POPULARITY
At CloudFest, Ronnie Burt discusses Gravatar's history, its integration with WordPress, recent spikes in usage from platforms like ChatGPT, and the importance of digital identity ownership.
Matt Mullenweg is the co-founder of WordPress, the open source platform powering a staggering 43% of the internet. He also serves as CEO of Automattic—the parent company of brands like WordPress.com, WooCommerce, and Tumblr—which is worth over $7 billion, with over 1,700 employees across 90 countries. In this episode, he discusses some of the most controversial topics surrounding WordPress, Automattic, and the broader open source community.—What you'll learn:• Matt's response to public criticism• Why products like Meta's Llama are “fake open source”• How his team is turning around Tumblr after acquiring it for just $3 million (after Yahoo bought it for $1.1 billion)• Why he mortgaged his home to fund San Francisco's iconic Bay Lights project• Matt's philosophy: “Don't just build a product; build a movement”• Why open source matters: “If the Founding Fathers were around today, they'd be open source advocates”—Brought to you by:• WorkOS—Modern identity platform for B2B SaaS, free up to 1 million MAUs• Vanta—Automate compliance. Simplify security.• Loom—The easiest screen recorder you'll ever use—Find the transcript at: https://www.lennysnewsletter.com/p/the-creator-of-wordpress-opens-up-matt-mullenweg—Where to find Matt Mullenweg:• X: https://x.com/photomatt• LinkedIn: https://www.linkedin.com/in/mattm/• Instagram: https://www.instagram.com/photomatt/• Website: https://ma.tt/—Where to find Lenny:• Newsletter: https://www.lennysnewsletter.com• X: https://twitter.com/lennysan• LinkedIn: https://www.linkedin.com/in/lennyrachitsky/—In this episode, we cover:(00:00) Introduction to Matt Mullenweg(05:10) Matt's career journey(11:15) Bay Lights project and philanthropy(17:28) How Matt got involved with open source(23:25) Why products like Meta's Llama are “fake open source”(27:14) The future of open source and how to get involved(35:25) Building a successful online community(39:12) The WP Engine controversy(50:24) Facing criticism and controversy(55:29) Addressing community concerns(01:08:29) Forking Advanced Custom Fields(01:11:15) The role of social media and public perception(01:16:43) Acquiring and reviving Tumblr(01:24:25) Automattic's acquisition strategy(01:28:51) Final thoughts and future plans—Referenced:• WordPress: https://wordpress.com/• Automattic: https://automattic.com/• CNET: https://www.cnet.com/• Akismet: https://akismet.com/wordpress/• Jetpack: https://jetpack.com/• Toni Schneider on LinkedIn: https://www.linkedin.com/in/tonischneider/• WooCommerce: https://woocommerce.com/• Beeper: https://www.beeper.com/• Day One: https://dayoneapp.com/• Simplenote: https://simplenote.com/• Pocket Casts: https://pocketcasts.com/• Creative Commons: https://creativecommons.org/• Audrey Capital: https://audrey.co/• Stripe: https://stripe.com/• SpaceX: https://www.spacex.com/• Calm: https://www.calm.com/• August: https://august.com/• Daylight Computer: https://daylightcomputer.com/• Keys Jazz Bistro: https://keysjazzbistro.com/• Joomla: https://www.joomla.org/• Drupal: https://new.drupal.org/• Shopify: https://www.shopify.com/• Wix: https://www.wix.com/• Squarespace: https://www.squarespace.com/• Tumblr: https://www.tumblr.com/• Gravatar: https://gravatar.com/• The Bay Lights: https://illuminate.org/projects/thebaylights/• The Bay Lights 360: https://illuminate.org/the-bay-lights-360/• Ben Davis on LinkedIn: https://www.linkedin.com/in/ben-davis-sf/• Kinder High School for the Performing and Visual Arts: https://www.houstonisd.org/hspva• Jack Dorsey: We're Losing our Free Will to Algorithms: https://www.youtube.com/watch?v=9_8NganZSFI• Marc Andreessen: https://a16z.com/author/marc-andreessen/• Bill Gurley on LinkedIn: https://www.linkedin.com/in/billgurley/• An inside look at X's Community Notes | Keith Coleman (VP of Product) and Jay Baxter (ML Lead): https://www.lennysnewsletter.com/p/how-x-built-the-best-fact-checking-system-on-the-internet• Llama: https://www.llama.com/• WordCamp US & Ecosystem Thinking: https://ma.tt/2024/09/ecosystem-thinking/• As Wall Street Chases Profits, Fire Departments Have Paid the Price: https://www.nytimes.com/2025/02/17/us/fire-engines-shortage-private-equity.html• WordCamp Asia: https://asia.wordcamp.org/2025/• Justin Baldoni Hit with Defamation Suit as PR Teams Turn on Each Other over Blake Lively's ‘It Ends with Us' Smear Campaign Allegations: https://deadline.com/2024/12/justin-baldoni-defamation-lawsuit-publicist-blake-lively-1236241784/• How WordPress Hot Nacho Scandal Shapes WP Engine Dispute: https://www.searchenginejournal.com/how-wordpress-hot-nacho-scandal-shapes-wp-engine-dispute/539069/• Gutenberg: https://wordpress.org/gutenberg/• ClassicPress: https://www.classicpress.net/• Behind the founder: Marc Benioff: https://www.lennysnewsletter.com/p/behind-the-founder-marc-benioff• Mary Hubbard on LinkedIn: https://www.linkedin.com/in/maryfhubbard/• Brian Chesky's new playbook: https://www.lennysnewsletter.com/p/brian-cheskys-contrarian-approach• Founder mode: https://paulgraham.com/foundermode.html• Cow.com: https://www.cow.com/• David Karp on X: https://x.com/davidkarp• Marissa Mayer on LinkedIn: https://www.linkedin.com/in/marissamayer/• Alibaba: https://www.alibaba.com/• WP Engine Tracker: https://wordpressenginetracker.com/• Kumbh Mela: https://en.wikipedia.org/wiki/Kumbh_Mela—Recommended book:• Maintenance: Of Everything (in progress): https://books.worksinprogress.co/book/maintenance-of-everything/addenda/page/introduction—Production and marketing by https://penname.co/. For inquiries about sponsoring the podcast, email podcast@lennyrachitsky.com.—Lenny may be an investor in the companies discussed. Get full access to Lenny's Newsletter at www.lennysnewsletter.com/subscribe
In this episode of the Post Status Happiness Hour, host Michelle Frechette interviews Taco Verdonschot from Progress Planner, a tool designed to gamify WordPress website maintenance. They highlight the tool's features, including its free and upcoming pro versions, and emphasize its role in making website upkeep engaging and fun. Taco announces a limited-time pre-launch sale, offering the planner at a discounted rate. They also discuss the importance of user feedback and community engagement, and preview upcoming content, including a discussion with Stephanie Hudson about Stellar Pay. The episode concludes with a call to action for listeners to try the Progress Planner.Top Takeaways:Gamification for Website Management: Progress Planner uses a gamified approach to motivate users to maintain and improve their websites. By assigning points for tasks like updating content, writing new posts, or fixing technical SEO issues, the plugin makes website management engaging and enjoyable. This concept mirrors successful apps like Duolingo, which transform routine tasks into rewarding challenges.Practical Features with Growth Potential: The plugin focuses on high-impact tasks that enhance website performance, such as setting up foundational site elements or optimizing content. It also plans to introduce integrations with third-party tools like JIRA and onboarding wizards, offering users more flexibility. Future features may include personalized task recommendations, progress tracking for agencies managing multiple sites, and expanded customization options, making it even more versatile.Community Feedback and Accessibility:User feedback is central to the development of Progress Planner. The team actively invites suggestions and critiques to refine the tool and better address user needs. Additionally, its pricing model—offering a pre-launch discount and a free tier—makes it accessible to a wide audience. With its colorful bird-themed branding, the plugin presents an approachable and motivating experience for website owners.Mentioned In The ShowProgress PlannerJoost van ValkMarieke van de RaktFitbitDuolingoWordCamp AsiaMarcus BurnetteTheWPWorldwordpress.orgGravatarWPSpeakers.comHero PressStephanie HudsonStellarWPStellarPay
We're your boyfriends now, Nancy! Welcome to Episode 125 of Jay of the Dead's New Horror Movies, The Gold Standard of Horror Movie Podcasts. Thanks to our Horror Avenger “Fred Head” Ron Martin, during this short series we'll be celebrating the 40th anniversary of A Nightmare on Elm Street (1984) with a franchise retrospective! So, during this first show, Ron, Dr. Shock and Jay of the Dead review A Nightmare on Elm Street (1984) and A Nightmare on Elm Street 2: Freddy's Revenge (1985)! In addition, during intermission, Jay announces the official “induction” of his son, Spawn of the Dead, into the 10th slot of the Horror Avengers team. Accordingly, and complete with his new xenomorph Gravatar, Jay's offspring brings you his first installment of his Specialty Segment — Spawn of the Dead's PG-13 Horror, where he reviews the very first PG-13 Horror movie release! Do you know what was officially the first PG-13 Horror film that was widely released in the U.S.? Join us for this episode and find out! Be sure to subscribe to Jay of the Dead's new Horror movie podcast on: Apple PodcastsSpotifyDeezer You are welcome to email our show at HauntingYourHeadphones@gmail.com, or call and leave us a voicemail at (801) 980-1375. You can also follow Jay of the Dead's New Horror Movies on Twitter: @HorrorAvengers Jay of the Dead's New Horror Movies is an audio podcast. Our 10 Horror hosts review new Horror movies and deliver specialty Horror segments. Your hosts are Jay of the Dead, Dr. Shock, Gillman Joel, Mister Watson, Dr. Walking Dead, GregaMortis, Mackula, Ron Martin, Dave Zee and Spawn of the Dead! Due to the large number and busy schedule of its nine Horror hosts, Jay of the Dead's New Horror Movies will be recorded in segments, piecemeal, at various times and recording sessions. Therefore, as you listen to our episodes, you will notice a variety of revolving door hosts and segments, all sewn together and reanimated like the powerful Monster of Dr. Frankenstein!
Ian's joined by Matt Swanson while Aaron is out ✂️. We cover the forgotten victims of the Wordpress drama like Gravatar and Day One, if a bootstrapper should be happy about $10k/mrr and make the case for jobs as being good, should the government sell ads on the Penny, and "things Aaron should do".Don't miss our bonus Youtube video this week as well: https://www.youtube.com/watch?v=O8IIvZtrrzs Sponsored by LaraJobs & Screencasting.com.Interested in sponsoring Mostly Technical? Head to https://mostlytechnical.com/sponsor to learn more.
Listen in to hear about all the advancements and features that you will find and will be seeing with Gravatar.com
In diesen News gibt es weitere Details im Nachgang zu Apples WWDC Keynote und Platforms State of the Union zu besprechen. Daher sprechen Fabi, Dennis, Sebi und Jan über verspätete Features und Apple Intelligence.Außerdem geht es um Neuerungen in TypeScript 5.5, das gerade als Release Candidate erschienen ist. Es gibt neue Angebote von Firebase: Neben App Hosting gibt es mit Data Connect jetzt ein Postgres-basiertes Backend as a Service. Und auch bei Gravatar – das fast jede:r nutzt, aber kaum jemand kennt – gibt es mit zentralisierten Profilen ein neues Angebot.Zum Schluss dürfen wir natürlich nicht vergessen, den Gewinner unserer Apple Design Award Challenge zu küren.Und wir haben noch eine ganz besondere Ankündigung für euch: Im November gibt es mit dem Flutter Day die erste eigene Konferenz der programmier.bar! Die Early-Bird-Tickets könnt ihr euch schon bald sichern.Schreibt uns! Schickt uns eure Themenwünsche und euer Feedback: podcast@programmier.barFolgt uns! Bleibt auf dem Laufenden über zukünftige Folgen und virtuelle Meetups und beteiligt euch an Community-Diskussionen. TwitterInstagramFacebookMeetupYouTube
Bentornati su Spremuta di Enganche, il podcast sul calcio che è buono qui, è buono qui!Menu:• lo sciagurato Napoli di Rudi Garcia;• il ritorno di Walter Mazzarri sotto al Vesuvio;• il Napoli del futuro... che è anche un po' il passato;• Gianluca Grava è tornato e ora sono cazzi per tutti.
Tom Preston-Werner is a renowned software developer, inventor and entrepreneur. He co-founded GitHub and is the creator of the avatar service Gravatar, the TOML configuration file format, and the static site generator software Jekyll. Tom is currently working on the full-stack web framework, RedwoodJS. He joins us today to tell us the latest about RedwoodJS, The post The Latest on RedwoodJS with Tom Preston-Werner appeared first on Software Engineering Daily.
Tom Preston-Werner is a renowned software developer, inventor and entrepreneur. He co-founded GitHub and is the creator of the avatar service Gravatar, the TOML configuration file format, and the static site generator software Jekyll. Tom is currently working on the full-stack web framework, RedwoodJS. He joins us today to tell us the latest about RedwoodJS, The post The Latest on RedwoodJS with Tom Preston-Werner appeared first on Software Engineering Daily.
Tom Preston-Werner is a renowned software developer, inventor and entrepreneur. He co-founded GitHub and is the creator of the avatar service Gravatar, the TOML configuration file format, and the static site generator software Jekyll. Tom is currently working on the full-stack web framework, RedwoodJS. He joins us today to tell us the latest about RedwoodJS, The post The Latest on RedwoodJS with Tom Preston-Werner appeared first on Software Engineering Daily.
Show notes: https://designbetterpodcast.com/p/matt-mullenweg-wordpress-ai-and-jazz Matt Mullenweg started out as a jazz saxophonist, and went on to create WordPress, which is the platform behind an astonishing 42% of the websites in the world. We chat with Matt about his journey from musician to developer to entrepreneur, his perspective on distributed work, and his thoughts on the transformative capabilities of the latest generation of Generative Artificial Intelligence. We also come back to Matt's roots in jazz and his continued love for music and musicians. Get the show transcript, bonus content, and access to episodes a week early on our Substack: https://thecuriositydepartment.substack.com/ Bio (via Wikipedia) Matthew Mullenweg is an American entrepreneur and web developer living in Houston. He is known for developing and founding the free and open-source web software WordPress, and its parent company Automattic. After dropping out of the University of Houston, he worked at CNET Networks from 2004 to 2006 until he quit and founded Automattic, an internet company whose brands include WordPress.com, Akismet, Gravatar, VaultPress, IntenseDebate, Crowdsignal, and Tumblr. *** Help us make the show even better by taking a short survey: www.dbtr.co/survey If you're interested in sponsoring the show, please contact us at: sponsors@thecuriositydepartment.com If you'd like to submit a guest idea, please contact us at: contact@thecuriositydepartment.com *** This episode is brought to you by: Fable: Build inclusive products: https://makeitfable.com/designbetter/ Freehand by InVision: The intelligent whiteboard that's half the price of Miro and Mural: https://freehandapp.com/ Methodical Coffee: Roasted, blended, brewed, served and perfected by verified coffee nerds: https://methodicalcoffee.com/ (use code "designbetter" for 10% off of your order). Cruise: We're a team of researchers and designers creating a self-driving transportation service for the people and cities we love. Visit design.getcruise.com to learn more about how you can help design the future of transportation!
