Brent Toderash

@[email protected]
Freelance Thinker.

[Brent Toderash @toderash]

Web 3.0 is just the web rediscovering its roots.

Web 2.0 is an aberration whose initial promise ultimately failed to deliver, creating Tech Bros instead.

[Brent Toderash @toderash]

Word of the day: "PHPocalypse"

[Brent Toderash @toderash]

I dropped a piece on The Future of the CMS, building on a number of ideas surfacing in multiple #CMS ecosystems including #TYPO3 #Drupal #EmDash #WordPress amid emerging AI realities. Two parts, but not long, give it a read. https://t.co/wNWpJTdfSm

[Dave Winer @davewiner]

BlackRock’s latest SEC filing values its Automattic shares at $14.33 per share. They originally invested at $85 a share in 2021. That means their market cap has dropped from $7.5 billion to $1.2 billion.

I think that's probably why the CEO lost his job.

https://t.co/EDbHu9njGJ

[Brent Toderash @toderash]

@remkusdevries @dhh Curious, why this distro? I've been on a Linux desktop for 20+ years now, usually recommend Mint these days for new users; it's my daily driver as well.

[Brent Toderash @toderash]

@remkusdevries 1986, 2006, ...sh*t, I'm due again.

[Brent Toderash @toderash]

When Open Source is not enough: Redux. Open governance & open access matter, especially in an era where digital sovereignty is becoming the concern it always deserved to be. @jdevalk gets it - read this:

[Joost de Valk @jdevalk]

When Dries wrote about License-only versus Stewarded Open Source, I knew I had to write a follow-on to that:

https://t.co/V3o0CXpIbf

[Brent Toderash @toderash]

Contrarian take: CMSs should stop making it easier to draft AI-generated content within the CMS. On behalf of the entire internet, we don't want more AI Slop.

[Brent Toderash @toderash]

@jdevalk I was just about to ask if there was anything from OKF/ARD that would trigger an update to https://t.co/joQLq3511m

[Brent Toderash @toderash]

@innerwebs Are you sure it's not Astro+ headless WordPress?

[Joost de Valk @jdevalk]

Launching https://t.co/36UBUXMmiq.

A platform-agnostic spec of what a good website does: SEO, accessibility, security, agent-readiness, performance, privacy, i18n.

Every claim cites a source. Ships with a checklist, llms.txt, MCP server, and Agent Skill.

Free. Open Source.

[Brent Toderash @toderash]

@ragojose Old enough to not consider this all that old - it has a GUI! I did really like Fireworks though, too bad it was acquisition-killed.

[Brent Toderash @toderash]

@ajaydsouza @briancoords Haven't dug into the code, but have thought about this some. Ideally, the secret can't be in the same location, or is itself encrypted with a passphrase, but that'd require manual input so not realistic for a lot of APIs. Key rotation could perhaps decrease exposure.

[Brent Toderash @toderash]

@MarkJSzymanski Congrats, Mark! - on the birth of your son, not the domain name! :P

[Brent Toderash @toderash]

@ajaydsouza @briancoords Good thought, but unless you're doing something besides the salt, it could be trivial to decrypt on a compromised site. You must assume if they can get the db, they can get everything: iow, always assume that if you're hacked a little bit, you're hacked completely.

[Brent Toderash @toderash]

@briancoords Raising a security concern is rarely just FUD. The issue is that AI keys are *worth* the effort, as others have noted. WP has no secrets manager or sandbox, so a compromised plugin roots the site: your API key is as secure as your weakest plugin or theme.

[Oliver Sild @OliverSild]

WordPress 7.0 combined with plugin vulnerabilities = free AI tokens. There will be an absolute rush by hackers to steal API keys.

[Brent Toderash @toderash]

@TaraBull Yes, but also: If you can't afford to pay your staff a living wage...

[de Adder Canada @deAdderCanada]

The Hill Times

[Brent Toderash @toderash]

@austinginder Love this concept, similar to repo-health scoring initiatives elsewhere. Would love to chat about surfacing some of the data in https://t.co/p2hc6LGgwE for use in assigning a Trust Score with shared objectives in supply chain security. Hit me up via DM if you're open!

[Brent Toderash @toderash]

@Surendar__05 There is only Vim.