Sign in

Tim Nash

@tna.sh
203 followers 278 following 169 posts

Doomspeaker and Security Consultant for WordPress ecosystem. 🔗 tna.sh 🏠 timnash.co.uk 🎓 wpsecurity101.com 👔 agencystreamline.co.uk

PostsRepliesMedia
Reposted by Tim Nash
Rob Cairns @robcairns.bsky.social · 03/11/2025
Talking Security and Trust with @tna.sh stunningdigitalmarketing.com/episode-610-...
stunningdigitalmarketing.com
Episode 610 Digital Security, Trust, and WordPress Updates With Tim Nash - Stunning Digital Marketing
Show Highlights The source is an excerpt from “The SDM Show,” hosted by Rob Cairns, featuring guest Tim Nash, a security expert. The discussion centers on various cybersecurity topics, including recen...
011
Tim Nash @tna.sh · 30/10/2025
Still time for you to get on a train/plane/automobile and get to London for WPLDN this evening and come and be scared with WordPress horror tales! Want a sneak peek here is my opening slide for tonight horror tale.
011
Reposted by Tim Nash
Birgit Pauli-Haack @bph.social · 20/10/2025
Today 🎉Join us Nathan Wrigley, Michelle Frechette, Tim Nash and me @nathanwrigley.com @michellefrechette.bsky.social @bsky.app/profile/tna.sh #TWiW #WordPress at 15:00 CEST (13:00 UTC) wpbuilds.com/live
wpbuilds.com
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
063
Tim Nash @tna.sh · 17/10/2025
I like it!
110
Tim Nash @tna.sh · 15/10/2025
Come join myself and the rest of the folks @wpldn.uk for a spooky Haloween special... www.meetup.com/london-wordp...
meetup.com
#WPLDN - October 2025: WP Halloween Horror Stories & AI Open Topics, Thu, Oct 30, 2025, 6:00 PM | Meetup
🎃 **Happy (almost) Halloween, #WPLDN!** 🎃 October brings our annual tradition: Tim Nash returns to spread WordPress horror stories just in time for Halloween. But this y
000
Tim Nash @tna.sh · 09/10/2025
What does Wapuu do? Nothing. Absolutely nothing. It doesn’t boost SEO. It doesn’t compress images. It doesn’t even have a block editor opinion. It just sits there, hugging its WordPress orb like it knows the secret to the custom post type apocalypse. I would point to wordpress.org/plugins/wapu...
wordpress.org
Wapuu Dashboard Pet
Wapuu Dashboard Pet is a virtual pet for your WordPress admin dashboard. The more you fail to update your site, the sicker Wapuu becomes.
041
Tim Nash @tna.sh · 06/10/2025
Currently playing will I have made it to stable internet connection in time for the show! Not to scary @nathanwrigley.com to much.
110
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 06/10/2025
Join us LIVE for the 'This Week in #WordPress' show. It's fun, and we'd love your comments, really! Starts in a couple of hours, so 2pm UK time. wpbuilds.com/live This week, I'm with Michelle Frechette, Tim Nash and Courtney Robertson. @michellefrechette.bsky.social @tna.sh @courtneyr.dev #TWiW
wpbuilds.com
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
143
Tim Nash @tna.sh · 06/10/2025
Ever wondered how random wp_rand() really is? No? I'm not surprised I would be more surprised if you knew this function even existed in WordPress. Now you do, are you curious? So was I let's go on a random adventure! timnash.co.uk/nothing-is-t...
timnash.co.uk
Nothing is truly random by Tim Nash
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
020
Tim Nash @tna.sh · 05/10/2025
I hope it involves lavalamps?
110
Tim Nash @tna.sh · 05/10/2025
Want something to read on your Sunday afternoon? Come join me on a random adventure into wp-rand() timnash.co.uk/nothing-is-t... #wordpress
timnash.co.uk
Nothing is truly random by Tim Nash
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
221
Reposted by Tim Nash
Mike McAlister @mikemcalister.com · 29/09/2025
It's here! Menu Designer has landed at WP.org! Menu Designer is a powerful new way to build beautiful mobile menus and dropdown menus in the @WordPress block editor — no coding required. And now it's available right in your dashboard. wordpress.org/plugins/oll...