2022-11-15 Weekly News - Episode 172Watch the video version on YouTube at https://youtu.be/aeWRQKi3tN0 Hosts: Gavin Pickin - Senior Developer at Ortus Solutions Kai Koenig - Software Architect at Ventego Creative - CFML Community Member, Conference Speaker Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube. Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Patreon SupportGoal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k - https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/- Minimum three years' experience with ColdFusion- Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019- Familiarity with Git- Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/- Minimum three years experience with automated testing- Experience with automated testing tools such as selenium- Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:- £4,000 per annum discretionary company bonus scheme- 25 days annual leave + bank holidays- 6% employer pension contribution- Access to free perks and discounts through Perkbox- Long Service Awards- Cycle to Work Scheme- Company and Team nights outNews and Announcements CFCamp is back in 2023Given we've been taunting everyone with cancellations and postponements and dangling carrots in front of people since 2020 now, both Michi Hnat and I felt it'd be great to give you an exclusive! Breaking news kind of thing. So: without further ado! CF Camp will be back in June 2023.We have a date - 22 and 23rd of June 2023 for the main conference event. That is gonna be a Thursday and Friday and as in the past there will be additional pre events on the Tuesday and Wednesday. I would expect the Ortus team to run some training workshops for instance, I heard that the Preside CMS team is looking at doing a mini Preside-con day as well and we'll see what else might be happening.Venue is unchanged, we'll be again in the Marriott Munich Airport, which is NOT at the airport but in the lovely little ancient town of Freising. Michi has booked the hotel, so it's as official as it gets at this stage.If you go to cfcamp.org now, you'll find there is a “Save the date” and more will be coming soon. We're currently working on the Sponsorship documents, and have started to think about the Call for Papers and what we want to be looking for from a session and topic point of view. It'll be an open and transparent process again via Papercall or Sessionize and we'll again try to do our best to increase diversity and help to get underrepresented groups in the tech industry out there.At this stage I'd expect the call for Papers to open in early Jan, not sure if we'll manage to squeeze it onto this side of the end of year holidays.CF Camp 2023June 22/23, 2023 Freising, Germany https://www.cfcamp.org/ Adobe ColdFusion Fortuna (Codename for CF2023) AlphaI am opening up the Alpha testing group for Adobe ColdFusion 2023 (Codename: Fortuna). Please sign up here to be set up for access to the alpha testing site on Adobe Prerelease: https://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 Related - Adobe Bug Tracker Went MADAs they released the Alpha, all of the tickets were moved to beta. People got a lot of emails, some people (ADAM CAMERON) got millions as every bug got moved from Alpha to Beta. The weird part was all the links to the issues were broken, I assume because of the Internal vs External Jira connection. At least we know they use the bug tracker - right :) Into the Box 2023 Call for Speakers is now OpenWe are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. The conference will be held in The Woodlands (Houston), Texas on May 17-19, 2023 . This year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers ICYMI - OpenSSL VulnerabilitiesPete has had several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.https://www.petefreitag.com/item/1000.cfm ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year! A gift to the community, so we can all build amazing apps together! Watch all the videos! Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST Kai: I've recommended this to everyone in my team, TOTALLY WORTH WATCHING IT!!!!!ICYMI - CommandBox vNext supports providing SSL certs in PFX formatCommandBox vNext finally supports providing SSL certs in PFX format, which is a single file containing the public and private key as opposed to needing those in two separate files.https://ortussolutions.atlassian.net/browse/COMMANDBOX-1499 New Releases and UpdatesSpreadsheet-cfml V3.7.0 releasedSpreadsheet CFML 3.7.0 released with new option to read visible/formatted instead of raw valuesJames filed a bug for the ACF2021 issue. He's posted 3 bugs in 30 days with Adobe. https://github.com/cfsimplicity/spreadsheet-cfml RayGun4CFML v1.5.0 releaseWhat is RayGun Kai???feature: Added .sendAsync() entry point wrapping the HTTP call into its own thread.feature: Supports groupingKey nowfix: Improving handling of getHTTPRequestData in RaygunRequestMessagechore: Regorganisation of code in RaygunClientchore: Changed HTTP endpoint to .com https://github.com/MindscapeHQ/raygun4cfml/releases/tag/1.5.0 S3SDK@BE - Now supports Encrypting files at RestJust finished adding support for encrypting files "at rest" in S3 in the CFML S3SDK. You can let AWS manage the keys or provide your own AES256 key. Remember, the S3SDK also does NOT require ColdBox to use it
2022-11-08 Weekly News - Episode 171Watch the video version on YouTube at https://youtu.be/teJ4cpNvYOY Hosts: Gavin Pickin - Senior Developer at Ortus Solutions Brad Wood - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube. Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Patreon Support Goal 1 - We have 42 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 38% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k - https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/- Minimum three years' experience with ColdFusion- Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019- Familiarity with Git- Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/- Minimum three years experience with automated testing- Experience with automated testing tools such as selenium- Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:- £4,000 per annum discretionary company bonus scheme- 25 days annual leave + bank holidays- 6% employer pension contribution- Access to free perks and discounts through Perkbox- Long Service Awards- Cycle to Work Scheme- Company and Team nights outNews and AnnouncementsOpenSSL VulnerabilitiesPete has had a several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.https://www.petefreitag.com/item/1000.cfm ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year! A gift to the community, so we can all build amazing apps together! Watch all the videos! Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST Wirebox DelegatesWireBox supports the concept of object delegation in a simple expressive DSL. In object-oriented programming, delegation refers to the evaluating a member (property or method) of one object (the receiver) to the context of another object (the sender). Basically a way to proxy calls from one object to the other and avoid the overuse of inheritance, avoid runtime mixins or traits. WireBox provides a set of rules for method lookup and method dispatching that will allow you to provide delegation easily in your CFML applications.https://ortussolutions.notion.site/WireBox-Delegators-8608752a03d345ad80f8c1a1b441a428 CommandBox vNext supports providing SSL certs in PFX formatCommandBox vNext finally supports providing SSL certs in PFX format, which is a single file containing the public and private key as opposed to needing those in two separate files.https://ortussolutions.atlassian.net/browse/COMMANDBOX-1499 New Releases and UpdatesLucee released 5.3.9.166 StableThis a minor bug fix release, which addresses a few bugs listed below, mainly relating to concurrency or errors under heavy load.Anyone running 5.3.9.160 is encouraged to update to this release.https://dev.lucee.org/t/lucee-5-3-9-166-stable-release/11319 Restoring the CF Admin logviewer removed in Oct 2022 CF updates, at your own riskAs of the Oct 2022 CF updates (CF2021 update 5 and CF2018 update 15), Adobe has chosen to remove the CF Admin feature to view, search, download, and delete CF logs, due to asserted (but as-yet undocumented) security concerns.What if you want it back? In this post, I explain what changed, why, and how to get the functionality back--albeit at your own risk. For more, read on.https://www.carehart.org/blog/2022/11/3/restoring_admin_logviewer ICYMI - CBWIRE v2.1 ReleasedCBWIRE, our ColdBox module that makes building reactive, modern CFML apps delightfully easy, just dropped its 2.1 release. This release contains mostly bug fixes and also the ability to create your UI templates directly within your CBWIRE component using the onRender() method.We've added an example of using onRender() to our ever growing CBWIRE-Examples Repo that you can run on your machine locally. https://github.com/grantcopley/cbwire-examples https://www.ortussolutions.com/blog/cbwire-2-1-released Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Embeddable Link: https://calendar.google.com/calendar/embed?src=c_562a1ef61c4b1e2e6d88ed7845728d56897dd4bb68c140f773768952b29421ed%40group.calendar.google.com&ctz=America%2FLos_Angeles Ortus Software Craftsmanship Book Club - Patreon OnlyFriday, November 11th at 2pm CDT - 2nd Friday of the MonthClean Code: A Handbook of Agile Software Craftsmanship by Robert Martin (Uncle Bob)We will meet monthly on Zoom, and we'll use the Ortus Community Forum for Patreon to discuss the book.https://community.ortussolutions.com/t/ortus-software-craftsmanship-book-club-clean-code/9432 We will also be rewriting the code from Java to CFML as we proceed through the book.The final result will be here https://github.com/gpickin/clean-code-book-cfml-examples You can get a copy of the book at one of the below links, or your favorite bookstorehttps://amzn.to/3TIrmKm or https://www.audible.com/pd/Clean-Code-Audiobook/B08X7KL3TF?action_code=ASSGB149080119000H&share_location=pdp&shareTest=TestShare Ortus Webinar - Daniel Garcia - API Testing with PostManFriday, November 18th at 11am CDT - 3rd Friday of the Monthhttps://us06web.zoom.us/meeting/register/tZYqc-uuqzMqGtAO7tQ6qCsN8bR0LyBf8DNP CF Hawaii Meetup - Managing All your ColdFusion Servers with CommandBox with Brad WoodCommandBox is a standalone, native tool for Windows, Mac, and Linux that will provide you with a Command Line Interface (CLI) for developer productivity, tool interaction, package management, embedded CFML server, application scaffolding, and sweet ASCII art. It seamlessly integrates to work with any of Ortus Solutions *Box products, but it is also open for extensibility for any ColdFusion (CFML) project as it is written in ColdFusion (CFML) using our concepts of CommandBox Commands.CommandBox also functions as a package management tool which integrates seamlessly with ForgeBox. During this meeting Brad will give you an introduction to CommandBox to mange your ColdFusion Server as well as CF Config to Mange the CF Admin.https://www.meetup.com/hawaii-coldfusion-meetup-group/events/289489609/CF Summit Online Adobe announced today that the “ColdFusion Summit Online” will begin soon, where they will be having presenters offer their sessions again from the CF Summit last month, to be live-streamed and recorded since that couldn't be done in Vegas.https://coldfusion.adobe.com/2022/11/coldfusion-summit-online/ All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! Charlie Arehart - “How the Adobe CF Docker Images Have Evolved”Wednesday November 16 at 12pm – 1pm EST.Since Adobe's original 2018 release of Docker images for CF (initially for cf2018 and cf2016), the configurability features built into them have improved in significant ways, especially with cf2021, which is much smaller, faster, and whose admin settings can be configured via json. In this talk, veteran CF consultant Charlie Arehart will review and demonstrate those feature changes for the CF images, as well as the images for the CF Performance Monitoring Toolkit (PMT) and the CF Enterprise API Manager–all available at Dockerhub since 2021.Register: https://how-the-cf-docker-images-evolved.meetus.adobeevents.com/ Brad Wood - Message Queues with RabbitMQ1pm to 2pm ET on Nov 30Get to know about RabbitMQ – a tool used for worker queues, topic distribution, synch RPC invocations, and even web socket pushes to your web app in this session. Using the RabbitSDK for ColdFusion, you can get started today with queues and bring your apps to the next level. Stop thinking about API calls and start thinking about sending messages, thanks to this popular and robust queue.Ortus Office HoursA new initiative where some Ortusians will be on a Zoom call and answer whatever questions people have. We are going to start less structured and see how things develop. December 2nd at 11am CDT - 1st Friday of the MonthDaniel Garcia will host a variety of Ortus people Office Hours questions & requests form availableRegister in advance for this meeting:https://us02web.zoom.us/meeting/register/tZYvcO-hrz8iHNS0C3o0aw2x3JMtmBrKwzfA ColdFusion Security Training - Writing Secure CFML with Pete Freitag from FoundeoWhen: Tuesday December 13, 2022 @ 11am-2pm & Wednesday December 14 @ 11am-2pm(Eastern Standard Time, UTC -5) - 6 hours in total.A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.The class will be recorded, so if you cannot attend it fully online you will have access to a recording.Where: Online / Web ConferenceWho: Taught by Pete FreitagCost: $999/student $899/student (Early Bird Discount)Register: https://foundeo.com/consulting/coldfusion/security-training/ Adobe Workshops & WebinarsJoin the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.https://coldfusion.adobe.com/2022/10/upcoming-adobe-webinar-on-preview-of-cf2023-date-and-title-change/ WEBINAR - WEDNESDAY, NOVEMBER 23, 2022 - New Date - New Name10:00 AM PSTThe Road to FortunaMark Takatahttps://winter-special-preview-of-cf2023.meetus.adobeevents.com/ WEBINAR - THURSDAY, DECEMBER 22, 202210:00 AM PSTBuilding Native Mobile Applications with Adobe ColdFusion & Monaco.ioMark Takatahttps://building-native-mobile-apps-with-cf-monaco-io.meetus.adobeevents.com/ FREE :)Full list - https://meetus.adobeevents.com/coldfusion/ CFCasts Content Updateshttps://www.cfcasts.comJust Released Ortus Webinar - Gavin Pickin on Step up your Testing https://cfcasts.com/series/ortus-webinars-2022/videos/gavin-pickin-on-step-up-your-testing Every video from ITB - For ITB Ticket Holders Only - Will be released for Subscribed in December 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week Coming Soon - More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel ITB Videos will be released Dec for those who are not ITB Ticket Holders Conferences and TrainingDeploy from Digital OceanNovember 15-16, 2022The virtual conference for global buildersSubtract Complexity,Add Developer HappinessJoin us on the mission to simplify the developer experience.https://deploy.digitalocean.com/ Into the Box Latam 2022Dec 7th, 2022 - 8am - 5pm2 tracks - 1 set of sessions, 1 set of deep dive workshop sessionsPricing $9-$29 USDLocation: Hyatt Centric Las Cascadas Shopping Center,Merliot, La Libertad 99999 El Salvadorhttps://latam.intothebox.org/ VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57 Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AltantaEARLY BIRD CONFERENCE PASS - APRIL 5-6 (AVAILABLE UNTIL NOVEMBER 20) (Approx 40% off)If you are planning to speak, please submit often and early. The CALL FOR PAPERS is open until November 15WORKSHOPS WILL BE ON JAVA, JAVA SECURITY, SOFTWARE DESIGN, AGILE, DEVOPS, KUBERNETES, MICROSERVICES, SPRING ETC. SIGN UP NOW, AND YOU WILL BE ABLE TO CHOOSE A WORKSHOP, LATER ON,https://devnexus.com/ VueJS Live MAY 5 & 8, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022 Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021 https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17, 18, and 19th, 2022.Middle of May - start planning.Final dates will be released as soon as the hotel confirms availability.Call for Speakers - this weekCFCampNo CFCAMP 2022, we're trying again for summer 2023TLDR is that it's just too hard and there's too much uncertainty right now.More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/Blogs, Tweets, and Videos of the Week 11/8/22 - Tweet - Luis Majano - Ortus Solutions WireBox 7 - DelegatesThe power of the new WireBox 7 Delegates! Traits for #coldfusion #cfml are here! Composable reusability to modernize your CFCs! https://ortussolutions.notion.site/WireBox-Delegators-8608752a03d345ad80f8c1a1b441a428 #modernizeOrDie #wirebox #coldboxhttps://twitter.com/lmajano/status/1589934986991378433 11/8/22 - Tweet - Luis Majano - CbSecurity V3 is coming - including new Security Firewall VizualizerThe new ColdBox Security v3 is almost done! Brand new Security Firewall visualizer, basic auth, included user storage, rule simulator, ColdBox 7 delegates, jwt, new firewall blocks, reporting, fluent configuration and so much more! #secureAllThings #coldbox #modernizeOrDiehttps://twitter.com/lmajano/status/1589931501411598338https://twitter.com/lmajano 11/7/22 - Ortus Solutions - The holiday season is almost here and we want to give you an early present!For the first time ever, enjoy our "ColdBox Master Class" for FREE until Dec 31st, and start building secure and modern CFML web applications with up-to-date tools and methodologies that will help you increase your development productivity!Whether you are a ColdBox master or a beginner, this course will give you the tools and guidance you need to learn everything about this open-source modular web application framework from start to finish. Let's get started, modernize your web development projects today and optimize your services by getting the best out of our ColdBox MVC framework.https://www.ortussolutions.com/blog/become-a-coldbox-master-for-free 11/7/22 - Blog - Ben Nadel - Proxying Gravatar Images For Better Avatar Caching In ColdFusionWhen readers leave a comment on this blog, I render an avatar next to their authorship information. This avatar is served from Gravatar, which is (probably) the most popular avatar system on the web (brought to us by the same people who built WordPress). Unfortunately, serving avatars from Gravatar was hurting my Chrome LightHouse scores due to Gravatar's very short caching controls (5-mins). To help improve my LightHouse score, I'm starting to proxy the Gravatar images on my ColdFusion server, applying a custom Cache-Control HTTP header.https://www.bennadel.com/blog/4351-proxying-gravatar-images-for-better-avatar-caching-in-coldfusion.htm 11/5/22 - Linked In Post - Luis Majano - J on the Beach Meetup in Malaga Spain We had a great time!!! Our European Grass Roots events have started!! #cfml #coldfusion #coldbox #ortusYesterday we had a great meetup led by Jorge Reyes Bendeck from Ortus Solutions, Corp learning about all the different licenses available for #OpenSource software.https://www.linkedin.com/feed/update/urn:li:share:6994607593453162496/ 11/5/22 - Blog - Charlie Arehart - ColdFusion Portal - Enabling CF to switch to using Java's regex engineIf you may ever encounter problems trying to use regular expressions in CFML (which are actually PERL regex's), did you know that you can tell CF to use Java regex's instead? This has been possible since 2019, but you could have missed when the change was introduced via CF2018 update 5 in Sep 2019–and of course the option is also built into CF 2021.This is one of those settings which can be enabled/controlled at either:the server level: via the CF Admin “Settings” page, and its “Use Java as Regex Engine” optionor the application level: via the this.useJavaAsRegexEngine in application.cfc (or an attribute of the same name in cfapplication, if using application.cfm)https://coldfusion.adobe.com/2022/11/switching-cf-to-use-java-regex-engine/ 11/5/22 - Blog - Charlie Arehart - ColdFusion Portal - Come learn “How the Adobe CF Docker Images Have Evolved”, launching CF Summit onlineThe first session for the Adobe ColdFusion Summit Online has been announced. I had reported here last week that Adobe was going to start having all the speakers from Adobe's CF Summit (in Vegas last month) offer their talks online, to be live-streamed and recorded. Well, it looks like I'm the lead-off batter.https://coldfusion.adobe.com/2022/11/come-learn-how-adobe-cf-docker-images-have-evolved/ 11/4/22 - Blog - Nolan Erck - Free ColdBox Training For The Rest Of 2022CFML developers that still say "I don't know how to use ColdBox", your excuses are now officially invalid. ;)The ColdBox Master Class video training series that I produced for Ortus Solutions is FREE for the rest of the year!https://southofshasta.com/blog/free-coldbox-training-for-the-rest-of-2022/ 11/4/22 - Blog - Pete Freitag - OpenSSL and ColdFusion / Lucee / TomcatPete have had a several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.https://www.petefreitag.com/item/1000.cfm 11/4/22 - Tweet - Pete Miller - Lost RespectI lost a lot of respect in a past job sticking with #CFML even to point I was moved sideways and new project manager came in with #PHP for new project. I left and 7 years later the #CFML runs their business and the #PHP project is dead and buried.https://twitter.com/millerpete/status/1588660303986036738https://twitter.com/millerpete 11/4/22 - Tweet - Brad Wood - Ortus - Microsoft 365's removal of plain text passwordsIf anyone is caught out by Microsoft 365's removal of plain text passwords to check Exchange mail, I've recently setup an Oauth flow using the GraphAPI for a client and posted some example code here in the Lucee forum to help you out: https://dev.lucee.org/t/check-email-on-o365-with-oauth/11389/5?u=bdw429s 11/4/22 - Blog - Zac Spitzer - Lucee - Lucee released 5.3.9.166 StableThis a minor bug fix release, which addresses a few bugs listed below, mainly relating to concurrency or errors under heavy load.Anyone running 5.3.9.160 is encouraged to update to this release.https://dev.lucee.org/t/lucee-5-3-9-166-stable-release/11319 11/3/22 - Blog - Charlie Arehart - Restoring the CF Admin logviewer removed in Oct 2022 CF updates, at your own riskAs of the Oct 2022 CF updates (CF2021 update 5 and CF2018 update 15), Adobe has chosen to remove the CF Admin feature to view, search, download, and delete CF logs, due to asserted (but as-yet undocumented) security concerns.What if you want it back? In this post, I explain what changed, why, and how to get the functionality back--albeit at your own risk. For more, read on.https://www.carehart.org/blog/2022/11/3/restoring_admin_logviewer 11/3/22 - Podcast - Michela Light - CFAlive - 123 State of CF Union Survey Analysis (part 2) with Gavin PickinGavin Pickin talks about “State of CF Union Survey Analysis (part 2)” in this episode of ColdFusion Alive Podcast with host Michaela Light.“we're going to be doing our second part on the state of the ColdFusion survey results. And we've got some very interesting data that we found we've done Gavin put together some really cool graphs show it so if you're watching on video, be able to see those if you're not on video, you can go to the show notes page on teratech.com to have a look at the graphs when we get to those.”https://teratech.com/podcast/state-cf-union-survey-analysis-part-2-with-gavin-pickin/ CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 145 ColdFusion positions from 80 companies across 66 locations in 5 Countries.2 new jobs listed this weekFull-Time - Senior ColdFusion Developer at London - United Kingdom Nov 03https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Senior-ColdFusion-Developer-at-London/11532 Full-Time - Coldfusion Developer at London - United Kingdom Nov 03https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Coldfusion-Developer-at-London/11531 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k - https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/- Minimum three years' experience with ColdFusion- Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019- Familiarity with Git- Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/- Minimum three years experience with automated testing- Experience with automated testing tools such as selenium- Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:- £4,000 per annum discretionary company bonus scheme- 25 days annual leave + bank holidays- 6% employer pension contribution- Access to free perks and discounts through Perkbox- Long Service Awards- Cycle to Work Scheme- Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the WeekSwagger Redoc UI for ColdBoxThis is the Swagger Redoc UI module for ColdBox applications. It was inspired by the cbSwaggerUI module. By default, it looks in the /cbswagger location for the OpenAPI Swagger file.The UI is available at /redoc - where you will see a visual representation of your Swagger docs.Based on: https://github.com/Redocly/redoc Online Demo: https://redocly.github.io/redoc/ https://www.forgebox.io/view/cbswagger-redoc VS Code Hint Tips and Tricks of the WeekProject ManagerBy Alessandro FragnaniIt helps you to easily access your projects, no matter where they are located. Don't miss those important projects anymore.You can define your own Projects (also called Favorites), or choose for auto-detect Git, Mercurial or SVN repositories, VSCode folders, or any other folder.Here are some of the features that Project Manager provides: Save any folder or workspace as a Project Auto-detect Git, Mercurial or SVN repositories Organize your projects using Tags Open projects in the same or new window Identify deleted/renamed projects A Status Bar which identifies the current project A dedicated Side Bar https://marketplace.visualstudio.com/items?itemName=alefragnani.project-managerThank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsNew Patreon - Tomorrows GuidesDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jonathan Perret Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck Abdul Raheen Wil De Bruin Joseph Lamoree Don Bellamy Jan Jannek Laksma Tirtohadi Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Daniel Garcia Scott Steinbeck - Agri Tracking Systems Ben Nadel Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Matthew Darby Ross Phillips Edgardo Cabezas Patrick Flynn Stephany Monge Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★
Comments When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here:/. After approval of your comment, your profile picture is visible to the public in the context of your comment. Media If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website. Cookies If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day. Embedded content from other websites Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. Who we share your data with If you request a password reset, your IP address will be included in the reset email. How long we retain your data If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. What rights you have over your data If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Where we send your data Visitor comments may be checked through an automated spam detection service.
