←back to thread

Secure Custom Fields by WordPress.org

(wordpress.org)
172 points ValentineC | 10 comments | 12 Oct 24 18:38 UTC | HN request time: 0.65s | source | bottom
Show context
CharlesW ◴[12 Oct 24 19:27 UTC] No.41821726[source]▶
So WordPress-the-org — which is effectively Matt, as far as I can tell — just Sherlocked a developer's plug-in using the developer's own code, ostensibly as retribution for a security issue that the developer had already fixed. https://www.advancedcustomfields.com/blog/acf-6-3-8-security...

What am I missing?

replies(5): >>41821790 #>>41821829 #>>41821872 #>>41821880 #>>41823351 #
photomatt ◴[12 Oct 24 19:41 UTC] No.41821829[source]▶
This release fixes a separate security vulnerability from the original update.
replies(5): >>41821983 #>>41822001 #>>41822749 #>>41823899 #>>41825727 #
1. ankleturtle ◴[12 Oct 24 21:21 UTC] No.41822749[source]▶
You are abusing the community for your own gain. Stop!
replies(2): >>41822912 #>>41825644 #
2. geerlingguy ◴[12 Oct 24 21:40 UTC] No.41822912[source]▶
What is he gaining at this point?
replies(4): >>41822931 #>>41823426 #>>41825661 #>>41831870 #
3. ◴[12 Oct 24 21:43 UTC] No.41822931[source]▶
4. ankleturtle ◴[12 Oct 24 22:53 UTC] No.41823426[source]▶
Harm of WP Engine.
replies(2): >>41823930 #>>41824547 #
5. acherion ◴[13 Oct 24 00:06 UTC] No.41823930{3}[source]▶
At the cost of also harming WP. Well done Matt. clap clap (these are sarcastic claps)
replies(1): >>41824201 #
6. minimaxir ◴[13 Oct 24 00:52 UTC] No.41824201{4}[source]▶
There's a reason mutually-assured destruction is abbreviated MAD.
7. kuschku ◴[13 Oct 24 01:56 UTC] No.41824547{3}[source]▶
Harming WPEngine is not even beneficial to Wordpress anymore.

With the level of revenge matt is applying you'd think WPEngine murdered his dog or something.

It just makes no sense.

8. bigiain ◴[13 Oct 24 06:21 UTC] No.41825644[source]▶
So far as I can tell, when Matt talks about "the WordPress Community", he means:

  - Matt
  - the people who didn't quit Automattic last week
  - _maybe_ the WP core developers who don't work at Automattic, so long as they keep their criticisms to themselves
And the community of people who _use_ WordPress to run their websites, and the people who help them to do that, and the 3rd party plugin and theme developers who make WP work for so many different kinds of websites - can all go and get fucked.
9. bigiain ◴[13 Oct 24 06:23 UTC] No.41825661[source]▶
Avoiding the embarrassment of backing down and admitting he is wrong.

Apparently that's worth burning down his life's work and legacy for.

10. throw16180339 ◴[13 Oct 24 21:38 UTC] No.41831870[source]▶
It gives him an excuse to behave the way he's always wanted to.