Brent Toderash

@[email protected]
Freelance Thinker.

[Brent Toderash @toderash]

Web 3.0 is just the web rediscovering its roots.

Web 2.0 is an aberration whose initial promise ultimately failed to deliver, creating Tech Bros instead.

[Joost de Valk @jdevalk]

Launching https://t.co/36UBUXMmiq.

A platform-agnostic spec of what a good website does: SEO, accessibility, security, agent-readiness, performance, privacy, i18n.

Every claim cites a source. Ships with a checklist, llms.txt, MCP server, and Agent Skill.

Free. Open Source.

[Brent Toderash @toderash]

@ragojose Old enough to not consider this all that old - it has a GUI! I did really like Fireworks though, too bad it was acquisition-killed.

[Brent Toderash @toderash]

@ajaydsouza @briancoords Haven't dug into the code, but have thought about this some. Ideally, the secret can't be in the same location, or is itself encrypted with a passphrase, but that'd require manual input so not realistic for a lot of APIs. Key rotation could perhaps decrease exposure.

[Brent Toderash @toderash]

@MarkJSzymanski Congrats, Mark! - on the birth of your son, not the domain name! :P

[Brent Toderash @toderash]

@ajaydsouza @briancoords Good thought, but unless you're doing something besides the salt, it could be trivial to decrypt on a compromised site. You must assume if they can get the db, they can get everything: iow, always assume that if you're hacked a little bit, you're hacked completely.

[Brent Toderash @toderash]

@briancoords Raising a security concern is rarely just FUD. The issue is that AI keys are *worth* the effort, as others have noted. WP has no secrets manager or sandbox, so a compromised plugin roots the site: your API key is as secure as your weakest plugin or theme.

[Oliver Sild @OliverSild]

WordPress 7.0 combined with plugin vulnerabilities = free AI tokens. There will be an absolute rush by hackers to steal API keys.

[Brent Toderash @toderash]

@TaraBull Yes, but also: If you can't afford to pay your staff a living wage...

[de Adder Canada @deAdderCanada]

The Hill Times

[Brent Toderash @toderash]

@austinginder Love this concept, similar to repo-health scoring initiatives elsewhere. Would love to chat about surfacing some of the data in https://t.co/p2hc6LGgwE for use in assigning a Trust Score with shared objectives in supply chain security. Hit me up via DM if you're open!

[Brent Toderash @toderash]

@Surendar__05 There is only Vim.

[Brent Toderash @toderash]

@TechByTaraa None of the above.

[Oliver Sild @OliverSild]

Supply chain hijacking is creeping into WordPress ecosystem. Second case within a month.

https://t.co/vErT5rkFIw

[Brent Toderash @toderash]

@Rarst It's even worse. When Matt went nuclear on WPE, I said yep, that's the natural outcome of 5ftf - saw it in 2014 & actually surprised it took so long. The only way to "fix" it is to just kill it. It's a fundamental attack on Freedom 0 of the GPL.

[Brent Toderash @toderash]

@zamoose @photomatt That doesn't sound right, don't think that was Linus. HG is not a spiritual successor to SVN; its architecture is more similar to Git than SVN, but Linus still believes Git to be the better tool. SVN was the spiritual successor to CVS, which Linus hated with a passion (his words)

[Brent Toderash @toderash]

@jamesckemp @photomatt Centralized control. Of course, you have to view that as an actual benefit -- but that's why I say SVN was built for the Cathedral, while Git was built for the Bazaar.

[Brent Toderash @toderash]

@photomatt Linus hated SVN, which is why the kernel's "version control" at that time was devs emailing patches to one another. He refused any version control system that wasn't designed for distributed work, which is why he created git. SVN was designed for the Cathedral, not the bazaar.

[Spaceballs The X Account @Grunt2A]

Now that Artemis II has launched we have 10 days to get everyone on Earth a Planet of the Apes costume so we can do something hilarious when the astronauts return 😁

[Open Channels FM Podcast Network @OpenChannelsFM]

In the continuation of our series of day 2 at the @cloudfest Hackathon 2026 we caught up with @karimmarucchi, @toderash and @bennimack, key figures in the FAIR / @typo3 hackathon project. #cfhack #cfhack2026 #cloudfest

https://t.co/RYlBNQZhwU

[Brent Toderash @toderash]

@BOSSportsGordo It's easier to manoeuvre with rear-wheel steering, especially if you don't have an optimal approach. This is why forklifts are designed that way: you get a tighter turning radius.