IDF reveals the bloody Hamas tunnel where Hersh Goldberg-Polin and other hostages were held and killed – New York Post

IDF reveals the bloody Hamas tunnel where Hersh Goldberg-Polin and other hostages were held and killed  New York Post Israel releases video of a Gaza tunnel where it says Hamas militants killed 6 hostages  The Associated PressBefore Being Killed, Israeli Hostages Held in Tiny Tunnel With Bottles for a Bathroom  The Wall Street JournalIsraeli Military Reveals Brutal Conditions 6 Hostages Endured in a Gaza Tunnel  The New York Times

US election polls 2024: Who is ahead – Harris or Trump? – BBC.com

US election polls 2024: Who is ahead – Harris or Trump?  BBC.comTrump-Harris race neck and neck nationally in new survey, pollster sees ‘warning sign’ for Dems  Fox NewsKamala Harris Dealt Polling Blow in Pennsylvania Ahead of Trump Debate  NewsweekTrump and Harris Neck and Neck After Summer Upheaval, Times/Siena Poll Finds  The New York TimesKamala Harris’ Campaign Is Not Working  Slate

Apple must pay $14 billion tax bill to Ireland, EU court rules – Axios

Apple must pay $14 billion tax bill to Ireland, EU court rules  AxiosIreland now needs to decide what it will do with 13 billion euros in back taxes from Apple  CNBCE.U. Top Court Rules That Apple Must Pay Billions In Back Taxes  ForbesGoogle and Apple Face Billions in Penalties After Losing E.U. Appeals  The New York TimesGoogle loses fight against $2.7 billion EU antitrust fine  Reuters

WordPress.com and Developers: Roadmap Update

When I stepped in to run WordPress.com while Automattic CEO Matt Mullenweg was on sabbatical, my mission was to make WordPress.com the best and fastest host for WordPress developers and agencies. We cheekily called this initiative “Developers, Developers, Developers,” a reference to a certain point in tech history (wink wink, nudge nudge).

Since then, we’ve shipped a number of developer-focused features like GitHub deployments, a full hosting dashboard, and Studio, an open source local development environment. It’s been awesome to see the feedback rolling in:

WordPress.com has been crucial to my agency’s growth. Its intuitive UI allows me to quickly create sleek, functional websites for my clients, and their reliable hosting and support enable me to rest easy, knowing my sites are in good hands. —Brian Lalli, President @ moonrooster.com

WordPress.com really stands out with its exceptional performance and strong security. It’s a versatile platform that’s great for users at any skill level, and their support team is always incredibly helpful. For managed sites, we definitely think WordPress.com is the way to go. —Sonia Gaballa, Partner @ nudge.design

We aimed to provide clients with a reliable hosting service we could endorse without hesitation, ultimately resulting in satisfied clients. We found that service with WordPress.com. —Ajit Bohra, Founder @ lubus.in

As we round the corner into the final quarter of 2024, I’d like to offer a sneak peek into three themes guiding our work: performance, augmentation, and workflows. We hope you’re just as excited about them as we are, and we welcome you to join us in the journey by testing and providing feedback.

Answers for the age-old question: “Why is my site slow?”

WordPress sites should be fast, and it’s not always an easy thing.

When writing custom code, incorporating third-party libraries, or inheriting an existing site, it can be difficult to track down what’s causing poor performance and low scores. Is it a certain plugin, large photo sizes, slow code, or a combination of the three?

Our upcoming speed test tool innovates upon existing approaches to offer a set of performance recommendations tailored to your unique WordPress site. It will be totally free to use, and you’ll be able to sign up for regular updates. These notifications will come in handy as you change plugins, properly size photos, and optimize code because you’ll be alerted if anything changes unexpectedly.

In the not-so-distant future, the speed test tool will also be directly integrated into your WordPress.com dashboard. You’ll be able to see your performance across all of your sites, and better understand correlations between site changes and performance.

Interested in a free site performance consultation? Connect with me on LinkedIn or Twitter / X and I’d be happy to give you a demo!

Giving developers cybernetic powers

Large Language Models (LLMs) are transforming all types of knowledge work. Was that sentence written by me or ChatGPT? You’ll never know!

At WordPress.com, we think of LLMs as a powerful way to augment developers’ work and give them superhuman-like powers. They’re great at doing things for people—writing blog post outlines, generating code, and creating images—but we think they’re also great for teaching and educating. 

As one practical example, Studio is getting an AI assistant. The Studio Assistant is trained on WordPress-specific documentation and has access to a bunch of context about your site. When you ask it for help, like “update all my plugins using WP-CLI,” it will put together an answer based on your site specs as well as provide an explanation for the answer. 

Download Studio for free today, connect your WordPress.com account (free or paid), and hit me up on on LinkedIn or Twitter / X to get a sneak peek!