1145
Reposted by Tim Nash
WordPress @wordpress.org · 01/10/2025
WordPress 6.8.3 is here! This crucial security release addresses vulnerabilities to keep your site safe. Update now and ensure your site is secure! Learn more about the updates and download it here: wp.me/pZhYe-4ZK.
wp.me
053
Tim Nash @tna.sh · 01/10/2025
p.s If you found it helpful, do share the video for some this might be the thing that makes them go, oh that makes sense.
000
Tim Nash @tna.sh · 01/10/2025
I was lucky to present at #WCGdynia on automatic updates. Even if you don't use them I encourage you to watch this talk, not to convince you, but to see what things you can do around updates in general to make them safer and more reliable. (Hint it's testing) wordpress.tv/2025/09/30/t...
wordpress.tv
The Dark Side of Automatic Updates: Securing WordPress Supply Chains in CI/CD
Automatic updates in WordPress are a safety net, ensuring that sites are always running the latest code. But for development teams working with continuous integration and delivery (CI/CD), the real…
100
Tim Nash @tna.sh · 01/10/2025
Has yours? If not what a sucky morning you must be having clicking an update button. Coincidentally my talk on automatic updates just dropped on @wordpress.org TV wordpress.tv/2025/09/30/t...
021
Reposted by Tim Nash
Rhys Wynne @rhys.wales · 29/09/2025
NEW POST: On being inspired at #loopconf and hitting publish on a blog post I had half written....
rhyswynne.co.uk
Comment.
Like. Comment. Subscribe. That’s what the YouTubers say isn’t it? I miss folks commenting on blog posts really. At my peak I’d post a blog post at home, walk the half a mile from my student digs to university, and then be greeted with 4 or 5 comments. Now? I think I’ve had one comment … Continue reading
033
Tim Nash @tna.sh · 28/09/2025
Thanks! I'm off to hibernate for a week.
020
Tim Nash @tna.sh · 28/09/2025
Taking @ohhelloana.blog talk seriously and hit publish... The long way to WordCamp Gdynia 🚀 Leeds → London (WPLDN + LoopConf) → Poland 🇵🇱 Turns out it’s quicker to get to Gdynia than London. timnash.co.uk/the-long-way... #loopconf #WCGdynia
timnash.co.uk
The Long Way to WordCamp Gdynia: LoopConf, WPLDN and a Lot of Coffee by Tim Nash
From Leeds to London for WPLDN and LoopConf, then on to WordCamp Gdynia — turns out Poland is easier to reach than the capital. A week of security talks, AI debates, community, and flight delays.
131
Tim Nash @tna.sh · 24/09/2025
You can send me a message on LinkedIn linkedin.com/in/tnash or via the WPUK Slack wpslack.uk Both are logged in on my phone. Please don't use Bluesky chat feature as I have no access to it! So you will just be a message I can't access.
linkedin.com
000
Tim Nash @tna.sh · 24/09/2025
Coming to #WPLDN but worried you don't know anyone? Events can be intimidating! I really want to say Hi and I can hopefully gently introduce you to people. If the idea of coming up to me is scary then just drop me a message and I will come to you even if it's outside of the venue. This is me:
Tim Nash in a coffee shop wearing a pink shirt.
411
Tim Nash @tna.sh · 09/09/2025
The wonderful @mwug.uk is back! Very excited to be here in Stockport which is totally Manchester... But so happy to see it happening congrats to @rhys.wales @jwo.ng on re-launch.
MWUG in full swing.
030
Tim Nash @tna.sh · 09/09/2025
I don't know there possibly is to much Evan...
100
Tim Nash @tna.sh · 09/09/2025
Heads up! If you make use of NPM there has been multiple packages compromised and distributing malware. List of effected packages github.com/advisories?q... including big ones like debug and chalk. Some commentary on the event including from the Chalk dev news.ycombinator.com/item?id=4516...
github.com
GitHub Advisory Database
A database of software vulnerabilities, using data from maintainer-submitted advisories and from other vulnerability databases.
