Steve Jones

1.9K posts

Steve Jones banner
Steve Jones

Steve Jones

@stevejonesdev

@EqualizeDigital Owner & CTO. Accessibility Checker: https://t.co/lKKVe3Ye2L

Katılım Nisan 2022
2.2K Takip Edilen1.1K Takipçiler
Sabitlenmiş Tweet
Steve Jones
Steve Jones@stevejonesdev·
🔄 Accessibility Checker updates are live! Free v1.40.0 • Updated frontend highlighter UI • Email report opt-in for site summaries • Screen reader text format support in Block Editor Pro v1.22.0 • Weekly email report opt-in • Import/Export settings as JSON • Improved scan handling and license recovery #WordPress #Accessibility #WPPlugin #PluginUpdate #a11y
Steve Jones tweet media
English
1
1
2
209
Steve Jones
Steve Jones@stevejonesdev·
I’d look at it more as practicing due diligence around data/privacy and the broader implications of enabling unrestricted and untraceable AI on a production server. For companies like ours we need to first validate if our current terms and policies cover this. These are immature implications that we should have open discussion about.
English
0
0
1
50
Katie Keith
Katie Keith@KatieKeithBarn2·
@briancoords I’ve been wondering the same. Feels like an excuse to me.
English
1
0
3
652
Brian Coords 💻
Brian Coords 💻@briancoords·
Can someone explain the FUD around WordPress storing AI API keys to me? How is this different than storing Stripe or other API keys? Genuine question.
English
20
2
26
12.2K
Steve Jones
Steve Jones@stevejonesdev·
@briancoords I think people are reacting to the blast radius more than the storage itself.
English
0
0
0
170
Kevin Geary
Kevin Geary@thekevingeary·
I keep seeing posts about a "seamless" WordPress 7 launch. Truth be told, it broke tons of our customer's sites. Why? Because they added a completely unnecessary .wp-site-blocks wrapper around header/main/footer. Why? Who knows. But reports of smooth sailing are not accurate. It probably doesn't affect simple sites that are already full of divception and messy CSS. But sites that are built around clean code and advanced CSS targeting for various use cases expect a consistent DOM and dropping a wrapper around major landmarks in body is not without consequence.
English
7
1
41
4.2K
Free Pearsonified
Free Pearsonified@thepearsonified·
@stevejonesdev @AwesomeMotive EDD cron job conflicts causing massive output in error logs Seems to have an effect on the processing side, too—page loads where EDD are involved are dismal (including the WP Admin) May only be an issue on sites that have run it for a long time through diff versions, I dunno
English
1
0
0
73
Free Pearsonified
Free Pearsonified@thepearsonified·
Since last summer, Easy Digital Downloads has made one of my remaining WordPress sites slow AF @AwesomeMotive's EDD team hasn't done anything about it Just another example of how the "WordPress way" breaks down over time Sites will only get slower and more complicated
English
3
0
8
1.2K
Steve Jones
Steve Jones@stevejonesdev·
@Bovelett Waking up in the middle of the night and making sure my agents are still running is becoming a problem. 😅
English
0
0
1
53
Command Code
Command Code@CommandCodeAI·
Saturday check-in: What are you working on right now? Show us a screenshot or drop a link
English
25
0
30
3.3K
Ross Morsali
Ross Morsali@rossmorsali·
I'm a bit late to the party, just upgraded my mac to Tahoe... what on earth is this soup of a UI?
Ross Morsali tweet media
English
2
0
1
341
Marco Almeida
Marco Almeida@MarcoAlmeidaPT·
@stevejonesdev "get devs to code the way you want" -> I'm not related to this. I was testing a plugin for an integration for a customer of mine. These guys know nothing of WP/Woo, yet they decided to code their own plugin: no repo, no updates, just a zip file for download on their website.
English
1
0
0
66
Marco Almeida
Marco Almeida@MarcoAlmeidaPT·
I suffer too much. This is what happens when you hire someone who knows nothing about WordPress to build your plugin. Not only are they not i18n'ing, but they're also using i18n functions just for the sake of wasting resources: with translated strings and no textdomain
Marco Almeida tweet media
English
8
0
4
1.1K
Steve Jones
Steve Jones@stevejonesdev·
@MarcoAlmeidaPT 👀 Also, a security check can be run in CI on the repo. Security doesn't pass, your code doesn't get in.
English
0
0
1
16
Marco Almeida
Marco Almeida@MarcoAlmeidaPT·
@stevejonesdev Also, you don't want to see the (very surface) security audit Claude runned on it.
English
1
0
1
19
Steve Jones
Steve Jones@stevejonesdev·
Yeah, no true sandbox in WordPress. At the very least I’d keep the keys out of the database and define them via environment variables or a constant which I believe we can do now. I’m not sure about running any of this on a production environment. Getting ready to redo the Equalize Digital website so we’ll see.
English
1
0
1
145
Oliver Sild
Oliver Sild@OliverSild·
WordPress 7.0 combined with plugin vulnerabilities = free AI tokens. There will be an absolute rush by hackers to steal API keys.
English
13
8
63
13.9K
Katie Keith
Katie Keith@KatieKeithBarn2·
@zeeshanraza It may be dead, but it's still our biggest source of sales 🙃
English
1
0
0
86
Zeeshan
Zeeshan@zeeshanraza·
I know SEO is dead But it’s become a lot more fun after being dead I can’t contain my excitement about our new content generation process using Claude MCP Our Prompt now includes SEO guidelines (meta data schema image alt tags ) Tone and Posture (from our favorite articles) Screenshots and gifs from our image library Branded featured image Internal linking And a lot more… Next step would be to convert the natural language prompt into a json prompt I hope google allows us to play with this for a bit
English
2
0
8
567
Steve Jones
Steve Jones@stevejonesdev·
@briancoords @OliverSild At a base level some permissions layer between the requester (plugin/theme/core) and the connector. This would ensure your API key is only used for approved requesters. My phone has services (GPS, Camera, Mic, etc), but each app has to ask for permission to use them.
English
2
0
0
185
Brian Coords 💻
Brian Coords 💻@briancoords·
@OliverSild @stevejonesdev Just thinking through it, even if you could theoretically hide the keys and connections themselves outside the environment, even the ability to add PHP to a site means you could still include malicious code make the calls from the site itself.
English
1
0
2
188
Oliver Sild
Oliver Sild@OliverSild·
@stevejonesdev This would require full architecture overhaul which is very unlikely to happen in near future. If a plugin vuln allows you to read database or get admin access to a site then it’s game over.
English
3
0
7
799