Speeding up your daily grind

When you’re developing on an open source platform like WordPress, there are hundreds (if not thousands) of different tools and workflows you can use to develop and ship websites. We’re focused on fostering quick and easy end-to-end workflows that help you deliver results that your clients love.

For example, you can now easily import sites into or export sites out of Studio. This is our first step towards a full, one-click WordPress.com syncing mechanism. Site cloning and a GitHub integration are also on our radar.

You also may have caught my tweet yesterday about our new Create Content Model prototype, which allows anyone to define custom post types and fields natively in the Block Editor.

Native content modeling for WordPress?

Not quite, but getting closer!

Check out Create Content Model, our latest @wordpressdotcom prototype, and let us know what you think! https://t.co/VJCp3VVIGc pic.twitter.com/Kp9alRqRmC

— Daniel Bachhuber (@dbchhbr) September 9, 2024

“GAME CHANGING!” and “Incredible!” were two of the dozens of positive reactions. We hope that our prototype spurs productive conversations within the core community.

We’re also making it easier for you to make money. For example, through our Automattic for Agencies program, freelancers and agencies can create a custom cart with a hosting plan and/or plugins, and then send the link to the client to check out. No need to worry about handling client credit card information or billing clients separately—it’s all done within a slick, easy-to-use interface.

What do you want to see next?

This is just a quick preview of some of the big, impactful improvements you’ll be able to use soon as someone who hosts WordPress sites on WordPress.com. We’d love to know what other pain points you’d like to see us solve or features you’d like us to build! Either:

Leave a comment below.

Come see us at the WordPress.com booth at WordCamp US next week.

Connect with me on LinkedIn or Twitter/X.

Original illustrations from David Neal (aka Reverent Geek). Come get a free avatar from him at the WordPress.com booth at WCUS next week!

Djangonaut Space – New session 2024

We are thrilled to announce that Djangonaut Space, a mentorship program, is open for applicants for our next cohort!

Djangonaut Space is holding a third session this year! This session will start on October 14th, 2024. We are accepting applications until September 14th, 2024. More details can be found in the website.

Djangonaut Space is a free, 8-week group mentoring program where individuals will work self-paced in a semi-structured learning environment. It seeks to help members of the community who wish to level up their current Django code contributions and potentially take on leadership roles in Django in the future.

“I signed up for this program with the goal of starting my journey as a contributor, but I ended up gaining so much more. In this community, I found incredible people who not only guide you toward solutions but also encourage and celebrate every achievement along the way.” – Raffaella, Djangonaut

If you have questions, they are holding an AMA session on Zoom next week. See their social media account for more details:

Twitter/X
Mastodon

Developer Q&A: John Kostak of Web Dev USA

John Kostak has been building websites for longer than most social media networks have even been around. So splashy features don’t interest him much—he’s far more into performance, reliability, and compatibility. Which is why he and his company, Web Development USA, have been using WordPress.com from the start. 

In this fun Q&A, John shares more about his WordPress journey, what matters most to him as a developer, and a few of his favorite sites (in spite of the fact that it was like making him pick his favorite child). Note: The interview has been edited for clarity and length.

If John’s love for WordPress.com has you reconsidering your current hosting environment, you can learn more about our specs and get started at WordPress.com/hosting

Jeremy: How long have you been using WordPress and WordPress.com?

John: I have been building websites for about 15 or 16 years and started in a corporate environment for a large company. We never had an internal digital team and we basically created our own digital agency within this big corporate company. And that was pretty innovative back then. 

Then out of that, I spun off and started Web Development USA. That began in 2015, and so next year will be our 10th year, which is crazy to think about. But it went quickly because we really do enjoy this. And we look for people who find this to be a passion, as we do. 

Jeremy: Have you been using WordPress.com the entire time?

John: Yes we have. We started doing some testing with SiteGround and Elementor hosting, but we still like WordPress.com the best. You know you can go through a McDonald’s three miles away or 10,000 miles away on the other side of the planet and your lunch is going to be reasonably what you expect. That’s what WordPress.com feels like with its consistency and the familiarity of the UI and getting around. 

Jeremy: What do you like most about WordPress.com? Is it about ease of use on your side as a builder? Convenience for the customer? Both?

John: Resiliency. With Jetpack at the core and all the updates that it does, we just don’t have that much of a risk of things exploding, especially when we bring contractors in and out. We can always fall back to a previous state, and we have an exact record of it. We can get into PHP code. We can get into the very, very back end if we want. We can really be dangerous if we want, without being too afraid of it. 

Overall, it is certainly the all-around performance, security, and cadence that you use for backing up sites. 

Jeremy: What are some of your favorite features when building sites on WordPress? Do you have go-to themes, blocks, plugins, etc.?

