WordPress forces user conf organizers to share social media credentials, arousing suspicions

October 28, 2024 at 02:36AM Organizers of WordCamps have been ordered by Automattic employees to take down social media posts and share login credentials, amidst tensions over WordPress’s control and rival WP Engine’s contributions. This has led to volunteer frustration and concerns over community engagement and autonomy, harming events like WordCamp Sydney. ### Meeting Takeaways: … Read more

WordPress.org to require 2FA for plugin developers by October

September 11, 2024 at 01:37PM Starting October 1st, WordPress.org requires two-factor authentication for accounts that can push updates to plugins and themes. This decision aims to reduce the risk of unauthorized access and supply-chain attacks. The 2FA security feature needs to be activated, and SVN-specific passwords have been added for making code changes. Technical limitations … Read more