's the threat model? If the threat is the PLC directory server, then loading the audit log from the server is no safer than the single endpoint - only mirroring it elsewhere and checking for inconsistency allows that.

200

Might be a better question for @bnewbold.net & the Bluesky team on that, but I know there's tools to mirror the PLC directory, such as github.com/str4d/plc (Note that we're using the single endpoint per spec, same as the official atproto identity package does.)

GitHub - str4d/plc: Key management for DID PLC identities

Key management for DID PLC identities. Contribute to str4d/plc development by creating an account on GitHub.

100

Your Bluesky account eg is plc.directory/did:plc:fd7x... :)

plc.directory

000

Each DID method defines its usage; the spec for PLC DIDs is to use the public endpoint. The audit log allows verifying it, but that's more of an offline process (and allows mirroring it). We're also planning on supporting web DIDs, and potentially other methods beyond that - same as Bluesky.

220

eg for did:plc:afjf7gsjzsqmgc7dlhb553mv, the DID document is at plc.directory/did:plc:afjf... and the key is zQ3shsLDoduUAwJjcc93ktzeQPRMghThq7LPEcsauSjgHpKZT

000

You don’t need to parse the whole PLC audit log for operational usage, you can use the latest endpoint instead. The keys are encoded directly into the response in multibase. :)

200

Chris Reynolds @jazzsequence.com · 20/08/2025

This isn’t quite right; the code for package signature checks is already in core, we just have to switch it on. It’s pending our server-side switch to Ed25519 before we do. It uses libsodium-compat, so should work on all hosts. DAG-CBOR and multibase are byte encodings, no exts needed.

200

Reposted by Ryan McCue

ICYMI you can catch the VoD of my conversation with @rmccue.io about FAIR on the @pantheon.io YouTube page www.youtube.com/live/PpVqbp_...

youtube.com

A Decentralized Future for WordPress Distribution

YouTube video by Pantheon

024

Ryan McCue @rmccue.io · 20/08/2025

I'll be live in an hour to chat about @fair.pm with @pantheon.io, including what we've been up to, and what's next! Tune in at www.youtube.com/live/PpVqbp_...

youtube.com

A Decentralized Future for WordPress Distribution

YouTube video by Pantheon

054

Ryan McCue @rmccue.io · 09/08/2025

The worst vegan/vegetarian food is anything pretending to be meat - just be good vegetables! That said, honey roasted carrot with Tracklements (wholegrain) mustard ketchup would be delicious I bet.

100

Ryan McCue @rmccue.io · 06/08/2025

It’s fascinating seeing online arguments that, at the root, come down to people not understanding the difference between primary, secondary, and tertiary sources.

Ryan McCue @rmccue.io · 04/08/2025

Almost as bonkers as creating a temperature scale based on a mix of water, salt, and NH4Cl.

000

Ryan McCue @rmccue.io · 10/07/2025

I see someone was reading reddit today.

LoopConf @loopconf.com · 23/06/2025

Reposted by Ryan McCue

Early Bird tickets are now available for LoopConf, but only 50 of them! loopconf.com Register now for £299 (the lowest price ever for a LoopConf) and secure your spot in London on 25 September. We can't wait to start sharing speakers with you!

loopconf.com

WordPress Developer Conference – 25 September 2025 – London, UK

The premier conference for developers who choose WordPress.

012

Reposted by Ryan McCue

FAIR Package Manager @fair.pm · 18/06/2025

🎉 Just Dropped: FAIR plugin v.0.3.0 Featuring new translations, fixes, and update improvements from a bevy of amazing contributors - thank you! Check out the release notes & upcoming release roadmap: github.com/fairpm/fair-...