Empiezo la semana hablándoos del servicio Gravatar.com, que nos permite, de un solo plumazo, mostrar nuestro avatar en miles de webs de Internet. Se trata de un servicio con una API muy sencilla de utilizar y que está ampliamente presente en la red de redes.
This week Noah and Steve dig into the exact make and models of devices they use, what they like, what they don't like, and how to do it yourself! -- During The Show -- 01:50 Hedgedoc Profile photo Sleuth Asked: How do you set profile photos in hedgedoc/codimd? Gravatar (https://en.gravatar.com/) 03:10 Differences Between Remote Access? - Griffon SSH/OpenVPN/TailScale (https://tailscale.com/)/Firezone.dev OpenVPN Built into PFSense SSH open to the web SSH Guard (https://sshguard.net/) Fail2Ban (https://www.fail2ban.org/wiki/index.php/Main_Page) CrowdSec (https://www.crowdsec.net/) 08:55 Cloudflare for self hosting? - JJ Cloudflare decrypting and re-encrypting Maybe for a public site Hardpass Please write back in 12:45 Option for Power Monitoring - Patrick Egauge (https://www.egauge.net/) Stores 30 years of data Not Open Source Easy API Cheaper options out there 15:50 Energy/Solar Monitoring - Jeremy Emporia Vue2 (https://www.emporiaenergy.com/blog/introducing-emporia-vue) Multiple Emporia Vue2 (https://community.emporiaenergy.com/topic/multiple-vue2-same-panel/) Phases 18:50 Re: Phones and Privacy - Roger Silent Pocket (https://slnt.com/) Faraday Cage for phones Practicality of faraday cages on phones 23:20 News Wire Linux 5.19 from Asahi The Register (https://www.theregister.com/2022/07/31/linux_5_19/) Firefox 103 Mozilla (https://www.mozilla.org/en-US/firefox/103.0/releasenotes/) Linux Mint 21 OMG Ubuntu (https://www.omgubuntu.co.uk/2022/07/linux-mint-21-download-and-new-features) Linux Mint (https://linuxmint.com/download.php) GitGuardian GGCanary Open Source For U (https://www.opensourceforu.com/2022/07/gitguardian-releases-ggcanary-project-to-identify-dangers-associated-with-open-source-software/) Limit Theory Kickstarter (https://www.kickstarter.com/projects/joshparnell/limit-theory-an-infinite-procedural-space-game/posts/3564318) Arctic Tern BMC Phoronix (https://www.phoronix.com/news/Raptor-Arctic-Tern-BMC) 90nm FDSOI Manufacturing Reuters (https://www.reuters.com/technology/google-us-chip-maker-skywater-expand-open-source-chip-design-platform-2022-07-28/) Electronics Weekly (https://www.electronicsweekly.com/news/business/skywater-and-google-enable-open-source-90nm-fdsoi-manufacturing-2022-08/) Mark Pearson Lenovo Linux Update Phoronix (https://www.phoronix.com/news/Lenovo-Linux-2022-State) Linux 6.0 AMD Temp Monitoring Phoronix (https://www.phoronix.com/news/Linux-6.0-More-AMD-k10temp) Fedora CC0 Licensing Security Boulevard (https://securityboulevard.com/2022/08/open-source-licensing-shift-fedora-blocks-creative-commons-cc0/) Open Source For U (https://www.opensourceforu.com/2022/08/what-made-fedora-choose-to-use-cc0-licensed-code-as-the-boot/) 650% Linux Malware Increase Make Use Of (https://www.makeuseof.com/linux-malware-all-time-high-2022/) 25:10 IOT Devices, Sensors, and Control Points Zwave AeoTec (https://aeotec.us/) Inovelli Switch (https://inovelli.com/products/switches/) Voice Control Mycroft (https://mycroft.ai/) Mycroft Home Assistant Skill (https://github.com/MycroftAI/skill-homeassistant) Smart Speakers (Alexa, Apple, Google) Power Monitoring CT Clamp Hire a qualified electrician Basic and Advanced monitoring Emporia Vue2 (https://www.emporiaenergy.com/blog/introducing-emporia-vue) Crestron (https://www.crestron.com/) Very Expensive OpenHAB (https://www.openhab.org/) NodeRed (https://nodered.org/) Java Monolith More flow chart, less linear Independent, also integrated into Home Assistant Home Assistant (https://www.home-assistant.io/) Install on a RaspberryPi Holds your hand Almost perfect mobile interface Works with the community A lot of momentum behind it WiFi Communication Tasmota (https://tasmota.github.io/docs/) ESPHome (https://esphome.io/) MQQT Rumba MQQT (https://github.com/johnboiles/esp-roomba-mqtt) Requires app for setup works offline Pick one thing to start with -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/297) Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah) Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com) -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard (http://www.asknoahshow.com) Need more help than a radio show can offer? Altispeed provides commercial IT services and they're excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies (http://www.altispeed.com/) Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux (https://twitter.com/kernellinux) Ask Noah Show (https://twitter.com/asknoahshow) Altispeed Technologies (https://twitter.com/altispeed) Special Guest: Steve Ovens.
Got a Minute? Website owner checkout today's episode of The Guy R Cook Report podcast - the Google Doc for this episode is @ 20220614 Replay of - 20210615 WordPress How To: Set Up Your Gravatar ----more---- Support this podcast Subscribe where you listen to podcasts I help goal oriented business owners that run established companies to leverage the power of the internet Contact Guy R Cook @ https://guyrcook.com The Website Design Questionnaire https://guycook.wordpress.com/start-with-a-plan/ In the meantime, go ahead follow me on Twitter: @guyrcookreport Click to Tweet Be a patron of The Guy R Cook Report. Your help is appreciated. https://guyrcook.com https://theguyrcookreport.com/#theguyrcookreport Follow The Guy R Cook Report on Podbean iPhone and Android App | Podbean https://bit.ly/3m6TJDV Thanks for listening, viewing or reading the show notes for this episode. Vlog files for 2022 are at 2022 video episodes of The Guy R Cook ReportHave a great new year, and hopefully your efforts to Entertain, Educate, Convince or Inspire are in play vDomainHosting, Inc 3110 S Neel Place Kennewick, WA 509-200-1429
Watch the live stream: Watch on YouTube About the show Sponsored: RedHat: Compiler Podcast Special guests Mark Little Ben Cosby Michael #1: libgravatar A library that provides a Python 3 interface to the Gravatar APIs. If you have users and want to show some sort of an image, Gravatar is OK PyPI uses this for example (gravatar, not necessarily this lib) Usage: >>> g = Gravatar('myemailaddress@example.com') >>> g.get_image() 'https://www.gravatar.com/avatar/0bc83cb571cd1c50ba6f3e8a78ef1346' Brian #2: JSON to Pydantic Converter Suggested by Chun Ly, “this awesome JSON to @samuel_colvin's pydantic is so useful. It literally saved me days of work with a complex nested JSON schema.“ “JSON to Pydantic is a tool that lets you convert JSON objects into Pydantic models.” It's a live site, where you can plop JSON on one the left, and Pydantic models show up on the right. There's a couple options: Specify every field as Optional Alias camelCase fields as snake_case It's also an open source project, built with FastAPI, Create React App, and a project called datamodel-code-generator. Mark #3: tailwindcss, tailwindui Not python, but helpful for web UI and open source business model example tailwindcss generates CSS Used on the Lexchart app Benefits of tailwindcss and tailwindui: Just-in-Time makes it fast. Output includes only classes used for the project. Stand on shoulders of design thinking from Steve Schoger and Adam Wathan. See also refactoingui.com. Use in current projects without CSS conflicts. Custom namespace with prefix in tailwind.config.js. Bonus: custom namespace prefixes work with the tailwind plug-ins for VS Code and PyCharm. Works well with template engines like, Chameleon. We use tailwind for our app UI. Toolbar template example. Another example of docs and tutorials being a strategic business asset. Resources tailwindcss.com tailwindlabs on YouTube, great tutorials from Simon at Tailwind Beginner friendly tutorials: Thirus, example of tailwind install methods Michael #4: PEP 690 – Lazy Imports From Itamar Discussion at https://discuss.python.org/t/pep-690-lazy-imports/15474 PEP proposes a feature to transparently defer the execution of imported modules until the moment when an imported object is used. PEP 8 says imports go a the top, that means you pay the full price of importing code This means that importing the main module of a program typically results in an immediate cascade of imports of most or all of the modules that may ever be needed by the program. Lazy imports also mostly eliminate the risk of import cycles or crashes. The implementation in this PEP has already demonstrated startup time improvements up to 70% and memory-use reductions up to 40% on real-world Python CLIs. Brian #5: Two small items pytest-rich Suggested by Brian Skinn Created by Bruno Oliveira as a proof of concept pytest + rich, what's not to love? Now we just need a maintainer or two or three…. Embedding images in GitHub README Suggested by Henrik Finsberg Video by Anthony Sottile This is WITHOUT putting the image in the repo. Upload or drop an image to an issue comment. Don't save the comment, just wait for GitHub to upload it to their CDN. GH will add a markdown link in the comment text box with a link to the now uploaded image. Now you can use that image in a README file. You can do the same while editing the README in the online editor. Ben #6: pyotp A library for generating and verifying one-time passwords (OTP). Helpful for implementing multi-factor authentication (MFA) in web applications. Supports HMAC-based one-time passwords (HOTP) and time-based one-time passwords (TOTP). While HOTP delivered via SMS text messages is a common approach to implementing MFA, SMS is not really secure. TOTP using an authenticator app on the user's device such as Google Authenticator or Microsoft Authenticator is more secure, fairly easy to implement, and free (no SMS messaging fees and multiple free authenticator apps available for users). TOTP works best by making a QR code available to simplify the setup for the user in their authenticator app. Lots of easy to implement QR code generators to choose from (qrcode is a popular one if you use javascript on the front end). TOTP quick reference: import pyotp def generate_shared_secret(): # securely store this shared secret with user account data return pyotp.random_base32() def generate_provisioning_uri(secret, email): # generate uri for a QR code from the user's shared secret and email address return pyotp.totp.TOTP(secret).provisioning_uri(name=email, issuer_name='YourApp') def verify_otp(secret, otp): # verify user's one-time password entry with their shared secret totp = pyotp.TOTP(secret) return totp.verify(otp) Extras Brian: PyConUS 2022 videos now up A few more Python related extensions for VSCode black, pylint, isort, and Jupyter PowerToys Work has begun on a pytest course Saying this in public to inspire me to finish it. No ETA yet Sad Python Girls Club podcast Michael: PyTorch M1 Mission Encodable PWAs and pyscript Michael's now released pyscript PWA YouTube video cal.com (open source calendly) Supabase (open source Firebase) Joke: Beginner problems
Bonchour à tous Comme tous les Mercredis, on se retrouve en Live à 17h sur Twitch pour un GLG part en Live mes produits tech de la semaine Cette semaine https://twitch.tv/byglg Mes produits tech de la semaine -Proscenic M8 pro : https://amzn.to/3EQpxoo https://s.click.aliexpress.com/e/_AkqFPh -HP Gravatar Mars pro : https://amzn.to/3kbS5PP -Ecouteurs 1More Evo : https://amzn.to/3xV4Upv -Batterie Fiido M1 pro 14aH : https://s.click.aliexpress.com/e/_9Ji04B -Trepied Andobil : https://amzn.to/3vhxUWL -Montre Haylou RS4 plus : https://s.click.aliexpress.com/e/_A1b2bH https://amzn.to/3xZKXxV #GravatarMarspro #ProscenicM8pro #HaylouRS4 By GLG
Is Your Email On The Dark Web? Let's Check Now! Do you know how to find out if you have had your private information stolen? Well, you know, the odds are probably that you have, but where was it stolen, when, and what has been stolen? How about your password and how safe that password is? We're going to show you real hard evidence. [The following is an automatic transcript.] [00:00:16] Knowing whether or not your data has been stolen and what's been stolen is very important. [00:00:24] And there is a service out there that you can go to. They don't charge you a thin dime, anything, and you can right there find out which of your account has been compromised. And. Out on the dark web. Now the dark web is the place that the criminals go. That's where they exchange information they've stolen. [00:00:49] That's where they sell it. That's where you can buy a tool to do Ransomware hacking all on your own. Far less than 50 bucks. Ransomware as a service is available where they'll do absolutely everything except infect people. So you just go ahead and sign up with them; you pay them a 20% or sometimes more commission. [00:01:12] You get somebody to download, in fact, to themselves with the Ransomware, and they do everything else. They take the phone call; they find out what it is. The company is doing, and they set the ransom, and they provide tech support for the person that got ransomed to buy Bitcoin or sometimes some of these other cryptocurrencies. [00:01:38] In fact, we've got another article in the newsletter this week about cryptocurrencies and how they may be falling through. Floor because of Ransomware. We'll talk about that a little later here, but here's the bottom line. You want to know this. You want to know if the bad guys are trading your information on the dark web; you want to know what data they have so that you can keep an eye on it. [00:02:11] Now you guys are the best and brightest, you know, you have to be cautious, or you wouldn't be listening today. And because, you know, you've been caught, you need to be careful. You have been cautious, but the time you need to be the most cautious is right after one of the websites that you use that hasn't been hacked because the fresher, the information, the more it's worth on the dark web, your identity can be bought on the dark web for. [00:02:38] Penny's depending on how much information is there. If a bad guy has your name, your email, the password you've used on a few different website, your home address, social security number, basically the whole shooting match. They can sell your personal information for as little as. $2 on the dark web. That is really bad. [00:03:02] That's sad. In fact, because it takes you a hundred or more hours. A few years ago, they were saying about 300 hours nowadays. It's less in order to get your identity kind of back in control. I suspect it probably is closer to 300, frankly, because you. To call anybody that pops up on your credit report. Oh, and of course you have to get your credit report. [00:03:29] You have to review them closely. You have to put a freeze on your. Got an email this week from a listener whose wife had her information stolen. He had lost a wallet some years ago and she found because of a letter that came saying, Hey, thanks for opening an account that someone had opened an account in her name. [00:03:51] Now the good news for her is that it had a zero balance. Caught it on time. And because it was a zero balance, it was easy for her to close the account and he's had some problems as well because of the lost wallet a few years back. So again, some basic tips don't carry things like your social security card in your wallet. [00:04:17] Now you got to carry your driver's license because if you're driving, the police wanted, okay. Nowadays there's in some ways less and less of a reason to have that, but our driver's license, as you might've noticed on the back, many of them have either a QR code or they've got a kind of a bar code scan on them, but that big QR code contains all kinds of information about. [00:04:41] You that would normally be in the online database. So maybe you don't want to carry a bunch of cash. Although, you know, cash is king and credit cards can be problematic. It kind of depends. And the same thing is true with any other personal identifiable information. Keep it to a minimum in your wall. But there is a place online that I mentioned just a minute ago that does have the ability to track much of the dark web. [00:05:13] Now this guy that put it together, his name's Troy hunt, and Troy's an Australian he's been doing this. Public service for forever. He tried to sell his little company, but the qualifications for buying it included, you will keep it free. And there are billions of people, or I shouldn't say people there's billions of requests to his website about people's private information. [00:05:42] So, how do you deal with this? What do you do? Well, the website is called, have I been poned? Have I been E and poned P w N E D. Ponying is an old term that comes from. Uh, these video games before they were online. And it means that basically I own you, I own all of your properties. You've been postponed and that's what Troy kind of followed here. [00:06:11] Have I been postponed to.com is a website that you can go to now. They have a whole bunch of other things. They have API calls. For those of you who are programmers and might want to keep an eye out for your company's record. Because it does have that ability as well. And it has a tie ins too, with some of the password managers, like one password to be able to tell is my new password, any good. [00:06:41] And which websites have been hacked. Does that make sense? And so that is a very good thing, too, because if you know that a website that you use has been hacked, I would like to get an email from them. So the first thing right there in the homepage, you're going to want to do. Is click on notify me. So you ensure in your email address, I'm going to do that right now, while we're talking, they've got a recapture. [00:07:12] I'm not a robot. So go ahead and click that. And then you click on the button. Notify. a lot of people are concerned nowadays about the security and safety of their information. They may not want to put their email address into a site like this. Let me assure you that Troy. Is on the op and up, he really is trying to help. [00:07:39] He does not use any of the information that you provide on his website for evil. He is just trying to be very, very helpful. Now his site might get hacked, I suppose, but it has been just a huge target of. Characters and because of that, he has a lot of security stuff in place. So once you've put your email address right into the notify me box, click on notify me of [00:08:06] Of course you got to click the I'm not a robot. So once you've done that, It sends you a verification email. So all you have to do at that point, it's just like my website. When you sign up for my newsletter, keep an eye out for an email from Troy from have I been poned.com asking you if you signed up for his notification service? [00:08:31] Obviously it is a very good idea to click on his link in the email. Now I caution people, it costs. And you guys all of the time about clicking on links and emails, because so many of them are malicious, but in the case of like Troy or my website, or maybe another one that you sign up for, if you just signed up for. [00:08:54] You should expect an email to come to your mailbox within a matter of a couple of minutes, and then you should spend just that minute or so. It takes to click on that email to confirm that you do want to get the emails from the website, because if you don't hit that confirmation, you're not going to get the emails. [00:09:17] Let me explain a little bit about why that is. Good guys on the internet don't want to spam you. They don't want to overload you with all kinds of emails that may matter may not matter, et cetera. They just want to get you information. So every legitimate, basic a guy out there business, a organization, charity that is legitimate is going to send you a confirmation email. [00:09:50] The reason is they don't want someone to who doesn't like you let's say to sign you up on a few hundred different emails site. And now all of a sudden you're getting. Well, these emails that you didn't want, I had that happen to me years and years ago, and it wasn't sites that I had signed up for. In fact, some of them were rather pornographic and they kept sending me emails all of the time. [00:10:19] So Troy is going to send you just like I do another legitimate website, send you an email. The link that you must click. If you do not click his link, you are not going to get the emails. It's really that simple. Now, Troy looking at a site right now has information on 11 billion pond account poned accounts. [00:10:47] Really? That is huge. It is the largest collection that's publicly available of. To count. So I'm, we're going to talk about that a little bit more. And what information does he have? How does he protect it? What else can you find out from? Have I been poned? This is an important site. One of the most important sites you can visit in order to keep yourself safe. [00:11:16] Next to mine. Right? Make sure you visit right now. Craig peterson.com/subscribe and sign up for my newsletter and expect that confirmation email to. [00:11:29] Have you been hit by Ransomware before? Well, it is a terrible thing if you have, but what's the future of Ransomware? Where is it going? We've talked about the past and we'll start with that and then move into what we're expecting to come. [00:11:46] The future of Ransomware is an interesting one. And we kind of have to look at the past in Ransomware. [00:11:55] Ransomware was pretty popular in that bad guy. Just loved it. They still do because it is a simple thing to do. And it gives them incredible amounts of flexibility in going after whoever they want to go. After initially they were sending out Ransomware to anybody's email address. They could find and hoping people would click on it. [00:12:24] And unfortunately, many people did click. But back then the ransoms were maybe a couple hundred dollars and you paid the ransom and 50% chance you got your data back. Isn't that terrible 50% chance. So what do you do? How do you make all of this better? Make your life better? Well, Ransomware really, really drove up the value of Bitcoin. [00:12:54] Bitcoins Ascension was largely based on Ransomware because the bad guys needed a way that was difficult to trace in order to get paid. They didn't want the bank to just sweep the money back out of your account. They didn't want the FBI or other agencies to know what they were doing and where they were located. [00:13:20] So, what they did is, uh, they decided, Hey, wait a minute. Now this whole crypto game sounds interesting. And of course talking about crypto currency game, because from their viewpoint, it was anonymous. So they started demanding ransoms instead of dollars, PayPal, even gift certificates that they would receive from you. [00:13:46] They decided we're going to