John: Well, it’s changed over the years. We used to use standard old-school wireframe and theme templates that were very basic. And then we went into more “custom designer” mode, I would say, with templates and flashy designs. We graduated from Walmart t-shirts to Gucci t-shirts. And, you know, we enjoyed that for a while. 

Now we’re going back to robust wireframes and doing more from scratch. What’s more important now is really the entire stack, including performance and compatibility. You know, we just don’t have time to troubleshoot when we have some whizzy feature on the site. We don’t have time to go in and look for why the thing is down. So, we are sort of simplifying certain things and then standardizing on a certain stack.

Jeremy: What excites you about the future of WordPress.com? Are there any new features you’re especially excited to try out and use?

John: Honestly, we just don’t have time to get into a lot of that. We don’t look much to experimental features or anything like that. We’re trusting that by the time the feature or tool makes its way into being a standard of WordPress, it will be tried and true. We’re not looking for early adopter types of things anymore. 

The reality is that our value add is more about custom coding for integrations—maybe for a particular reservation system that has to shake hands and stay for a while on the site before it goes out to a third-party point of sale. It takes some custom coding there. That’s where our focus has really been—managed services and then a lot more programming. We’ve been onboarding more programmers in the last 18 months than we did the first eight years of the company.

Jeremy: Do you have a few favorite client sites that you can share?

John: Well, Jeremy, it’s like asking you who’s your favorite child. 

Jeremy: Depending on the week, I can give you a pretty good answer.

John: Yeah, that’s a good point! Sure, I have a few:

TuckMusic.com

appalachian-air.com

kdmconsults.com

Get started at WordPress.com today 

Even though WordPress.com provides the freedom and tools to create stunningly beautiful and innovative websites, that’s not why developers choose us. Folks like John Kostak rely on WordPress.com because we have the most performant, secure, and compatible infrastructure out there. If you made it this far, you already know that you don’t have to take our word for it. 

Learn more about our top-notch hosting and get started: 

The Secrets of One of the World’s Largest Ad-Free Blogs

Since moving PostSecret to WordPress.com in 2013, Frank Warren’s iconic platform has empowered millions to share their secrets in a safe place. In the last ten years, that simple mission has propelled PostSecret to become one of the most highly trafficked ad-free blogs on the planet. In this video, Frank dives into the origins of his project and how Automattic’s tools help bring the mission to life.

Learn more about PostSecret and get an exclusive coupon when you click below:

Or, apply coupon code PostSecret15 at checkout for 15% off any plan.

Django security releases issued: 5.1.1, 5.0.9, and 4.2.16

In accordance with our security release policy, the Django team
is issuing releases for
Django 5.1.1,
Django 5.0.9, and
Django 4.2.16.
These releases address the security issues detailed below. We encourage all
users of Django to upgrade as soon as possible.

CVE-2024-45230: Potential denial-of-service vulnerability in django.utils.html.urlize()

urlize and urlizetrunc were subject to a potential
denial-of-service attack via very large inputs with a specific sequence of
characters.

Thanks to MProgrammer for the report.

This issue has severity “moderate” according to the Django security policy.

CVE-2024-45231: Potential user email enumeration via response status on password reset

Due to unhandled email sending failures, the
django.contrib.auth.forms.PasswordResetForm class allowed remote
attackers to enumerate user emails by issuing password reset requests and
observing the outcomes.

To mitigate this risk, exceptions occurring during password reset email sending
are now handled and logged using the django.contrib.auth logger.

Thanks to Thibaut Spriet for the report.

This issue has severity “low” according to the Django security policy.

Affected supported versions

Django main branch
Django 5.1
Django 5.0
Django 4.2

Resolution

Patches to resolve the issue have been applied to Django’s
main, 5.1, 5.0, and 4.2 branches.
The patches may be obtained from the following changesets.

CVE-2024-45230: Potential denial-of-service vulnerability in django.utils.html.urlize()

On the main branch
On the 5.1 branch
On the 5.0 branch
On the 4.2 branch

CVE-2024-45231: Potential user email enumeration via response status on password reset

On the main branch
On the 5.1 branch
On the 5.0 branch
On the 4.2 branch

The following releases have been issued

Django 5.1.1 (download Django 5.1.1 |
5.1.1 checksums)
Django 5.0.9 (download Django 5.0.9 |
5.0.9 checksums)
Django 4.2.16 (download Django 4.2.16 |
4.2.16 checksums)

The PGP key ID used for this release is Natalia Bidart: 2EE82A8D9470983E

General notes regarding security reporting

As always, we ask that potential security issues be reported via private email
to [email protected], and not via Django’s Trac instance, nor via
the Django Forum, nor via the django-developers list. Please see our security
policies
for further information.