#wordpress 2018-02-06

2018-02-06 UTC
tantek and prtksxna joined the channel
[eddie] and [miklb] joined the channel
#
[miklb]
very, very curious that.
#
GWG
Hello, [miklb]
#
[miklb]
good evening
#
GWG
How goes?
#
[miklb]
good. mostly this old house stuff still.
#
[miklb]
Saturday had to roll back production and apply a hot fix, but Sunday I was able to get a working system. Still a few bugs to work out 🙂
#
GWG
Glad to hear.
#
GWG
I've been working on UI
#
[miklb]
Trying to catch up on some reading now, took a peak at GitHub activity. Haven’t read through any of the code changes yet.
[eddie], tantek, prtksxna, jeremycherfas, [hans], [colinwalker], [kevinmarks], [miklb], dougbeal|mb1, gRegorLove, GWG and [cleverdevil] joined the channel
#
tantek
could someone who understands the issues about WP vs PHP 5.2 vs the WP Update server summarize / tl;dr this tweetstorm? https://twitter.com/CiPHPerCoder/status/960772929083662336
#
@CiPHPerCoder
If you've read this entire thread, thank you for bearing with me. I have a lot of work before me, but I'd like to think that at the very least my effort won't be wasted (as it is with WordPress).
(twitter.com/_/status/960772929083662336)
#
tantek
no sorry that was a subthread (substorm?). I meant this tweetstorm: https://twitter.com/CiPHPerCoder/status/960760569740570624
#
@CiPHPerCoder
I've drafted several blog posts in the past week and scrapped them all. None of them feel important enough to write about, let alone publish.
(twitter.com/_/status/960760569740570624)
#
@CiPHPerCoder
Imagine circa-2012 Anonymous getting their hands on enough 0days (or getting lucky and discovering enough misconfigurations) to get into the update server for WordPress and poisoning the update file with their malware. That's a very basic supply-chain attack.
(twitter.com/_/status/960764204595769344)
#
tantek
Oooh more importantly - apparent **manual update** required for all WP 4.9.3 installs (to 4.9.4) heads-up WordPress users/admins! https://make.wordpress.org/core/2018/02/06/wordpress-4-9-4-release-the-technical-details/
[miklb] joined the channel
#
[miklb]
yeah, 4.9.2 came out yesterday and broke auto-updates so 4.9.3 was released today and requires manual afaik to get back auto-updates both were maintenance releases
#
[miklb]
er, 4.9.3 yesterday, 4.9.4 today
[eddie], [tantek], [kevinmarks] and tantek joined the channel