use some of the cryptocurrencies. And of course the big one that they started using was Bitcoin and Bitcoin has been rather volatile. Hasn't it over the years. And its founding was ethically. Empty, basically what they did and how they did it. It's just disgusting again, how bad some people really are, but they managed to manipulate the cryptocurrency themselves. [00:14:17] These people that were the early. There's of the cryptocurrency called Bitcoin and they manipulated it. They manipulated people into buying it and accepting it, and then they managed to drive the price up. And then the, the hackers found, oh, there's a great way to do it. We're going to use Bitcoin. And so they demanded ransoms and Bitcoin, and they found that no longer did they have to get like a hundred dollar gifts, different kid for Amazon. [00:14:46] Now they could charge a thousand dollars, maybe even a million dollars or more, which is what we saw in 2021 and get it paid in Bitcoin. Now Bitcoin is kind of useful, kind of not useful. Most places don't take Bitcoin as payment, some have started to because they see it might be an investment in the future. [00:15:11] I do not use Bitcoin and I don't promote it at all, but here's what we've been seeing. Uh, and this is from the chief technology officer over tripwire, his name's Dave Meltzer. What we've seen with ransom. Attacks here. And the tie to Bitcoin want to cry back in 2017 was terrible and it destroyed multiple companies. [00:15:39] One of our clients had us protecting one of their divisions and. We were using really good software. We were keeping an eye on it. In fact, in the 30 years I've been protecting businesses from cyber intrusions. We have never, ever had a successful intrusion. That's how effectively. And I'm very, very proud of that. [00:16:05] Very proud of that. We've we've seen ransomware attacks come and go. This wanna cry. Ransomware attack destroyed every part of the company, except for. The one division we were protecting, and this is a big company that had professional it, people who really weren't very professional. Right. And how, how do you decide, how do you figure out if someone really knows what they're talking about? [00:16:32] If all they're doing is throwing around buzzwords, aren't, that's a huge problem for the hiring managers. But anyways, I digress because having a. Particular series of letters after your name representing tests that you might've passed doesn't mean you're actually any good at anything. That's always been one of my little pet peeves over the decades. [00:16:55] Okay. But another shift in the targeting of Ransomware now is showing a major uptick in attacks. Operational technology. Now that's a real big thing. We've had some huge hits. Uh, we think of what happened with solar winds and how it got into solar wind software, which is used to monitor computers had been. [00:17:24] And had inserted into it. This one little nice little piece of code that let the bad guys into thousands of networks. Now we've got another operational technology hack in progress. As we speak called vog for J or log for shell. Huge right now, we're seeing 40% of corporate networks are right now being targeted by attackers who are trying to exploit this log for J. [00:17:53] So in both cases, it's operational software. It's software businesses are using. Part of their operations. So we're, and part of that is because we're seeing this convergence of it, which is of course information technology and operational technology environment. In many times in the past, we've seen, for instance, the sales department going out and getting sales force or, or something else online or off. [00:18:25] They're not it professionals in the sales department or the marketing department. And with all of these kids now that have grown up and are in these it departments in their thirties and think, wow, you know, I've been using technology my whole life. I understand this stuff. No, you don't. That has really hurt a lot of bigger companies. [00:18:48] Then that's why some companies have come to me and saying, Hey, we need help. We need some real adult supervision. There's, there's so many people who don't have the decades of experience that you need in order to see the types of holes. So. We've got the it and OT kind of coming together and they've exposed a technology gap and a skills gap. [00:19:16] The businesses are trying to solve right now in order to protect themselves. They're moving very quickly in order to try and solve it. And there they've been pretty much unable to. And w we use for our clients, some very advanced systems. Hardware software and tools, because again, it goes back to the kind of the one pane of glass. [00:19:38] Cisco doesn't really only have one pane of glass, but that's where it goes back to. And there's a lot of potential for hackers to get into systems, but having that unified system. That Cisco offers really helps a lot. So that's kinda my, my little inside secret there, but we walk into companies that have Cisco and they're completely misusing them. [00:20:02] In fact, one of these, uh, what do you, would you call it? Well, it's called a school administrative unit in my state and it's kind of a super school board, super school district where there's multiple school districts. Hold two. And they put out an RFP because they knew we liked Cisco and what some of the advantages were. [00:20:22] So they put out a request for proposal for Cisco gear and lo and behold, they got Cisco gear, but they didn't get it configured properly, not even close. They would have been better off buying something cheap and being still exposed. Like, you know, uh, I'm not going to name some of this stuff you don't want to buy. [00:20:42] Don't want to give them any, uh, any airtime as it were. But what we're finding now is law enforcement has gotten better at tracking the digital paper trail from cryptocurrencies because cryptocurrencies do have a. Paper trail and the bad guys didn't realize this. At first, they're starting to now because the secret service and the FBI have been taking down a number of these huge ransomware gangs, which is great. [00:21:16] Thank you very much for doing that. It has been phenomenal because they've been able to stop much of the Ransomware by taking down these gangs. But criminal activity that's been supported by nation states like North Korea, China, and Russia is much harder to take down. There's not much that our law enforcement can do about it. [00:21:42] So w how does this tie into Ransomware and cryptocurrency while ultimately. The ability to tr address the trail. That's left behind a ransom payment. There's been a massive shift in the focus from government trying to tackle the underlying problem of these parolees secured curdle Infor critical infrastructure sites. [00:22:06] And that's what I did training for. The eyes infra guard program on for a couple of years, it has shifted. Now we've got executive orders. As I mentioned earlier, from various presidents to try and tighten it up and increase government regulation mandate. But the big question is, should you pay or not? And I recommend to everyone out there, including the federal government recommends this, by the way, don't pay ransoms because you're just encouraging them. [00:22:40] Well, as fewer and fewer ransoms are paid, what's going to happen to Bitcoin. What's going to happen to cryptocurrencies while the massive rise we saw in the value of Bitcoins will deteriorate. Because we won't have businesses trying to buy Bitcoin before they're even ransomed in order to mitigate any future compromise. [00:23:06] So I love this. I think this is great. And I think that getting more sophisticated systems like what, like my company mainstream does for businesses that I've been doing for over 30 years is going to draw. Well, some of these cryptocurrencies like Bitcoin down no longer will the cryptocurrencies be supported by criminals and Ransomware. [00:23:35] So that's my hope anyways. And that's also the hope of David Meltzer, chief technology officer over at tripwire hope you're having a great year so far. You're listening to Craig Peter sohn.com. Sign up for my. At Craig peterson.com. And hopefully I can help you have a little bit of a better year ahead. [00:23:57] All of these data breaches that the hackers got are not graded equal. So we're going to go through a few more types of hacks, what they got. And what does it mean to you and what can you do about it? [00:24:13] Have I been B EEN poned P w N E d.com. And this is a website that has been put together by a guy by the name of Troy hunt. He's an Australian and it goes through the details of various. So that he has found now it's not just him. There are a lot of people who are out there on the dark web, looking for hacks, and there's a few different types of hacks. [00:24:43] And of course, a lot of different types of information that has been compromised and gathered by the bad guys. And, um, stat just out this week is talking about how businesses are so easy. To compromise. It is crazy. This was a study that was done by a company called positive technologies, and they had a look at businesses. [00:25:11] Basically they did white hacking of those businesses and found that 93% of tested networks now. 3% of tested networks are vulnerable to breaches. Now that is incredible. And according to them in dark reading, it says the vast majority of businesses can be compromised within one month by a motivated attacker using common tech. [00:25:42] Such as compromising credentials, exploiting, known vulnerabilities in software and web applications or taking advantage of configuration flaw. Isn't that something in 93% of cases, an external attacker could breach a target company's network and gain access to local devices and systems in 71% of cases, the attacker could affect the business in a way deemed unacceptable. [00:26:13] For example, every. Bank tested by positive technologies could be attacked in a way, the disrupted business processes and reduced their quality of service. It's a very big deal. And much of this has to do with the fact that we're not taking cyber secure. Seriously as businesses or as government agencies. [00:26:41] Now, the government agencies have been trying to pull up their socks. I got to give a handout to president Biden. He really started squeezing many of these federal contractors to get security in place. President Trump really pushed it even back to president Obama, who. Pushed this fairly heavily. Now we're starting to see a little bit of movement, but how about the smaller guys? [00:27:08] How about private businesses? What are you doing? So I'm going through right now. Some of the basic things you can get from, have I been poned and what you can do with all of that data, all of that information, what does it mean to you? So I'm looking right now at my business email address, which isCraig@mainstream.net, pretty simple Craig and mainstream gotten that. [00:27:36] And I found because this email address is about 30 years old. Yeah. I've been using it a long time, about 14 data breaches and. Paste. All right. So what does that mean? What is a paste? Well, pastes are a little bit different than a regular hack. All right. The paste is information that has been pasted to a publicly facing. [00:28:03] Website. Now there's many of them out there. There've been a lot of breaches of Amazon site of Amazon databases, Azure, all of these types of things. But we're, we're talking about here are these websites that are designed to. People to share whatever they want. So for instance, you might have a real cool program, wants to people, those to try out to you don't have the bandwidth to send it to them. [00:28:28] You certainly can send it via email because it's much, much, much too big. So sites like Pastebin or out there to allow you to go ahead and paste stuff in and share the link. Pretty simple, fairly straightforward. Well, these pay sites are also used by hackers to make it even easier for them to anonymously share information. [00:28:55] And many times the first place that a breach appears is on one of these paste sites. So have I been poned searches through these different pastes that are broadcast by a Twitter account called dump Mon, which is a site where again, bad guys are putting information out about dumps had been found as well as good guys. [00:29:20] All right. And they. Port, uh, on, in the dump mom dump MUN Twitter account. If you're interested, it's at D U M P M O N. They report emails that are potential indicator of a breach. So finding an email address in a paste. Necessarily mean it's been disclosed as a result of a breach, but you should have a look at the paste and determine whether or not your account has been legitimately compromised as part of that breach or not. [00:29:53] All right. So in my case again, for theCraig@mainstream.net email address, it was involved. In a paste. So let me see what it says. So let me see. It shows it involved in a pace. This is pace title AA from July, 2015. So this is information from published to a publicly facing website. I don't know if I click on that. [00:30:22] What does it do? Yeah. Okay. So it actually has a link to the paste on AEs to ban. And in this case it's gone, right? It's been deleted. It could have been deleted by the Pastebin staff. Somebody told them to take it down, whatever it is. But again, have I been poned allows you to see all of the information that has been found by the top security. [00:30:48] Researchers in the world, including various government agencies and allows you to know what's up. So let's have a look here at passwords. So if you click passwords at the very top, this is the other tool you should be looking at. You can safely type in the passwords you use. What have I been poned does is instead of taking the passwords from these hacks in the clear and storing them, it creates a check some of the password. [00:31:21] So if you type a password into this, I'm going to type in P a S S w Z. Oh, excuse me. Uh, oh, is that, let me use a better password. P at S S w zero RD. One of the most common passwords on the internet, common passwords ever. Okay. So it says, oh no, poned this password has been seen 73,586 times B four. Okay. It says it, the passwords previously. [00:31:53] Appeared in a data breach and should never be used if you've ever used it anywhere before change it. You see, that's why you need to check your passwords here. Are they even safe to use because what the bad guys have done in order to counter us using. Longer passwords. Cause it's not the complexity of the password that matters so much. [00:32:16] It's the length of the password. So they don't have enough CPU resources in order to try every possible password from eight characters through 20 characters long, they could never do that. Would take forever or going to try and hack in. So what they do is they use the database of stolen passwords in order to try and get in to your account. [00:32:42] Hey, I'm going to try and summarize all of this in the newsletter. So keep your eye. For that. And again, the only way you're going to find that out and get my summary today, including the links to all of this stuff is by being on my email list. Craig Peterson.com/subscribe. That's Craig Peterson, S O n.com/subscribe, stick around. [00:33:09] Did you know, there is a site you can check your password against to see if other people have used it. And if that password has been stolen, it's a really great site called have I been postponed? And we're going to talk about it more right now. [00:33:26] You know, I've been doing cyber security pretty much as a primary job function here in my career for about, let me see. [00:33:37] Not since 92. So my goodness, uh, yeah, an anniversary this year. Okay. 30 years. So you're listening to a lot of experience here as I have. Protect some of the biggest companies in the world, the department of defense, defense, and military contractors all the way down through our local dentist's office. So over 5,000 companies over the years, and I helped perform what are called virtual CIS services. [00:34:11] Which are services to help companies make sure that they have their security all lined up. And we also have kind of a hacker audit whether or not you are vulnerable as a business to being hacked. So we'll go in, we'll look at your systems. We can even do a little bit of white hat hacking in order to let you know what information is out there available about your company. [00:34:39] And that's really where. Have I been poned comes in. It's a very simple tool to use and it gives you some great information, some really good information about what it is that you should be doing. What is that? I had a meeting with the FBI, one of my client's sites, because they had been hacked and my client said, yeah, go ahead and bring them in. [00:35:03] And it turned out to be the worst infection that the Boston office of the FBI has ever seen. There were active Chinese backdoors in there stealing their information. Their plans are designed everything from them. Right there. Right. And, oh, it was just incredible to see this thing that it all started because they said they had an email problem. [00:35:30] We started looking at more closely and we found him indications of compromise, et cetera. So it gets bad. I've been doing this for a long time. But one of the things that you can do, cause I understand not everybody can do what we do. There are some very complicated tools we use and methods, methodologies, but this is something anyone can do. [00:35:53] Again, this site's called, have I been poned.com? You don't have to be a white hat hacker to use this. This is not a tool for the black hats, for another words, for the bad guys, for the hackers out there. This is a tool for you, whether you're a business person or a home user. And we talked about how you can sign up there to get a notification. [00:36:18] If your account has been hacked. So I'm going to the site right now. Have I been poned, which is spelled P w N E D. Have I being B E N poned P w N E d.com. And I'm going to type in me@craigpetersong.com, which is my main email address for the radio show and others. So good news. It says. Postage found. In other words, this particular email address has not been found in any of the hacks on the dark web that Troy has access to. [00:36:56] Now, remember, Troy does not know about every hack that's occurred. He does not know about every data breach that has occurred, but he knows about a whole lot of them. And I mean, a lot. If you look on his site right there in the homepage, you'll see the largest breaches that he knows about drug. For instance, 510 million Facebook accounts that were hacked. [00:37:24] He has the most recently added breaches. We just got an addition from the United Kingdom, from their police service over there. Some of the more recent ones include Gravatar accounts. Gravatar you might have a, it's a very common, in fact, 114 million Gravatar accounts information were compromised. So me at Craig Peterson is safe. [00:37:52] Well, let me check. My mainstream email address now, mainstream.net is the website that I've been using for about 30 years now online. And this is the company that I own that is looking at how do we protect businesses? No. And we're a small company, basically a family operation, and we use a lot of different people to help out with specific specialties. [00:38:21] But let me seeCraig@mainstream.net, this one's guaranteed to be poned all right, because again, that email addressCraig@mainstream.net is close to 30 years old. Uh, okay. So here we go. 14 data breaches. It says my business email address has been involved. Eight tracks back in 2017 and it says compromised data was emails and passwords. [00:38:48] The Apollo breach in July of 2018. This was a sales engagement startup email address, employer, geographic location, job, title, name, phone number salutation, social media profiles. Now you see this information that they got about me from this Apollo breach. Is the type of information that they need in order to fish you now, we're talking about phishing, P H I S H I N G. [00:39:17] And the whole idea behind fishing is they trick you into doing something that you probably. Should not do. And boy, do they trick you into it? Okay. So the data left, exposed by a Paulo was used in their revenue acceleration platform and it's data that they had gathered. That's fishing stuff. So for instance, I know my company name, they know where it's located. [00:39:44] They know what my job title is, uh, phone numbers, uh, how to address me, right. Not my pronouns, but salutations, uh, and social media profile information interest in it. So think about all of that and how they could try and trick me into doing something that really is against my best judgment. My better interest makes sense. [00:40:09] Co this big collection collection. Number one in January, 2019, they found this massive collection of, of a credential stuffing lists. So that's combinations of email addresses and passwords. It's the, uh, 773 million record collection. So what password stuffing is, is where they have your username. They have your passwords that are used on multiple accounts. [00:40:40] Now, usually the username is your email address and that's a problem. And it really bothers me when websites require your email address for you to log in, as opposed to just some name that you make up. And I make up a lot of really cool names based on random words. Plus I have 5,000 identities that are completely fabricated that I use on various social media sites or other sites where I don't care if they have my right information. [00:41:14] Now, obviously the bank's gonna need your information. You can't give it to the, you know, the fake stuff to law enforcement. Too anyways, but that's what credential stuffing is. They will use the email address that you have, that they found online in one of these massive dumps, or maybe one of the smaller ones are long with the passwords. [00:41:39] They found that you use on those websites and they will stuff them and other. They'll use them on a website. They will continually go ahead and just try different username, different password combinations until they get in. Now, that is a very, very big problem called credential stuffing. And that's why you want to make sure that you change your password when a breach occurs. [00:42:10] And it isn't a bad idea to change it every six months or so. We'll talk more about this when we get back, but I want you to make sure you go right now because we've got bootcamps and other things starting up with just probably mid to late January. And you only find out about them@craigpeterson.com. [00:42:32] Make sure you subscribed. .