101
Tim Nash @tna.sh · 05/09/2025
☝️
020
Tim Nash @tna.sh · 15/08/2025
The folks @weareag.bsky.social have rolled an update of one of my favourite features in their payment gateways, their Payment Failure Traffic Light system. Making it so easy to understand payment issues, and identify potential fraud issues. weareag.co.uk/tls-2-0-beca...
weareag.co.uk
TLS 2.0 - Because “Address Failed” Just Isn’t Good Enough Anymore – We are AG
Remember our original Traffic Light System? You know, the one that gave you a few coloured circles and told you things like “Address failed”? It was useful, sure, but… it was basically the equivalent ...
000
Tim Nash @tna.sh · 08/08/2025
I have been playing with wordpress.org/plugins/mela... as a replacement for User Role Editor. I didn't include it in the course as it was still Alpha and also the user module is very @melapress.bsky.social heavy!
wordpress.org
Melapress Role Editor
The complete WordPress user roles plugin for everyone
020
Tim Nash @tna.sh · 08/08/2025
How strange, they all use the same pattern so the links should not vary and the video control is also in the pattern. Will go take a look. Thanks for the heads up!
010
Tim Nash @tna.sh · 08/08/2025
github.com/timnashcouk/... It's hidden in the resource section but will make it more obvious thanks for the feedback!
github.com
GitHub - timnashcouk/tn-tame-session-defaults: Taming your WordPress user sessions, to help reduce the chance of session hijacking
Taming your WordPress user sessions, to help reduce the chance of session hijacking - timnashcouk/tn-tame-session-defaults
010
Tim Nash @tna.sh · 08/08/2025
I believe @melapress.bsky.social Login Security includes such a rule, but I would have to check.
010
Reposted by Tim Nash
Post Status @poststatus.com · 07/08/2025
Join us live in 15 minutes for a discussion about accessibility with Piccia Neri and Michelle Frechette. This week's topic is Layout. Future topics include: Legislation, Captions, Social Posts, Data Visualization, and Animations. www.youtube.com/watch?v=fkfNIMQnQME
Get It Seen: The simplest way to accessible design.
Limited series podcast with Michelle Frechette and Piccia Neri

Beginning July 10
9am ET // 3pm CEST
On the Post Status YouTube Channel

Image includes black and white headshots for Michelle and Piccia, and the Post Status logo.
022
Tim Nash @tna.sh · 05/08/2025
Setting up a new blog/article section of a site, do you add comments on posts yay or nay?
201
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 04/08/2025
We shall be LIVE, so very, very LIVE in about 90 mins for 'This Week in #WordPress'. This week I'm with Mark Westguard, Jesse Friedman, Marc Benzakein. Starts at 2pm UK time. See you there? wpbuilds.com/live
wpbuilds.com
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
111
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 04/08/2025
"All About Email", Issue 201 is out now! My guest author Sarah Gallardo takes us on a hugely comprehensive journey. Accessibility isn’t just compliance; it’s clarity, usability, and better results. Start building better emails with small, meaningful changes. You can read the full newsletter now. 👇
newsletter.allabout.email
Issue #201 All About Email
Accessibility isn’t just compliance; it’s clarity, usability, and better results. Start building better emails with small, meaningful changes.
123
Reposted by Tim Nash
Rob Cairns @robcairns.bsky.social · 14/07/2025
@tna.sh and I talk about laws that impact cell phone privacy and his new course. stunningdigitalmarketing.com/episode-571-...
stunningdigitalmarketing.com
Episode 571 Security With Tim Nash Cell Phone Privacy and Tim's New Course - Stunning Digital Marketing
Show Summary This audio transcript features an interview with Tim Nash, a WordPress security expert, on the SDM Show, hosted by Rob Cairns. The discussion initially explores cell phone privacy and the...
011
Tim Nash @tna.sh · 14/07/2025
Registering is technically free though at the moment a little pointless if not purchasing though not in the future. Once registered the sales page has the current price on it. But it is all a little clunky :(
000
Tim Nash @tna.sh · 14/07/2025
It is mentioned in a few places but Critically not the register page for reasons... for today. Due to a really bad UX design people merging from the presale hit that page and I didn't want to confuse them. Once the majority of people have done I will put the price back more clearly on that page.