Have You Checked If Your Email Is On The Dark Web? Let's Do It Now! Do you know how to find out if you have had your private information stolen? Well, you know, the odds are probably pretty bad, but where was it stolen? When? What has been stolen? How about your password and how safe is that password? We're going to show you real hard evidence, and what you can do to fix things! [Following is an automated transcript] [00:00:16] Knowing whether or not your data has been stolen and what's been stolen is very important. [00:00:24] And there is a service out there that you can go to. They don't charge you a thin dime, nothing, and you can right there find out which of your account has been compromised. And. Out on the dark web. Now the dark web is the place that the criminals go. That's where they exchange information they've stolen. [00:00:49] That's where they sell it. That's where you can buy a tool to do ransomware hacking all on your own. Far less than 50 bucks. In fact, ransomware as a service is available where they'll do absolutely everything except infect people. So you just go ahead and you sign up with them, you pay them a 20% or sometimes more commission. [00:01:12] You get somebody to download in fact to themselves with the ransomware and they do everything else. They take the phone call, they find out what it is. Company is doing and they set the ransom and they provide tech support for the person that got ransomed in order to buy Bitcoin or sometimes some of these other cryptocurrencies. [00:01:38] In fact, we've got another article in the newsletter this week about cryptocurrencies and how they may be falling through. Floor because of ransomware. We're going to talk about that a little later here, but here's the bottom line. You really want to know this. You want to know if the bad guys are trading your information on the dark web, you want to know what information they have, so you can keep an eye on. [00:02:11] Now you guys are the best and brightest, you know, you gotta be cautious or you wouldn't be listening today. And because, you know, you've been caught need to be cautious. You have been cautious, but the time you need to be the most cautious is right after one of the websites that you use, that hasn't been hacked because the fresher, the information, the more it's worth on the dark web, your identity can be bought on the dark web for. [00:02:38] Penny's depending on how much information is there. If a bad guy has your name, your email, the password you've used on a few different website, your home address, social security number, basically the whole shooting match. They can sell your personal information for as little as. $2 on the dark web. That is really bad. [00:03:02] That's sad. In fact, because it takes you a hundred or more hours. A few years ago, they were saying about 300 hours nowadays. It's less in order to get your identity kind of back in control. I suspect it probably is closer to 300, frankly, because you. To call anybody that pops up on your credit report. Oh, and of course you have to get your credit report. [00:03:29] You have to review them closely. You have to put a freeze on your. Got an email this week from a listener whose wife had her information stolen. He had lost a wallet some years ago and she found because of a letter that came saying, Hey, thanks for opening an account that someone had opened an account in her name. [00:03:51] Now the good news for her is that it had a zero balance. Caught it on time. And because it was a zero balance, it was easy for her to close the account and he's had some problems as well because of the lost wallet a few years back. So again, some basic tips don't carry things like your social security card in your wallet. [00:04:17] Now you got to carry your driver's license because if you're driving, the police wanted, okay. Nowadays there's in some ways less and less of a reason to have that, but our driver's license, as you might've noticed on the back, many of them have either a QR code or they've got a kind of a bar code scan on them, but that big QR code contains all kinds of information about. [00:04:41] You that would normally be in the online database. So maybe you don't want to carry a bunch of cash. Although, you know, cash is king and credit cards can be problematic. It kind of depends. And the same thing is true with any other personal identifiable information. Keep it to a minimum in your wall. But there is a place online that I mentioned just a minute ago that does have the ability to track much of the dark web. [00:05:13] Now this guy that put it together, his name's Troy hunt, and Troy's an Australian he's been doing this. Public service for forever. He tried to sell his little company, but the qualifications for buying it included, you will keep it free. And there are billions of people, or I shouldn't say people there's billions of requests to his website about people's private information. [00:05:42] So, how do you deal with this? What do you do? Well, the website is called, have I been poned? Have I been E and poned P w N E D. Ponying is an old term that comes from. Uh, these video games before they were online. And it means that basically I own you, I own all of your properties. You've been postponed and that's what Troy kind of followed here. [00:06:11] Have I been postponed to.com is a website that you can go to now. They have a whole bunch of other things. They have API calls. For those of you who are programmers and might want to keep an eye out for your company's record. Because it does have that ability as well. And it has a tie ins too, with some of the password managers, like one password to be able to tell is my new password, any good. [00:06:41] And which websites have been hacked. Does that make sense? And so that is a very good thing, too, because if you know that a website that you use has been hacked, I would like to get an email from them. So the first thing right there in the homepage, you're going to want to do. Is click on notify me. So you ensure in your email address, I'm going to do that right now, while we're talking, they've got a recapture. [00:07:12] I'm not a robot. So go ahead and click that. And then you click on the button. Notify. a lot of people are concerned nowadays about the security and safety of their information. They may not want to put their email address into a site like this. Let me assure you that Troy. Is on the op and up, he really is trying to help. [00:07:39] He does not use any of the information that you provide on his website for evil. He is just trying to be very, very helpful. Now his site might get hacked, I suppose, but it has been just a huge target of. Characters and because of that, he has a lot of security stuff in place. So once you've put your email address right into the notify me box, click on notify me of [00:08:06] Of course you got to click the I'm not a robot. So once you've done that, It sends you a verification email. So all you have to do at that point, it's just like my website. When you sign up for my newsletter, keep an eye out for an email from Troy from have I been poned.com asking you if you signed up for his notification service? [00:08:31] Obviously it is a very good idea to click on his link in the email. Now I caution people, it costs. And you guys all of the time about clicking on links and emails, because so many of them are malicious, but in the case of like Troy or my website, or maybe another one that you sign up for, if you just signed up for. [00:08:54] You should expect an email to come to your mailbox within a matter of a couple of minutes, and then you should spend just that minute or so. It takes to click on that email to confirm that you do want to get the emails from the website, because if you don't hit that confirmation, you're not going to get the emails. [00:09:17] Let me explain a little bit about why that is. Good guys on the internet don't want to spam you. They don't want to overload you with all kinds of emails that may matter may not matter, et cetera. They just want to get you information. So every legitimate, basic a guy out there business, a organization, charity that is legitimate is going to send you a confirmation email. [00:09:50] The reason is they don't want someone to who doesn't like you let's say to sign you up on a few hundred different emails site. And now all of a sudden you're getting. Well, these emails that you didn't want, I had that happen to me years and years ago, and it wasn't sites that I had signed up for. In fact, some of them were rather pornographic and they kept sending me emails all of the time. [00:10:19] So Troy is going to send you just like I do another legitimate website, send you an email. The link that you must click. If you do not click his link, you are not going to get the emails. It's really that simple. Now, Troy looking at a site right now has information on 11 billion pond account poned accounts. [00:10:47] Really? That is huge. It is the largest collection that's publicly available of. To count. So I'm, we're going to talk about that a little bit more. And what information does he have? How does he protect it? What else can you find out from? Have I been poned? This is an important site. One of the most important sites you can visit in order to keep yourself safe. [00:11:16] Next to mine. Right? Make sure you visit right now. Craig peterson.com/subscribe and sign up for my newsletter and expect that confirmation email to. [00:11:29] Have you been hit by ransomware before? Well, it is a terrible thing if you have, but what's the future of ransomware? Where is it going? We've talked about the past and we'll start with that and then move into what we're expecting to come. [00:11:46] The future of ransomware is an interesting one. And we kind of have to look at the past in ransomware. [00:11:55] Ransomware was pretty popular in that bad guy. Just loved it. They still do because it is a simple thing to do. And it gives them incredible amounts of flexibility in going after whoever they want to go. After initially they were sending out ransomware to anybody's email address. They could find and hoping people would click on it. [00:12:24] And unfortunately, many people did click. But back then the ransoms were maybe a couple hundred dollars and you paid the ransom and 50% chance you got your data back. Isn't that terrible 50% chance. So what do you do? How do you make all of this better? Make your life better? Well, ransomware really, really drove up the value of Bitcoin. [00:12:54] Bitcoins Ascension was largely based on ransomware because the bad guys needed a way that was difficult to trace in order to get paid. They didn't want the bank to just sweep the money back out of your account. They didn't want the FBI or other agencies to know what they were doing and where they were located. [00:13:20] So, what they did is, uh, they decided, Hey, wait a minute. Now this whole crypto game sounds interesting. And of course talking about crypto currency game, because from their viewpoint, it was anonymous. So they started demanding ransoms instead of dollars, PayPal, even gift certificates that they would receive from you. [00:13:46] They decided we're going to use some of the cryptocurrencies. And of course the big one that they started using was Bitcoin and Bitcoin has been rather volatile. Hasn't it over the years. And its founding was ethically. Empty, basically what they did and how they did it. It's just disgusting again, how bad some people really are, but they managed to manipulate the cryptocurrency themselves. [00:14:17] These people that were the early. There's of the cryptocurrency called Bitcoin and they manipulated it. They manipulated people into buying it and accepting it, and then they managed to drive the price up. And then the, the hackers found, oh, there's a great way to do it. We're going to use Bitcoin. And so they demanded ransoms and Bitcoin, and they found that no longer did they have to get like a hundred dollar gifts, different kid for Amazon. [00:14:46] Now they could charge a thousand dollars, maybe even a million dollars or more, which is what we saw in 2021 and get it paid in Bitcoin. Now Bitcoin is kind of useful, kind of not useful. Most places don't take Bitcoin as payment, some have started to because they see it might be an investment in the future. [00:15:11] I do not use Bitcoin and I don't promote it at all, but here's what we've been seeing. Uh, and this is from the chief technology officer over tripwire, his name's Dave Meltzer. What we've seen with ransom. Attacks here. And the tie to Bitcoin want to cry back in 2017 was terrible and it destroyed multiple companies. [00:15:39] One of our clients had us protecting one of their divisions and. We were using really good software. We were keeping an eye on it. In fact, in the 30 years I've been protecting businesses from cyber intrusions. We have never, ever had a successful intrusion. That's how effectively. And I'm very, very proud of that. [00:16:05] Very proud of that. We've we've seen ransomware attacks come and go. This wanna cry. Ransomware attack destroyed every part of the company, except for. The one division we were protecting, and this is a big company that had professional it, people who really weren't very professional. Right. And how, how do you decide, how do you figure out if someone really knows what they're talking about? [00:16:32] If all they're doing is throwing around buzzwords, aren't, that's a huge problem for the hiring managers. But anyways, I digress because having a. Particular series of letters after your name representing tests that you might've passed doesn't mean you're actually any good at anything. That's always been one of my little pet peeves over the decades. [00:16:55] Okay. But another shift in the targeting of ransomware now is showing a major uptick in attacks. Operational technology. Now that's a real big thing. We've had some huge hits. Uh, we think of what happened with solar winds and how it got into solar wind software, which is used to monitor computers had been. [00:17:24] And had inserted into it. This one little nice little piece of code that let the bad guys into thousands of networks. Now we've got another operational technology hack in progress. As we speak called vog for J or log for shell. Huge right now, we're seeing 40% of corporate networks are right now being targeted by attackers who are trying to exploit this log for J. [00:17:53] So in both cases, it's operational software. It's software businesses are using. Part of their operations. So we're, and part of that is because we're seeing this convergence of it, which is of course information technology and operational technology environment. In many times in the past, we've seen, for instance, the sales department going out and getting sales force or, or something else online or off. [00:18:25] They're not it professionals in the sales department or the marketing department. And with all of these kids now that have grown up and are in these it departments in their thirties and think, wow, you know, I've been using technology my whole life. I understand this stuff. No, you don't. That has really hurt a lot of bigger companies. [00:18:48] Then that's why some companies have come to me and saying, Hey, we need help. We need some real adult supervision. There's, there's so many people who don't have the decades of experience that you need in order to see the types of holes. So. We've got the it and OT kind of coming together and they've exposed a technology gap and a skills gap. [00:19:16] The businesses are trying to solve right now in order to protect themselves. They're moving very quickly in order to try and solve it. And there they've been pretty much unable to. And w we use for our clients, some very advanced systems. Hardware software and tools, because again, it goes back to the kind of the one pane of glass. [00:19:38] Cisco doesn't really only have one pane of glass, but that's where it goes back to. And there's a lot of potential for hackers to get into systems, but having that unified system. That Cisco offers really helps a lot. So that's kinda my, my little inside secret there, but we walk into companies that have Cisco and they're completely misusing them. [00:20:02] In fact, one of these, uh, what do you, would you call it? Well, it's called a school administrative unit in my state and it's kind of a super school board, super school district where there's multiple school districts. Hold two. And they put out an RFP because they knew we liked Cisco and what some of the advantages were. [00:20:22] So they put out a request for proposal for Cisco gear and lo and behold, they got Cisco gear, but they didn't get it configured properly, not even close. They would have been better off buying something cheap and being still exposed. Like, you know, uh, I'm not going to name some of this stuff you don't want to buy. [00:20:42] Don't want to give them any, uh, any airtime as it were. But what we're finding now is law enforcement has gotten better at tracking the digital paper trail from cryptocurrencies because cryptocurrencies do have a. Paper trail and the bad guys didn't realize this. At first, they're starting to now because the secret service and the FBI have been taking down a number of these huge ransomware gangs, which is great. [00:21:16] Thank you very much for doing that. It has been phenomenal because they've been able to stop much of the ransomware by taking down these gangs. But criminal activity that's been supported by nation states like North Korea, China, and Russia is much harder to take down. There's not much that our law enforcement can do about it. [00:21:42] So w how does this tie into ransomware and cryptocurrency while ultimately. The ability to tr address the trail. That's left behind a ransom payment. There's been a massive shift in the focus from government trying to tackle the underlying problem of these parolees secured curdle Infor critical infrastructure sites. [00:22:06] And that's what I did training for. The eyes infra guard program on for a couple of years, it has shifted. Now we've got executive orders. As I mentioned earlier, from various presidents to try and tighten it up and increase government regulation mandate. But the big question is, should you pay or not? And I recommend to everyone out there, including the federal government recommends this, by the way, don't pay ransoms because you're just encouraging them. [00:22:40] Well, as fewer and fewer ransoms are paid, what's going to happen to Bitcoin. What's going to happen to cryptocurrencies while the massive rise we saw in the value of Bitcoins will deteriorate. Because we won't have businesses trying to buy Bitcoin before they're even ransomed in order to mitigate any future compromise. [00:23:06] So I love this. I think this is great. And I think that getting more sophisticated systems like what, like my company mainstream does for businesses that I've been doing for over 30 years is going to draw. Well, some of these cryptocurrencies like Bitcoin down no longer will the cryptocurrencies be supported by criminals and ransomware. [00:23:35] So that's my hope anyways. And that's also the hope of David Meltzer, chief technology officer over at tripwire hope you're having a great year so far. You're listening to Craig Peter sohn.com. Sign up for my. At Craig peterson.com. And hopefully I can help you have a little bit of a better year ahead. [00:23:57] All of these data breaches that the hackers got are not graded equal. So we're going to go through a few more types of hacks, what they got. And what does it mean to you and what can you do about it? [00:24:13] Have I been B EEN poned P w N E d.com. And this is a website that has been put together by a guy by the name of Troy hunt. He's an Australian and it goes through the details of various. So that he has found now it's not just him. There are a lot of people who are out there on the dark web, looking for hacks, and there's a few different types of hacks. [00:24:43] And of course, a lot of different types of information that has been compromised and gathered by the bad guys. And, um, stat just out this week is talking about how businesses are so easy. To compromise. It is crazy. This was a study that was done by a company called positive technologies, and they had a look at businesses. [00:25:11] Basically they did white hacking of those businesses and found that 93% of tested networks now. 3% of tested networks are vulnerable to breaches. Now that is incredible. And according to them in dark reading, it says the vast majority of businesses can be compromised within one month by a motivated attacker using common tech. [00:25:42] Such as compromising credentials, exploiting, known vulnerabilities in software and web applications or taking advantage of configuration flaw. Isn't that something in 93% of cases, an external attacker could breach a target company's network and gain access to local devices and systems in 71% of cases, the attacker could affect the business in a way deemed unacceptable. [00:26:13] For example, every. Bank tested by positive technologies could be attacked in a way, the disrupted business processes and reduced their quality of service. It's a very big deal. And much of this has to do with the fact that we're not taking cyber secure. Seriously as businesses or as government agencies. [00:26:41] Now, the government agencies have been trying to pull up their socks. I got to give a handout to president Biden. He really started squeezing many of these federal contractors to get security in place. President Trump really pushed it even back to president Obama, who. Pushed this fairly heavily. Now we're starting to see a little bit of movement, but how about the smaller guys? [00:27:08] How about private businesses? What are you doing? So I'm going through right now. Some of the basic things you can get from, have I been poned and what you can do with all of that data, all of that information, what does it mean to you? So I'm looking right now at my business email address, which isCraig@mainstream.net, pretty simple Craig and mainstream gotten that. [00:27:36] And I found because this email address is about 30 years old. Yeah. I've been using it a long time, about 14 data breaches and. Paste. All right. So what does that mean? What is a paste? Well, pastes are a little bit different than a regular hack. All right. The paste is information that has been pasted to a publicly facing. [00:28:03] Website. Now there's many of them out there. There've been a lot of breaches of Amazon site of Amazon databases, Azure, all of these types of things. But we're, we're talking about here are these websites that are designed to. People to share whatever they want. So for instance, you might have a real cool program, wants to people, those to try out to you don't have the bandwidth to send it to them. [00:28:28] You certainly can send it via email because it's much, much, much too big. So sites like Pastebin or out there to allow you to go ahead and paste stuff in and share the link. Pretty simple, fairly straightforward. Well, these pay sites are also used by hackers to make it even easier for them to anonymously share information. [00:28:55] And many times the first place that a breach appears is on one of these paste sites. So have I been poned searches through these different pastes that are broadcast by a Twitter account called dump Mon, which is a site where again, bad guys are putting information out about dumps had been found as well as good guys. [00:29:20] All right. And they. Port, uh, on, in the dump mom dump MUN Twitter account. If you're interested, it's at D U M P M O N. They report emails that are potential indicator of a breach. So finding an email address in a paste. Necessarily mean it's been disclosed as a result of a breach, but you should have a look at the paste and determine whether or not your account has been legitimately compromised as part of that breach or not. [00:29:53] All right. So in my case again, for theCraig@mainstream.net email address, it was involved. In a paste. So let me see what it says. So let me see. It shows it involved in a pace. This is pace title AA from July, 2015. So this is information from published to a publicly facing website. I don't know if I click on that. [00:30:22] What does it do? Yeah. Okay. So it actually has a link to the paste on AEs to ban. And in this case it's gone, right? It's been deleted. It could have been deleted by the Pastebin staff. Somebody told them to take it down, whatever it is. But again, have I been poned allows you to see all of the information that has been found by the top security. [00:30:48] Researchers in the world, including various government agencies and allows you to know what's up. So let's have a look here at passwords. So if you click passwords at the very top, this is the other tool you should be looking at. You can safely type in the passwords you use. What have I been poned does is instead of taking the passwords from these hacks in the clear and storing them, it creates a check some of the password. [00:31:21] So if you type a password into this, I'm going to type in P a S S w Z. Oh, excuse me. Uh, oh, is that, let me use a better password. P at S S w zero RD. One of the most common passwords on the internet, common passwords ever. Okay. So it says, oh no, poned this password has been seen 73,586 times B four. Okay. It says it, the passwords previously. [00:31:53] Appeared in a data breach and should never be used if you've ever used it anywhere before change it. You see, that's why you need to check your passwords here. Are they even safe to use because what the bad guys have done in order to counter us using. Longer passwords. Cause it's not the complexity of the password that matters so much. [00:32:16] It's the length of the password. So they don't have enough CPU resources in order to try every possible password from eight characters through 20 characters long, they could never do that. Would take forever or going to try and hack in. So what they do is they use the database of stolen passwords in order to try and get in to your account. [00:32:42] Hey, I'm going to try and summarize all of this in the newsletter. So keep your eye. For that. And again, the only way you're going to find that out and get my summary today, including the links to all of this stuff is by being on my email list. Craig Peterson.com/subscribe. That's Craig Peterson, S O n.com/subscribe, stick around. [00:33:09] Did you know, there is a site you can check your password against to see if other people have used it. And if that password has been stolen, it's a really great site called have I been postponed? And we're going to talk about it more right now. [00:33:26] You know, I've been doing cyber security pretty much as a primary job function here in my career for about, let me see. [00:33:37] Not since 92. So my goodness, uh, yeah, an anniversary this year. Okay. 30 years. So you're listening to a lot of experience here as I have. Protect some of the biggest companies in the world, the department of defense, defense, and military contractors all the way down through our local dentist's office. So over 5,000 companies over the years, and I helped perform what are called virtual CIS services. [00:34:11] Which are services to help companies make sure that they have their security all lined up. And we also have kind of a hacker audit whether or not you are vulnerable as a business to being hacked. So we'll go in, we'll look at your systems. We can even do a little bit of white hat hacking in order to let you know what information is out there available about your company. [00:34:39] And that's really where. Have I been poned comes in. It's a very simple tool to use and it gives you some great information, some really good information about what it is that you should be doing. What is that? I had a meeting with the FBI, one of my client's sites, because they had been hacked and my client said, yeah, go ahead and bring them in. [00:35:03] And it turned out to be the worst infection that the Boston office of the FBI has ever seen. There were active Chinese backdoors in there stealing their information. Their plans are designed everything from them. Right there. Right. And, oh, it was just incredible to see this thing that it all started because they said they had an email problem. [00:35:30] We started looking at more closely and we found him indications of compromise, et cetera. So it gets bad. I've been doing this for a long time. But one of the things that you can do, cause I understand not everybody can do what we do. There are some very complicated tools we use and methods, methodologies, but this is something anyone can do. [00:35:53] Again, this site's called, have I been poned.com? You don't have to be a white hat hacker to use this. This is not a tool for the black hats, for another words, for the bad guys, for the hackers out there. This is a tool for you, whether you're a business person or a home user. And we talked about how you can sign up there to get a notification. [00:36:18] If your account has been hacked. So I'm going to the site right now. Have I been poned, which is spelled P w N E D. Have I being B E N poned P w N E d.com. And I'm going to type in me@craigpetersong.com, which is my main email address for the radio show and others. So good news. It says. Postage found. In other words, this particular email address has not been found in any of the hacks on the dark web that Troy has access to. [00:36:56] Now, remember, Troy does not know about every hack that's occurred. He does not know about every data breach that has occurred, but he knows about a whole lot of them. And I mean, a lot. If you look on his site right there in the homepage, you'll see the largest breaches that he knows about drug. For instance, 510 million Facebook accounts that were hacked. [00:37:24] He has the most recently added breaches. We just got an addition from the United Kingdom, from their police service over there. Some of the more recent ones include Gravatar accounts. Gravatar you might have a, it's a very common, in fact, 114 million Gravatar accounts information were compromised. So me at Craig Peterson is safe. [00:37:52] Well, let me check. My mainstream email address now, mainstream.net is the website that I've been using for about 30 years now online. And this is the company that I own that is looking at how do we protect businesses? No. And we're a small company, basically a family operation, and we use a lot of different people to help out with specific specialties. [00:38:21] But let me seeCraig@mainstream.net, this one's guaranteed to be poned all right, because again, that email addressCraig@mainstream.net is close to 30 years old. Uh, okay. So here we go. 14 data breaches. It says my business email address has been involved. Eight tracks back in 2017 and it says compromised data was emails and passwords. [00:38:48] The Apollo breach in July of 2018. This was a sales engagement startup email address, employer, geographic location, job, title, name, phone number salutation, social media profiles. Now you see this information that they got about me from this Apollo breach. Is the type of information that they need in order to fish you now, we're talking about phishing, P H I S H I N G. [00:39:17] And the whole idea behind fishing is they trick you into doing something that you probably. Should not do. And boy, do they trick you into it? Okay. So the data left, exposed by a Paulo was used in their revenue acceleration platform and it's data that they had gathered. That's fishing stuff. So for instance, I know my company name, they know where it's located. [00:39:44] They know what my job title is, uh, phone numbers, uh, how to address me, right. Not my pronouns, but salutations, uh, and social media profile information interest in it. So think about all of that and how they could try and trick me into doing something that really is against my best judgment. My better interest makes sense. [00:40:09] Co this big collection collection. Number one in January, 2019, they found this massive collection of, of a credential stuffing lists. So that's combinations of email addresses and passwords. It's the, uh, 773 million record collection. So what password stuffing is, is where they have your username. They have your passwords that are used on multiple accounts. [00:40:40] Now, usually the username is your email address and that's a problem. And it really bothers me when websites require your email address for you to log in, as opposed to just some name that you make up. And I make up a lot of really cool names based on random words. Plus I have 5,000 identities that are completely fabricated that I use on various social media sites or other sites where I don't care if they have my right information. [00:41:14] Now, obviously the bank's gonna need your information. You can't give it to the, you know, the fake stuff to law enforcement. Too anyways, but that's what credential stuffing is. They will use the email address that you have, that they found online in one of these massive dumps, or maybe one of the smaller ones are long with the passwords. [00:41:39] They found that you use on those websites and they will stuff them and other. They'll use them on a website. They will continually go ahead and just try different username, different password combinations until they get in. Now, that is a very, very big problem called credential stuffing. And that's why you want to make sure that you change your password when a breach occurs. [00:42:10] And it isn't a bad idea to change it every six months or so. We'll talk more about this when we get back, but I want you to make sure you go right now because we've got bootcamps and other things starting up with just probably mid to late January. And you only find out about them@craigpeterson.com. [00:42:32] Make sure you subscribed. .
Il sogno di ogni programmatore, come sappiamo tutti, è conquistare il mondo. E quale modo migliore di usare la nostra skill primaria, scrivere codice, per controllare dei robot? In questo episodio cercheremo di capire come fare, partendo da Arduino, forse la piattaforma più nota per realizzare piccole automazioni utilizzando sensori e motori, con l'aiuto di una che il mondo lo sta già conquistando, ma in segreto, silenziosamente.Con: Edoardo Dusi, Marco Primitivo, Daniele Monti e Greta Galli/* News */JetBrains Fleet: The Next-Generation IDE by JetBrainshttps://www.jetbrains.com/fleet/AWS launches Amplify Studio, a new low-code app development toolhttps://techcrunch.com/2021/12/02/aws-launches-amplify-studio-a-new-low-code-app-development-toolIntroducing Sandpackhttps://codesandbox.io/post/sandpack-announcementOnline avatar service Gravatar allows mass collection of user infohttps://www.bleepingcomputer.com/news/security/online-avatar-service-gravatar-allows-mass-collection-of-user-info/Seul vuole farsi un proprio metaversohttps://www.ilpost.it/2021/12/05/seul-corea-del-sud-metaverso//* Link di Greta*/Youtube https://www.youtube.com/channel/UC2mIDEnDv7f3r5KdhddDhkQInstagram https://www.instagram.com/_gregalli02/TikTok https://www.tiktok.com/gretagalli/Sito https://gretagalli.it//* Newsletter & Telegram */https://landing.sparkfabrik.com/continuous-delivery-newsletterhttps://t.me/continuous_delivery/* Link e Social */https://www.sparkfabrik.com/ - @sparkfabrik
Bu hafta Tuğba Öztürk ve Murat Lostar, kripto para alım-satım platformu BitMart'tan 196 milyon dolar çalınmasını ve Gravatar'dan veri kazıma yöntemiyle elde edilen verilerin hack sayılıp sayılmayacağını yorumluyor. Görüntülü yayına youtube.com/siberingunlugu adresi üzerinden ulaşabilirsiniz. Keyifli dinlemeler! #siberingunlugu
Android gegen Tracking: Mit DuckDuckGo zur Privatsphäre Life360 verkauft Ortungsdaten seiner Nutzer Gravatar: Nutzernamen und Mail-Adressen von 114 Millionen Nutzern im Netz AVM FRITZ!Box 7510 in Kürze erhältlich – FRITZ!Repeater 1200 AX ab sofort im Handel Oppo teasert ausfahrbare Kamera an
Was Gravatar hacked or not? It depends on what you have read or what your definition of “hacked” is I suppose. The password breach monitoring service HaveIBeenPwned alerted users to a large-scale data leak by Gravatar, an add-on service for user profiles owned by Automattic. In October 2020, a security researcher published a technique for scraping large volumes of data from Gravatar, the service for providing “globally unique avatars," HaveIBeenPwned warned. This technique allowed the details of just under 114 million users to get into hackers' hands. Sarah Gooding over at WPTavern wrote that Automattic said they were not hacked. The Gravatar service gives you control over what you want to share online through their API. So this information can be made public and somebody can scrape that data and use it nefariously. Jeff Chandler pointed out that this has been an issue since 2009 and shared the information from developer.it. Security researchers and privacy advocates have warned about privacy attacks on Gravatar for years. Gravatar did not send out notices about the breach and left it to the user to accept the risk or use something other than Gravatar. WordPress updates There is a new directory for FSE block themes. Over on make.WordPress.org during the run-up to the release of 5.9 developers should note that the directory names for templates and template parts are being changed. With the release of 5.9 these will instead be: templates parts It's pretty straightforward. Events Ellen Bauer will be sharing a twitter space with Justin Mahinyala discussing #Freelance opportunities for developers, designers, writers, and marketers in the #WordPress ecosystem. They will share advice and tips on how to get started. DM any questions you want them to talk about.
Got a Minute? Checkout today's episode of The Guy R Cook Report podcast - show notes 20210615 WordPress How To Set Up Your Gravatar ----more---- Support this podcast You can also subscribe via Apple Podcasts, Google Podcasts, or Spotify. To listen to an audio podcast via the Apple Podcasts button, click on it, mouse over the title of the episode and click Play. Open Apple Podcasts to download and subscribe to podcasts. . vDomainHosting, Inc 229 Rancho Villa, Walla Walla, WA 99362 509-200-1429 I help goal oriented business owners that run established companies to leverage the power of the internet - Contact Guy R Cook @ https://guycook.wordpress.com/start-with-a-plan/ | Information Kit Support this podcast The Website Design Questionnaire https://guycook.wordpress.com/start-with-a-plan/ In the meantime, go ahead follow me on Twitter: @guyrcookreport Click to Tweet Be a patron of The Guy R Cook Report. Your help is appreciated. #theguyrcookreport https://www.patreon.com/guyrcook #uncleguy #theguyrcookreport Thanks for listening, viewing or reading the show notes for this episode.
Yuka Ohishi さんをゲストに迎えて、Twitter, メンバーシップ、プロジェクター、パラサイト、グラミー賞、Notion などについて話しました。 Show Notes Twitter is taking on Clubhouse, Substack and Patreon with new products Youtube Channel Memberships Integration FAQ – Discord Are Notifications A Dark Pattern? Dark Patterns Apple will temporarily stop taking a 30 percent cut on Facebook event fees How subscriptions work Apple Podcasts App Lets Users 'Follow' New Content Instead of 'Subscribe' in iOS 14.5 XGIMI Halo Smart Miniプロジェクター Apple discontinues original HomePod, will focus on mini Set up home theater audio with HomePod and Apple TV 4K HomePod mini is Apple's first to support Thread networking technology California’s rent control law, explained 母から「トランプが勝ちました」とLINEが…家族を陰謀論に引き寄せる“意外なモノ” The Social Dilemma パラサイト 半地下の家族 宇多田ヒカル『One Last Kiss』 Zedd & Jasmine Thompson - Funny Calendly Cloud scheduling startup Calendly raises $350M on $3B valaution Gravatar Disqus Notion How to use Notion as your blog's CMS #まいにちNotion
A vulnerability discovered by the Wordfence Threat Intelligence team in the WPBakery plugin exposes over 4 million sites. High severity vulnerabilities were discovered in the Post Grid and Team Showcase plugins. The online avatar service Gravatar, has been exposed to a user enumeration technique, which could be abused to collect data on its users' profiles, and a card skimmer was found on Boom! Mobile's web site, putting customer card data at risk.
Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 219. It is Monday October 5th 2020. I am your host Scott Gombar and Emotet Malware Taking Part in the Election. This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut. You can visit us at nwajtech.com Cyber Security Awareness Tip 5 Backup Your Data Regularly Years-Long ‘SilentFade’ Attack Drained Facebook Victims of $4M Attacks Aimed at Disrupting the Trickbot Botnet New ransomware vaccine kills programs wiping Windows shadow volumes Online avatar service Gravatar allows mass collection of user info Grindr fixed a bug allowing full takeover of any user account HP Device Manager backdoor lets attackers take over Windows systems Emotet malware takes part in the 2020 U.S. elections New Jersey hospital paid ransomware gang $670K to prevent data leak
This weeks WordPress news - Covering The Week Commencing 24th August 2020
fala galera mais uma entrevista aqui no nosso podcast dessa vez foi com a fera da GF TEAM Gravatar, Renato vieira Faixa azul adulto --- This episode is sponsored by · Anchor: The easiest way to make a podcast. https://anchor.fm/app
I'm stoked to have the Founding Developer of WordPress, Matt Mullenweg, on this episode. WordPress powers 30% of websites on the internet. WordPress isn’t just a blog software. It isn’t just a content management system or CMS. It’s an entire ecosystem and one that’s founded on the philosophy of open-source. If you come back through my blog posts and articles, you’ll see that I have been an advocate for WordPress since it was founded in 2003. It powers a great many of my sites to this day. To be a part of something that has touched so many people is an achievement in it itself. Matt is also an entrepreneur and the Founder of Automattic, who you may know as the creators of WooCommerce, VaultPress, Akismet, Gravatar and more. Any business would be proud of that staple of products, but Matt is not motivated purely by profit. He is a passionate advocate of open-source software and his work is informed by a unique personal philosophy that is more about making the web and the world a better place. If you love WordPress as I do, you are in luck. You are about to hear from the WordPress founder himself. Get ready for some amazing WordPress power tips and secrets.
I guess I got ahead of myself. I've been talking about author branding, but I didn't describe or define it. And in this world of author branding, you may be wondering, “Uh...what's an ‘author brand'?” Sorry to leave you full of questions. Like: Is it the logo you design and the colors you choose for your website? Is it the font you use for your name? Is it the banner image you use on Facebook or the photo that shows up in Gravatar? Is it the art on your book cover? Is an author brand more about voice and style? Is it tied to the subject matter you're known for? The topics you tackle? Is your brand revealed in the way you manage your Instagram feed and select images for your blog? Maybe all this talk of “brand” sickens you. “Seriously?” you're thinking, “Brands are for jeans and perfume and hotdogs, not writers!” Thinking of yourself as a brand feels slick, commercial, and product-y. “Brand” sounds like marketing manipulation or sales-speak. “I'm a Writer, Not a Brand!” “I'm not a brand!” you're shouting. “I'm a person! A writer! An artist!” And of course if you're shouting that, you're right—absolutely right. We are not neon signs to flick on and flash in a window or a color palette and typography design hoping to entice interest. We are people—people who love words. We tell stories. We pour out our hearts and hold out hope to the world. We're essayists, memoirists, novelists, poets. We are artists. (But I Would Love Readers to Read My Work) And yet, if we seek publication, we're trying to draw interest. If we're doing more than write in a journal, we must be hoping to find readers for our articles, our poetry, our short stories, our books. If we write for the public, we want to impact people. If we're honest, we'd love readers to read our work, wouldn't we? Readers Default to “Brands" And readers face a lot of choices. When a person shells out money for a book or sinks time into reading an article, she wants to be pretty sure it's worth it. So she's choosy. Sure, she'll read someone new, especially on a friend's recommendation, but she tends to gravitate to the writers she has come to know, like, and trust. She turns to those writers who turn out content that consistently addresses her need or lifts her up or makes her think or laugh or sigh. She reads the writers she knows will help meet her need. She probably doesn't think of it this way, but she turns to author brands. A Brand Is a Promise So that's a way to think of brands and writers. How can we become that trusted writer who consistently addresses a reader's needs or lifts her up or makes her think or laugh or sigh? How can we offer an unspoken, informal promise of sorts, that when a reader finds us and reads our words, he will get to know us and we'll deliver content in the same general vein. If, for example, I don't use four-letter words in my content then suddenly spew a stream of them unexpectedly, I broke my “promise,” so to speak, and went off brand. I blindsided my readers who had come to trust my tone and turn up my podcast or read aloud my articles within earshot of their conservative grandmother or grade school kids. A Brand Accumulates, Forms, and Strengthens Over Time Whether intentional or random, everything we write and send out—from social media updates to podcast episodes—is leaving people with an impression about who we are and what we're like. Over time, one blog post, magazine article, short story, or poem at a time, you're becoming known for something. Over time, you gain visibility. And over time, your brand is forming and strengthening into something. A group or groups of people are beginning to recognize you. You can see how it does involve a lot of different elements, including our subject matter, our tone, and, yes, even the colors on our website, our author photo, the cover art on our book covers, and the style of our logo. What Comes to a Reader's Mind
Matt Report - A WordPress podcast for digital business owners
In this episode, Matt Mederios is winding down the December holiday season with this interview with Dan Roundhill. Dan is a mobile engineer for Automattic and is the project lead on Simplenote a note-taking product which Matt uses and highly recommends. Automattic acquired Simperium and Simplenote in 2013. Dan shares the ins and outs of Simplenote and discusses upcoming features and what may be added in future releases. Listen to this episode: Matt Report - A WordPress podcast for digital business owners Peer into the future of Simplenote w/ Dan Roundhill Play Episode Pause Episode Mute/Unmute Episode Rewind 10 Seconds 1x Fast Forward 30 seconds 00:00 / 00:34:24 Subscribe Share RSS Feed Share Link Embed Download file | Play in new window | Duration: 00:34:24 What you will learn from this Episode: Simplenote started out as a very basic notes app that provided a user a simple and easy way to take notes on a tablet or phone. (3:07) Simplenote developed into an app that allowed you to sync across your devices so that you could take notes on any device and work anywhere. The product is stable across platforms. (3:34) Automattic has made several acquisitions and has many products that are not heavily advertised in the WordPress ecosystem. (ex: Simplenote, Cloudup, Lean Domain Search, Gravatar, and Videopress). (4:58) After the acquisition for Simplenote was made by Automattic, the focus has been on the app to get more traction with a wider audience. (6:27) Dan Roundhill is leading the Simplenote team internally for Automattic. (6:51) There is a new Simplenote app that was released for Windows and Linux that is built on React using Electron. (7:07) You can publish a note using Simplenote that shows up with a tiny url and is an easy way to share your note on the web. (9:09) There is a great support team of Happiness Engineers that gathers feedback from the app store and emails and prioritizes the requests. (11:38) Features and User Requests: Simplenote is used internally by Automattic and the request has been to sync this with WordPress. (7:59) Most features have bubbled up internally from users within Automattic with the requests that people want. (8:20) The team works from an upvoted list of features such as easily formatting text and support for images. (12:14) Simplenote's premium version was retired with sending a note to an email and Dropbox sync. (12:31) Automattic may be looking to add value to users with Simplenote by having it linked closely to Cloudup. (13:58) There has been another big push for folders from external users but the code has to be added to all the apps when synching. (14:52) Folder based tags would be a great feature because many users like to organize things using these across platforms. (15:14) The Native MAC OS app has fallen behind on the feature list because of speed and native sharing capabilities. (16:49) Simplenote is scheduled for a catch-up release and then premium features such as markdown support. (18:00) The marketing team is a pretty new team at Automattic and they are responsible for the content of Simplenote. (23:15) The apps are now open-sourced at Automattic through Github and you can add and contribute for many platforms. (29:18) Episode Resources: Automattic Akismet Simplenote Cloudup – allows users to store files in the cloud, synchronize files across devices, and share files. Lean Domain Search – allows you to find a great available domain name for your site in seconds. Gravatar – is a globally recognized avatar that follows you from site to site. VideoPress – allows you to upload videos to your WordPress site. Bear for taking notes Markdown Editing John Saddington Simperium Sharkbridge ForeFlight To Stay in Touch with Dan: Dan on Twitter Dan's blog Simplenote on Twitter To stay connected with the Matt Report, head on over to mattreport.com/subscribe. If you like the show, please leave a 5 Star review over on the Matt Report on iTunes. Be sure to check out Matt's new offering at UserFeedbackVideos.com. It is like having a co-founder for $59.00. ★ Support this podcast ★
OnlineBusinessLadies – Erfolgreich als female Solopreneur mit Ulrike Giller
Sun, 03 Sep 2017 17:20:09 +0000 https://ulrikegiller.podigee.io/173-obl171-wie-erstelle-ich-einen-gravatar 90886f85bf0886f401116d09272a1e0b Du kennst sicherlich die Situation, dass du in einem Forum oder auf einem Blog kommentierst und von dir sieht man anschließend nur ein Einheitsbild anstatt ein Foto von dir. Bei anderen erscheint jedoch wie von Zauberhand das eigene Profilbild.... UPDATE: Nach der neuen Datenschutzverordnung ab 25.Mai 2018 ist diese Anleitung leider nicht mehr aktuell und Gravatare sollten nicht mehr genutzt werden. Du kennst sicherlich die Situation, dass du in einem Forum oder auf einem Blog kommentierst und von dir sieht man anschließend nur ein Einheitsbild anstatt ein Foto von dir. Bei anderen erscheint jedoch wie von Zauberhand das eigene Profilbild. Weshalb du aber ein Foto von dir haben solltest und wie das funktioniert, erzähle ich dir in dieser Folge. Das Anleitungsvideo dazu findest du auf: www.ulrikegiller.com/folge171 **Wertvolle Ressourcen **findest du auch regelmäßig auf: www.UlrikeGiller.com/gratis Viel Spaß beim Anhören und ich würde mich sehr freuen, wenn du meinen Podcast abonnierst und regelmäßig dabei bist. **FREE: ** https://ulrikegiller.com/gratis Webseite: https://UlrikeGiller.com Facebook-Gruppe: https://facebook.com/groups/business2go Facebook-Seite: https://de-de.facebook.com/UlrikeGiller/ Instagram: https://www.instagram.com/ulrikegiller_com/ **Kennenlerngespräch vereinbaren: https://ulrikegiller.com/let-us-talk/ https://images.podigee.com/0x,sLAQh7EXWCpjwyA7RO8XMTpAH4_nRAFVxFKB6O6VSgRg=/https://cdn.podigee.com/uploads/u2467/d044bf00-e9b7-4ade-b446-917d77cd085b.png 171 Wie erstelle ich einen Gravatar https://ulrikegiller.podigee.io/173-obl171-wie-erstelle-ich-einen-gravatar 173 full Du kennst sicherlich die Situation, dass du in einem Forum oder auf einem Blog kommentierst und von dir sieht man anschließend nur ein Einheitsbild anstatt ein Foto von dir. Bei anderen erscheint jedoch wie von Zauberhand das eigene Profilbild.... no online business podcast,online business aufbauen,positionierung,experten und marketing,erfolg mit leidenschaft,erfolg,erfolgreich,online erfolgreich,online marketing,online marketing einfach,marketing,geld verdienen im internet,coaching,coaching online,training online,coach,coaching business,mindeset,motivation,verkaufen Mit Leidenschaft Online erfolgreich als Solunternehmer und Online-Trainer |Online-Sichtbarkeit |Online Marketing|Online verkaufen|Online-Kurse |Webinare |Interviews |Experte
Blogs sind ein sehr informatives Medium. wenn man jedoch “nur” auf Texte blickt, dann kann es manchmal auch etwas trocken und anonym wirken. Deswegen habe ich etwas unternommen. Um meine Blogartikel noch persönlicher zu gestalten, habe ich mich bei Gravatar angemeldet. Gravatar gehört zu WordPress. Man kann sich bei Gravatar registrieren und dort sein persönliches Foto hochladen. Ist … Continue reading "Bloggen mit Persönlichkeit – mit Hilfe von Gravatar"
Welcome to episode #41! Our guest today is a graduate of RISD and has flourished into many amazing things. A few titles under her humble belt include her being the former Creative Director of The White House, currently Design Exponent at Automattic – side note here: Automattic are the people behind WordPress.com, WooCommerce, Jetpack, Simplenote, Longreads, VaultPress, Gravatar, and many more online, open source publishing tools. Our guest is also an Editorial Board Member for Design Observer, National Board Member for AIGA and an International Speaker. Some of the topics we spoke about include: The responsibilities behind the role when CD at the White House Advice for cultivating an entire institutions brand values Tips for rapport building and networking with practical examples The importance of taking time off during transition periods and much, much more. I present to you, my good friend; the talented and delightfully calm … Ashleigh Axios! More on Ashleigh can be found via the link below: LinkedIn: linkedin.com/in/AshleighAxios Twitter: @AshleighAxios Instagram: @AshleighAxios Automattic website: automattic.com Personal website: ashleighaxios.com Subscribe to The Giant Thinkers Podcast on iTunes. Are you a designer or creative struggling to navigate your way? If you haven’t already, I invite you to sign up for the mailing list, where you get occasional emails from me on new episodes, articles and events. But if email isn’t your thing, add me on Instagram or snapchat, my handle is @TheGiantThinker -- it’s the fastest way to reach me and see my day-to-day activities.