110
Tim Nash @tna.sh · 14/07/2025
What is a WordPress User? wpsecurity101.com/lesson/what-... Check out the free lesson from the wpsecurity101.com course No signup, no email gate straight access to the lesson. You can check out the other free lessons as well.
wpsecurity101.com
What is a user?
Summary Transcript Resources What is a user? Let us unpack what a user really is in WordPress, not just a person, but a collection of database records stored across two key tables: Quick question.
110
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 10/07/2025
This week's Top 3 Links from Loop WP, Issue 165: 1) Personalize WP Pro - personalizewp.com/blog/announc... 2) WP Security 101 - wpsecurity101.com/?utm_source=... 3) WordPress Legal Updates - www.delta.blog/wordpress-le... Feel free to read the full newsletter. 👇
newsletter.loopwp.com
Issue #165 Loop WP
Ollie Pro turns 1, PersonalizeWP Pro goes free, and WP Security 101 launches, and there are significant updates in WordPress tools and resources this week!
132
Tim Nash @tna.sh · 10/07/2025
I really don't want a games company to be collecting my official documentation :/ the only person to DM me is @nathanwrigley.com so I think I will just pass and let him message me on Slack instead. www.theverge.com/news/704468/...
theverge.com
Bluesky is rolling out age verification in the UK
Bluesky users in the UK can verify their age using their face, ID, or payment card.
220
Tim Nash @tna.sh · 10/07/2025
What a morning, I did not have video uploading troubles booked in this morning. I had this sweet BunnyCDN setup but its all gone a bit to pot so running to plan B.
100
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 09/07/2025
🚨 Issue 165 of "Loop WP", my newsletter about WordPress, is out now! This week: Ollie Pro turns 1, PersonalizeWP Pro goes free, and WP Security 101 launches, and there are significant updates in WordPress tools and resources this week! Feel free to read the newsletter. 👇
newsletter.loopwp.com
Issue #165 Loop WP
Ollie Pro turns 1, PersonalizeWP Pro goes free, and WP Security 101 launches, and there are significant updates in WordPress tools and resources this week!
266
Tim Nash @tna.sh · 09/07/2025
To enrol, simply visit wpsecurity101.com and click Register my Interest and you will be taken to a super secret sign up page...
wpsecurity101.com
WP Security 101 with Professional Doomspeaker Tim Nash
Join Tim as he teaches you and many others the WordPress Security Fundementals in this brand new WP Security Course.
000
Tim Nash @tna.sh · 09/07/2025
Calling all WordPress professionals be you a site admin, Developer or SysAdmin. Tomorrow is the release of Module 2 of WPsecurity101 all about USERS! That means today is the last chance to bag yourself a bargain and get the course for £145 instead of £195.
131
Reposted by Tim Nash
Elliott Richmond @elliottrichmond.co.uk · 09/07/2025
Kate & Tom’s WordPress Block Theme Rebuild – Part 5: Bug Tracking, Block Patterns & WP-CLI Imports youtu.be/mKdVaZEVV8I
youtu.be
Kate & Tom’s WordPress Block Theme Rebuild – Part 5: Bug Tracking, Block Patterns & WP-CLI Imports
YouTube video by Elliott Richmond
021
Tim Nash @tna.sh · 08/07/2025
The course goes live on Thursday, but you can pre-buy with a hefty discount just by going and "register your interest" it will take you to the super secret register page.
100
Tim Nash @tna.sh · 08/07/2025
Payments are handled by Stripe, nothing fancy there hosted checkout and then you are returned. A background process then updates Email Octopus which I use for email marketing and Freeagent for accounting.
100
Tim Nash @tna.sh · 08/07/2025
At it's heart Lessons and Modules are a custom post type and taxonomy respectively. The Lessons make heavy use of patterns to keep a consistent look and theme. Learners progress is tracked via "learners_meta" which is modelled on the othe WP meta tables.
110
Tim Nash @tna.sh · 08/07/2025
The irony, was I have been debugging caching issues in my purchase flow as I forgot that the caching was looking for WordPress users when it looks to bust.
110
Tim Nash @tna.sh · 08/07/2025
One of the big things about deciding not to use an existing LMS and building something is I get to rethink the "norms" Why do Membership and LMS make WordPress users, what is the benefits. So wpsecurity101.com uses @auth0byokta.bsky.social to provide an authentication and session management.
130