Hoy preguntas sobre Gravatar, Facebook Ads, conversiones, títulos, memberships, ONGs, eMail marketing y técnicas de estudio.
This week, we have the very distinct pleasure of talking to a gentleman who is not only a talented member of the WordPress community … but the one responsible for it. Rainmaker.FM is Brought to You By Discover why 201,344 website owners trust StudioPress, the industry standard for premium WordPress themes and plugins. Launch your new site today! Matt Mullenweg is the founding developer of WordPress, which currently powers over 26% of sites on the web. The WordPress website says it s “a state-of-the-art semantic personal publishing platform.” More importantly, WordPress is a part of who Matt is. In this episode Brian Gardner, Lauren Mancke, and Matt Mullenweg discuss: Matt s start with WordPress Founding Automattic in 2005 The difference between WordPress.com and WordPress.org Analysis of the premium theme market Generating revenue in the WordPress Ecosystem The spirit of GPL in Open Source Adding paid themes to WordPress.com Making a profit with premium plugins The future of WordPress Listen to StudioPress FM below ... Download MP3Subscribe by RSSSubscribe in iTunes The Show Notes Follow Matt on Twitter Visit Matt’s Website Read Matt’s Blog WordPress.com WordPress.org Automattic The Transcript How (and Why It’s Ok) to Make Money with WordPress, with Matt Mullenweg Voiceover: Rainmaker FM. StudioPress FM is designed to help creative entrepreneurs build the foundation of a powerful digital business. Tune in weekly as StudioPress founder Brian Gardner and VP of StudioPress Lauren Mancke share their expertise on web design, strategy, and building an online platform. Lauren Mancke: On this week’s episode, Brian and I are joined by Matt Mullenweg, the founder of Automattic, to discuss how (and why it’s okay) to make money with WordPress. Brian Gardner: Hey, everyone. Welcome to StudioPress FM. I am your host, Brian Gardner, and I’m joined as usual by my co-host, the vice president of StudioPress, Lauren Mancke. Lauren Mancke: Hello, everyone. Thanks for joining us this week. We are continuing our series on talking to members of the WordPress community. Brian Gardner: Now, today we have the very distinct pleasure of talking not just to a member of the WordPress community, but one of the people responsible for it. Matt Mullenweg is the founding developer of WordPress, which, as it stands to date, powers over 26 percent of the web. Probably more even at that point. The WordPress website says it’s a “state of the art semantic personal publishing platform,” but more importantly to Matt, WordPress is a part of who he is. Matt, it’s a huge pleasure to have you on the show StudioPress FM, welcome. Matt Mullenweg: Awesome. I’m very excited to be here. Brian Gardner: There is a huge back story to all of this. For those of you who have been following StudioPress and me over the years, you know that I got started in WordPress in 2006, 2007. I can’t believe it’s been that long. We were just talking about that. I wanted to start at the beginning of your journey. I know in 2005 you founded Automattic and that is the secret force behind WordPress, Akismet, Gravatar, VaultPress, IntenseDebate, and a number of other smaller entities. This story for you goes further back though. Before Automattic formed, you and Mike Little forked this little blogging platform called b2. Run through us the early years of WordPress and what it was back then you were hoping to achieve. Matt’s Start with WordPress Matt Mullenweg: Oh, our goals were very modest. I would say that back then we were just looking to have some good software for ourselves. To have something that we could use and continue. B2 had a pretty good community around it. There were some forums we would participate in. It had a pretty cool active little thing going on, and it just seemed a shame that it was slowing down. Mike and I had already interacted on the forums a lot. We followed each other’s blogs. He was releasing code and I was releasing code. He’s also a super nice guy, so it just seemed very natural to work together. It’s funny though, that we didn’t actually get to meet in person until many years later. Brian Gardner: Yeah. I find that to be — Lauren and I are good examples of that. We met probably three or four years ago in person, but had known each other five or six years even before that. It’s funny how we can, in our Internet lives, finally get to that point where you get to do that ‘in real life’ thing with people who you’ve met, or known, or entrusted with a business, or even just become really good friends. To not really get to meet them in person for years down the road … Quick question though with Mike. You met on the forums. At what point did you think to yourselves, “We need to fork the software,” and then just take it and do your own thing with it? Matt Mullenweg: At the point when it was no longer being developed and it didn’t appear like there was a way forward. In some ways, for a period of time there, b2 was abandoned. When proprietary software gets abandoned you’re just out of luck. If open source gets abandoned, you can pick it up and run with it. So there was a fumble, we picked the ball, and we tried to take it to the end zone. And that is the extent of my sports metaphors I have the knowledge to make. Brian Gardner: Especially in San Francisco, right? We won’t talk about the 49ers right now. Matt Mullenweg: It’s funny you talked about meeting people though. We actually have a tool inside Automattic that tracks who you’ve met in person. So you have a percentage and everything. Right now, because we just had our grand meet up, I’m at 81%, which is pretty high. That means I’ve met 404 of the 501 total Automatticians. Brian Gardner: I just saw the picture of you guys. You guys were on Whistler, right? Matt Mullenweg: We were, Whistler, British Columbia. Brian Gardner: I just saw the picture and I was thinking to myself, “That is a lot of people.” Matt Mullenweg: Yeah, I agree. Brian Gardner: Did you think that back then when you and Mike forked this piece of software, that 10, 12 years later, however long it’s been, you would be in charge of a company with 400 or 500 people? Matt Mullenweg: Never in a million years. If I had had a big ambition at that time it was maybe to be a really good webmaster or have a little hosting company with 500 clients or something. It was very modest. I think the big business plan idea was I could get 500 people paying me $20 a month. That was it. I was like, “Then I can just retire.” Lauren Mancke: Some people get confused with WordPress initially because there’s WordPress.com and WordPress.org and they might not know the difference. For our listeners, can you give us a little explanation about which one is for who? The Difference Between WordPress.com and WordPress.org Matt Mullenweg: It’s all WordPress in that WordPress.com runs the WordPress software. I would say WordPress.com is a good place to go if you just want to dip your toes in. As you’re first getting started, it’s a great place to start. It’s got our great community features built in. It’s got built-in live chat support, so if you ever get stuck there’s someone there to help you. And it’s pretty difficult to break it, so there’s nothing you can do there that can’t be fixed pretty easily. It also showcases some of the latest interface work around what we call Calypso, which is essentially a next-generation interface for WordPress. So WordPress.com is a very good place to start. An advantage is that if you ever outgrow it — which many people never do — that it’s very easy to move to a web host where, if you wanted to run specific plug-ins or modify the code on your theme, you could do so. That’s what in the community we call WordPress.org. This idea that you went to website WordPress.org, downloaded the software and installed it yourself. The terminology is a little confusing, and I hope someday we come up with something that makes a little more sense. But you can think of it as, if you want to modify code you’ll want to run the software someplace other than WordPress.com. If you’re not planning to modify the code, WordPress.com’s probably the best place. Brian Gardner: Yeah. I’ve been on the outside looking in on WordPress.com stuff, primarily because when I first got started with blogging I was playing around with Blogger, which really was a competitor and still is — not so much anymore. Then I jumped right over WordPress.com and went right into the self-hosted version which is WordPress.org where you can download the software and install it. It’s been interesting to not really have that experience with WordPress.com but be able to watch you guys develop that over the years, knowing that it is the precursor to what’s coming into the .org side of things. This is maybe a bad diagnosis, but in my eyes I’ve always seen WordPress.com as the place where Automattic makes money and WordPress.org is where the community makes its money. I realize there are opportunities on both for us all to make money, but is that a fairly safe generalization to make, that WordPress.com is the focal point from a revenue standpoint for Automattic, whereas the community side is left to WordPress.org? Matt Mullenweg: Yeah. It’s not a perfect characterization, both because Automattic has a diversified business which makes money in several different places and several different ways — including WordPress.org — and that the community utilizing WordPress software and the freedoms of the GPL can make money from WordPress.com, and does quite a bit, but also can leverage it in many other ways, some of which don’t even look like WordPress on the surface. Lauren Mancke: Let’s jump back to 2007. As you know, Brian launched a commercial theme called Revolution. What were your initial thoughts on this, the fact that someone chose to commoditize something you created? At this time WordPress was seen as less of a CMS and more for blogging. A lot of the themes were free. Was this something you expected to see? The Spirit of GPL in Open Source Matt Mullenweg: The first freedom of the GPL is the freedom to use the software for any purpose. You can modify it, you can see how it works, and you can distribute those modifications. There’s absolutely nothing, and has never been anything wrong with selling things on top of WordPress. Yeah, I think it was a very natural conclusion, especially because themes value in scarcity. Versus plug-ins or core, which has value in abundance. Brian Gardner: For me though, I don’t know. It’s safe to say at the beginning with this whole Revolution thing it was unclear. To me it was unclear whether or not selling themes was legal, primarily because, if anything, that was an ignorance to what the GPL actually is and what it stands for. There was a lot of discussion going around back then. In my eyes all that confusion was rooted in that licensing issue. I know that it got to a point where I flew to San Francisco to talk to you and Tony about that. What it really means, what we’re allowed to do, and all of that. I take full blame for a lot of that initial confusion and some of the business models that may or may not have been in line with “the spirit of the GPL.” The question I have for you is this — it’s more a comment than anything, but I’m glad that we’re through that period, because that’s was kind of a roller coaster thing. I think that, more than anything, it’s just a community trying to figure out what it is and isn’t allowed to do. Would you agree that it’s nice to be out of that period and into a different period where things are on the table and everybody knows what’s good, what’s not good, that type of thing? Matt Mullenweg: Yeah, and I know there was some confusion around licensing at the time and what license was Revolution under versus the GPL. Was the GPL compatible? Did it violate WordPress’s license? Those sorts of things are pretty natural for this idea that WordPress had grown beyond just the early open source adopters, and folks coming in wanting to build businesses — including yourself — who might not have been as deeply rooted in the philosophy of open source naturally had a fear. I’m not saying this to you in particular, but we still see this today where people say, “Wait, if it’s free and open and users have these rights associated with it, how will I ever build a business? How will I ever make money?” That’s scary for folks, initially. Especially then because there were no examples. Now we have the better part of eight or nine years of not just some money being made, but tens or hundreds of millions of dollars being made on 100 percent GPL, completely free code. You can no longer say, “Can I build a business on open source?” That question’s been resolved for even the biggest skeptics. Brian Gardner: I would agree with that. Jerod Morris: Hey, Jerod Morris here. If you know anything about Rainmaker Digital and Copyblogger, you may know that we produce incredible live events. Well, some would say that we produce incredible live events as an excuse to throw great parties, but that’s another story. We’ve got another one coming up this October in Denver. It’s called Digital Commerce Summit, and it is entirely focused on giving you the smartest ways to create and sell digital products and services. To get all the details and the very best deal on tickets, head over to Rainmaker.FM/Summit. That’s Rainmaker.FM/Summit. Lauren Mancke: I think one of the biggest stamp of approvals the community has gotten over the years was when you guys decided to list commercial themes on the WordPress.org website. Can you tell us a little bit about that decision to incorporate those and the impact it’s made on both WordPress and those developing themes for it? Matt Mullenweg: Sure. Something I’ve always been a big proponent of through the years is sometimes, especially on the community side … You could look at the theme of your team or different areas around this today — we can be a little disciplinarian where we want to say, “This is wrong,” or punish people who do things wrong. I think it is even more powerful — this old southern idea that you catch more flies with honey than vinegar — to highlight good behavior versus trying to punish the bad behavior. The commercial themes list was just a way for us to highlight the good behavior, the people who were doing the right thing in the right way. It’s a carrot more than a stick that we could put out there for good people. Yet another reason to do the right thing besides it just being the right thing. Brian Gardner: I think I bit pretty hard on that carrot. One example of rewarding that good behavior — and to this day I wonder where my life would be if I actually never saw this comment from you. On a blog post from Ian Stewart on ThemeShaper way back in the day, this was after we had released some themes that were against the spirit of GPL and proprietary and all that, I saw a comment that said something to the effect of, “I will gladly promote any theme shop that goes completely GPL.” It was at that point when I saw that comment I almost immediately emailed you and that’s what instigated the trip to San Francisco, the idea that you would reward and put in front of the hundreds and thousands back then — not to know that in the future it would have turned into millions of people — using WordPress. That was an opportunity to — I wouldn’t say come to the light side, because I wasn’t necessarily on the dark side — I just realized that that was an opportunity to come alongside the bigger fish rather than swim against it. An example from you was exactly that, your willingness to promote and help people who were doing things that were in line with the licensing of WordPress. That is a decision I absolutely will never regret. Matt Mullenweg: Yeah, and that’s very much in line with … There’s WordPress the software that you download and run. There’s WordPress.org which is a website, a community hub for everyone working on WordPress and interested in WordPress. It’s an editorial product. The things that we choose to highlight and promote there are showing a point of view. Something I’ve always been big on since the site first started was being thoughtful and deliberate about what we choose to link to from there, highlight from there, promote from there. Because it is an endorsement, and you’re defined by what you endorse in many ways. Adding Paid Themes to WordPress.com Brian Gardner: As well as those who you do endorse are defined by who’s endorsing you. Aside from listing themes on WordPress.org that we had just talked about, you also opened up that same capability to a smaller degree on WordPress.com. You invited some premium theme developers back then and gave them a way to make money with a very big distribution pool, the user base of WordPress.com. That was a sign that I realized, as I alluded to earlier, that WordPress.com is what I would always in my head call “Matt’s baby.” I always felt that that was something that you govern and protected more than the .org site. Not that at any point did you — I don’t think it was favoritism. But I always knew that was the focal point, at least, for Automattic. So opening that door to allowing people to sell themes on WordPress.com was a huge declaration of that willingness to expose and open up the possibilities of making money with WordPress more on the .com side here. It’s also something I know you guys at Automattic have joined as well, because I know you have some themes there and are participating in that. I’m curious, how is that going? It’s been probably what, four, five years maybe, since WordPress.com has opened up the ability for folks to purchase premium themes and all that. Is that going well and continuing to go well for both the users and the developers? Matt Mullenweg: There’s a couple of things there. It’d be good to dive into history and then also talk about the present. On the history, my memory’s kind of fuzzy here, but part of what caused some of the premium theme stuff was we had actually announced that program and then didn’t follow through on it. And hadn’t you developed a theme and you’re like, “Okay, I’m just going to release this because it’s not going to be for sale on WordPress.com.” Or was that later? Brian Gardner: It may have been later. I do know we were one of the three initial groups, but that does sound vaguely familiar, that there was a little bit of that happening back then. Matt Mullenweg: Yeah, I think it was probably early 2007, or maybe even 2006. It seemed like a cool idea to have a marketplace. We reached out to folks, I don’t remember exactly what happened, but there was something where we didn’t launch it. But I had announced it in WordCamp Argentina, which was the first international WordCamp, and talked about it on stage. And then, I think because of the GPL issue, we put it off. We couldn’t decide how to make the code available while also preventing people from it being available. Then people just started to release them themselves — including the Revolution team — which we thought was really good. Yeah, of course. I think it was you, might have been Chris Pearson — Brian Gardner: You want to open that box? Matt Mullenweg: — that were the first ones that we reached out to because y’all had some of the best and coolest free themes. Today it’s been interesting. In the beginning, everyone was worried about GPL affecting their business. The reality is that business is just hard, full-stop. Even if you’re not open source, it’s really tough. Even if you’re not open source, people can copy your features. We have Wix and Squarespace. They don’t use any of WordPress’s code, but they’ve copied a lot of our features and are good competitors. Analysis of the Premium Theme Market Matt Mullenweg: The thing that’s happened with the success of premium themes more broadly is that a lot of people have gone into the market, so even though the pie has grown, it gets sliced thinner and thinner and thinner for each individual theme shop. I think overall, themes have grown. Sites like ThemeForest have really driven a commodification so that individual theme shops that maybe used to make six figures a month, they’re now making five figures a month or less. That has been a trend. But it’s also a natural thing that you can expect with a successful market. People, including yourself, Brian, who talked about how successful it was — that draws people in. On WordPress.com we’ve seen a little less of that, partially because we don’t allow everyone in, so there’s less commodification of the general size of it. Also, a lot of our theme authors — we’ve been trying to switch everyone towards subscriptions and away from one-time purchases. As you might be familiar, with our WordPress.com business plan you can have access to any premium theme, all of them, and you can switch them 10 times. You don’t have to buy them individually. What we do is we take a portion of that business subscription and we pay it back to the theme author. That recurs every year, versus being a one-time sale. You get that over and over and over as long as that person is a WordPress.com customer, which creates a much more stable and sustainable business. I think it’d be cool as well to have this in our premium plan, which has a lot more subscribers than our business plan, which is $300 a year. We can facilitate people to profit from a subscription model. I think that that helps create more stable businesses that are less boom and bust, particularly in the theme space. As you know, people can only run one theme at a time. Brian Gardner: Yeah. I wish I would’ve had that advice years ago when StudioPress started and I made the decision to do that as a transactional thing. There was never a point where I personally, up until the merger at Copyblogger, did I ever want to make the switch over to a recurring plan — even though there were other folks who were starting to move in that direction. For whatever reason I just thought to myself, “I don’t know if I can make that move.” And, of course, StudioPress merged into Copyblogger. We are still transactional at StudioPress, but we have the benefit of having other products and software and services around WordPress that are on a recurring basis so that we’ve never really had to make that change. That’s interesting. Matt Mullenweg: It’s the best. If you can do it, it works really well. Something that was really obvious to me early on is that you buy a theme and you get support forever. I was like, “Support costs money, so if I’m giving you money once and then I’m costing you money indefinitely, forever into the future, at some point that might actually cross over.” Brian Gardner: Yeah, WooThemes was an example. I think they were transactional at one point and then they transparently talked about why they made that decision, because of the fact that they just couldn’t scale the support and that “unlimited support” for them in the way that they were handling their business just wasn’t doable anymore. So they made a switch at one point then to go recurring. Matt Mullenweg: They did, and that I think was pretty controversial for them. Brian Gardner: Yeah, they got a lot of backlash. Matt Mullenweg: It was before the acquisition that we did, so I wasn’t 100 percent privy to it. But definitely saw some of that from afar and didn’t envy their position. They were essentially saying, “Hey, this thing that used to be included is now no longer included,” which is tough to do. Lauren Mancke: I think the recurring payments is something I brought up when I first came on board at StudioPress because I saw some other companies doing it. But it is definitely tricky with the backlash. We’ve talked about themes, and that’s an obvious way for members of the WordPress community to make money, but there’s so many other ways for an individual or company to generate a profit using WordPress. Can you share with us a little bit of the other ways you’ve seen the community generate revenue? Generating Revenue in the WordPress Ecosystem Matt Mullenweg: Oh, I was actually coming on this podcast to say you’re not allowed to make money with WordPress under any circumstances. Sorry. Was there a miscommunication beforehand? Brian Gardner: I guess we’ll scrap the episode. Matt Mullenweg: Cool. Yeah, I mean y’all have seen it. Where to start? Anything that creates value for someone who is getting from point A to point B. No one wakes up in the morning — well some of us do, but most people don’t wake up in the morning and say, “I want to use WordPress today.” They’re probably saying, “I want more customers in my restaurant,” or “I want to sell more of my widget,” or “I want an audience for my blog that someday I want to turn into a book or leverage into speaking opportunities or something.” They have some goals. WordPress is a means to an end. As WordPress reaches a larger and larger number of people — because it does a really good job doing most of what people want — even the very niche users like, “I want to use WordPress to sell houses,” become valuable niches. If you can help people do that and you generate a lot of value for them, they will be willing to pay you back some of that. Open their wallet in some regard, whether that’s buying something directly from you, whether that’s coming to your events, whether that’s reading your site and clicking on the ads — whatever it is. There are a lot of opportunities there. As many different ways as there are to be in business in general, there’s ways to make money with WordPress, because making money with WordPress is no different from making money in the world. It’s just that you’re getting the benefit of this huge open source platform and community as a distribution mechanism. And you’re part of a community that is a bit more conscious and awake about, “How do we keep this sustainable going forward? How do we give back and make sure that 10 years from now WordPress is just as vibrant?” But other than that it’s pretty much the same as any other business you do. Brian Gardner: Yeah, I would say over the 10 years I’ve been doing stuff with WordPress, I’ve covered a lot of the different ways to make money. Even before selling themes I was selling my services on customizing themes. So there would be money for hire on a freelance level. Then, of course, I started selling themes, so there was the commodity or transactional version of making money through WordPress. And then we took StudioPress and merged it into Copyblogger where we, like you say, sell some of the training or the assistance. Helping people who are either on it or trying to use it themselves. We obviously have a small hosting division. And then we have Rainmaker, so there’s a software as a service. I feel like I’ve had a really broad experience, and I’m sure there are even … Matt Mullenweg: You’ve done them all. Brian Gardner: Yeah, exactly. Well, I’m sure there are even other ways. Plug-ins became a big thing after the premium theme market. Folks like Gravity Forms and WooCommerce are two huge examples — Pippin with Easy Digital Downloads. So plug-ins — there’s a huge market for that. Where do you see holes though in the WordPress community in terms of that opportunity to make money? Is there anything or are there any areas that you think yourself, “Man, I wish somebody would go out and go do X?” Matt Mullenweg: You know, having a company in the space, when I think that, we usually do it. Brian Gardner: Yeah, I walked right into that one. But there’s got to be smaller stuff. Things that aren’t important enough for you guys to cover. You would think, “Hey, it’d be great if a little company just came alongside and did this.” Matt Mullenweg: I would say to follow my blog and follow my Twitter. Because I put out — it is true that I probably have 10 or 100 times more ideas than we’ll ever be able to get to. My philosophy is to always just put them out there, and if they happen that’s great. Brian Gardner: Yeah, I’ve been asked, probably on a number of different occasions on different podcasts, “Why doesn’t Genesis do X,” or “Why aren’t you guys going after this particular market?” Like you, I say, “You know what? We’ve only got so many developers and designers and people in-house. We’re just not going to spend our time going there.” But I always throw it up as a layup. I say, “Hey, this is a great opportunity for someone to come alongside, wink wink, and take over and take that opportunity.” I think I’ve seen it a few times where someone’s taken that bait and then gone and done it. We, like you, try to reward people and our community who do good work and try to expose them and help promote their stuff too. That’s a good idea though, to leave a breadcrumb trail of ideas and things that might be of interest or have value or potential for monetization that we can’t get to. At least you’re leaving that open for others to see. Matt Mullenweg: Totally, and also it’s just good to share. Making a Profit with Premium Plug-ins Lauren Mancke: Let’s jump back. You mentioned some premium plug-ins. Let’s jump back to those. Matt, can you give us an example of plug-ins that are being sold right now that you think are a great and solid solution for WordPress users? Matt Mullenweg: The obvious ones I don’t want to unfairly advantage, because there’s a lot of really good ones. I don’t want to mention one and not another, so I’m just going to mention ours. Brian Gardner: Safely. Matt Mullenweg: The things that Automattic sells — we have some service plug-ins available generally through Jetpack, but you can get VaultPress or Akismet, which are backup and security services and anti-spam services. These are essentially lightweight plug-ins. What they do is they connect you to an external service that, in the case of a Akismet, uses the intelligence of seeing hundreds of millions of things a day to help keep spam off your sites. VaultPress takes a copy of your blog and stores it literally in 12 places. So even if a meteor hits 11 of them, we would still have a copy of your blog that would be safe and available to restore. Those are the lightweight things. We also have plug-ins largely that came in through the WooThemes acquisition, including WooCommerce — there’s over 300 extensions for WooCommerce — and smaller things like WordPress Job Manager or Sensei that are essentially like little miniature applications that you can put on top of WordPress that transform it. In the case of Sensei, it turns it into a learning management system, something if you wanted to run classes online and help people it’s all there. Brian Gardner: Let’s talk about the acquisition of Woo for a little bit. I think in the big picture of the WordPress community that was the big, “Oh my gosh. Did you hear?” type of thing. I know when I read it there was … Adii and I, back in the day, started things out side-by-side and were really big competitors back when WooThemes got started and all of that. You run this race with people and when you see something like this, “Automattic acquires WooThemes and WooCommerce,” and you start hearing figures of seven and eight figures, my instinct was to instantly get jealous and think, “Oh, that sucks. Why can’t that happen to me?” But then you realize that … Matt Mullenweg: Well, you got to reach out. Brian Gardner: Is that how it works? Lauren Mancke: Yeah. We’ll talk after the podcast. Brian Gardner: We’ll have a follow-up phone call. No, in all honesty though, it made sense for WordPress as a platform to try to go after the e-commerce thing. So yes, you have to realize that there was a lot of wisdom in that acquisition. Is that the type of thing that you guys look for specifically? I know there’s a lot of people making money all over the place, but I’m sure there’s lots of things like that on your radar where you say, “We want to go after a certain type of market or a certain type of user. These folks or that business already has built a solid piece of that and it’s a good idea for us to then go pursue.” Is that what happened, just the movement towards e-commerce through WordPress and the acquisition of Woo and WooCommerce? Matt Mullenweg: Yeah. It was really driven, first and foremost, by e-commerce as a category. From Automattic’s point of view, we were hearing for a really long time the demand from our users on WordPress.com that they wanted e-commerce. The demand from our partners, places like Web hosts, that sometimes as many as half their customers signing up were saying they wanted to sell things online and the solutions there were not good. We really did look holistically at all the WordPress add-ons, including Woo, Easy Digital Downloads, WP commerce — there’s probably even more. All the services: Shopify, Ecwid, BigCommerce, PresstaShop — everything out there. And the big guys: eBay, Amazon, Etsy, the more centralized approaches. And began to really map it out and explore different options, including talking to folks like Shopify a lot. I think Shopify has a really great user experience and has built a pretty interesting business there. What they built at Woo was super impressive — the team that was putting it together and the breadth of its adoption and the ecosystem around it. I had been trying to signal for several years that Automattic was going to move into e-commerce. We’re a big elephant in the room, so I don’t like for there to be surprises for people. In fact, prior to the acquisition I reached out to the other folks and said, “Hey, just so you know, this is going to happen and be announced next week or next month,” or whenever it was. Just because I feel like that’s the polite thing to do. But probably what drove the decision there was that e-commerce for WordPress needs to be a platform, meaning that the core software that drives the commerce engine needs to be available as widely as possible, really robust. It needs to be something that scales from a small store selling just a handful of T-shirts to really huge stores with 60, 70,000 skews doing tens of millions or hundreds of millions of dollars in revenue. We wanted that to be something that lots of other businesses could be built on, and Woo was the best fit that we identified at the time. That was just about a year ago, and a lot has happened over the past year. We joined these two different companies into one. Woo had a lot of similarities to Automattic, so that made it a bit easier both in how they were distributed and how they ran the company, everything. But we then started to look at, How can we grow this?” We’ve increased the size of the Woo team by over 40 percent and that’s still growing. The developers on the core software and the core areas have gone up by 5x, so a lot more people working on the software. We’re looking at it from a very long-term view. Automattic has a very strong business already. What can we subsidize or invest in or support to make Woo a platform that, just like WordPress, is one that’s a commerce engine for the next decade? Brian Gardner: Well, just like you, we’ve been asked by our users all the time also, “When are you going to have e-commerce themes?” and things like that. Back before the acquisition it was always like, “We can’t design for WooCommerce because they’re technically a competitor.” I got all weirded out about all of that. But when the acquisition took place I started thinking to myself, “Okay, there’s a bigger vision here for all of us here, and it goes beyond just trying to compete or not compete against other people.” I wouldn’t call this an announcement, because I have alluded to it a little bit here on social media in the same way you sometimes do, but we’re very excited that we are focusing our themes — I’m literally designing one as we speak that will be WooCommerce compatible. Matt Mullenweg: Oh, cool. That is news to me, so thank you. Brian Gardner: The writing, for sure, is on the wall, and we’re now at a point where we can focus and dedicate some of our time. This may take a little bit of time, but my hope is to take all of our existing themes on StudioPress and work in the WooCommerce component. At the very least to make WooCommerce out of the box look good. Our emphasis, then, will be on continuing to design and develop themes for the Genesis framework and all of that, but as a side note to that, all of them will be styled at a basic level for anyone who wants to use a theme and start selling stuff. So WooCommerce and e-commerce for us is definitely on the radar and the roadmap. That’s very fun for me to — I wouldn’t call it announce, because it’s not a big announcement yet. But it’s been on my mind for six months to a year for sure, as Lauren knows. We’ve had conversations. Matt Mullenweg: Cool. Lauren Mancke: Yes. It’s been on my mind for a couple years now. Brian Gardner: I’m like, “I’m going to do it. This makes sense to me.” That will be coming — the first theme — probably in the next couple weeks, so I’m excited about that. Matt Mullenweg: I think that’s something I’ve always tried to do with Automattic as well, is that we can compete and cooperate at the same time, especially if you think long-term. If we said there were 10 WordPress sites in the world and you and I were going to duke it out for getting them to use your theme or one of the themes that Automattic sells, sure, that’s zero sum. The reality is there are 10 sites today and I’m working on taking that to being 100 sites so we can both get a ton and work together. Automattic works with all the web hosts. We also compete with them with WordPress.com. I just try to think of it from the point of view of what is the best long-term thing for WordPress as a whole. Never let what our particular business might be there …. For example, I love working with other e-commerce platforms besides WooCommerce. There are reasons for people to use something instead of Woo. We could pretend they don’t exist, like Google or Facebook do, or we could just say “Hey, how can we help everyone here with what we’re learning and maybe services we can provide — whether that’s hosting or something else — to make this pretty awesome for whatever people want to choose?” Brian Gardner: That’s a good way to look at it. Lauren Mancke: Matt, you said earlier that you don’t like to have surprises from Automattic. Is there anything you want to hint at for the future? Matt Mullenweg: That’s a good question. Nothing I’m ready to say today. I appreciate the swing at the bat there. Lauren Mancke: It was a try. Brian Gardner: Nice try, Lauren. Lauren Mancke: Yeah. Brian Gardner: Back in the day, I know you weren’t a fan of how the whole licensing and theme things went down and we’ve moved well beyond that. Are there any areas right now within WordPress — within the community, that is — where you see things that you wish would be going a little bit differently? Not that you can control it or anything like that. But is there anything out there that we should just be aware of that maybe there’s room for improvement, or a better way to do a business model, or something like that? Matt Mullenweg: I think the area that — there’s a ton of stuff in core and some really great things that Helen’s working on for Four Seven. Thinking beyond that even, I’d say broader, the thing that I feel like we have the most room for improvement is probably in our directories, both the plug-in and theme directory. When you think of the directories as essentially an interface for users, I think they could be pretty frustrating in terms of how search works. How you discover things. How you get support for it after you’ve used it. And how you know whether things are compatible or not, including having a different approach. With plug-ins, we accept everything and then worry about quality through reviews and reports. With themes, we try to look at everything beforehand. For, honestly a few years, we’ve been pretty behind. You might submit a theme to WordPress and it could take — the WordPress Theme Directory, and it could take months before it goes up. And then we’re still not requiring things like it to be responsive, which is kind of wild in a day when cell phones are a big deal. Maybe even smart phones in the future. There’s good reasons for this, but I think sometimes you can get pretty far down a path by just putting one foot in front of another and not think, “Am I heading in the right direction?” One of the things I’m looking forward to — there’s some good conversations going on in the weekly meetings on Slack. I’ve been talking to a lot of folks and seeing how can we iterate there — both in the design and presentation of the directories, which we’ve done some work for, especially on the plug-in directory. But also in our processes and how we approach them. Lauren Mancke: Matt, is there anything you regret with WordPress? Have there been any decisions made, whether by you or others, that you wish hadn’t happened? Matt Mullenweg: I don’t live with a lot of regrets, so I don’t know if I’d resonate with that particular word. But there are certainly things that in hindsight, if I were doing them today, I would do differently. The theme licensing stuff, especially in 2007 through 2010, has come up a few times. I think part of why that was such trouble was I was less mature as a leader and I thought the best way to hash these issues out was to talk about it and correct everyone in blog comments and do blog posts. Lauren Mancke: And go on Mixergy. Matt Mullenweg: Go on Mixergy. Just prove everyone wrong. We got from point A to point B, but maybe I should’ve done more of what you did, Brian, which is get on a plane and talk to people. Perhaps we could’ve avoided a lot of the back-and-forth and drama that we had. Because we were on the same side of things. You wanted to build a business with WordPress and sell themes, and I wanted more people using WordPress. Those are highly complementary goals. I think now, as a leader — and this has also been something I’ve learned through many of the great people I have the good fortune to work with every day at Automattic — you can approach that differently and really look at talking things through. If one medium of communication — be it email, or Slack, or text, or twitter, or blog post comments hurled across the interwebs — isn’t working, switch to another one. Brian Gardner: I have a question that I’ve been wanting to ask you for a long time now. I hope that you don’t take this in a narcissistic way, because I’m not at all looking for the answer that some people might think. Do you think that the whole premium theme movement has had some degree of impact on the growth and the use of WordPress as we talk about it now, 25% of the Internet and all that kind of stuff? Do you think that without that — I guess that in a natural evolution would’ve always happened at some point, but do you think … ? I was thinking to myself like, “Wow, I was part of the big area of growth within WordPress.” Because I think premium themes proved that. Of course, there’s lots of people involved. This is not at all me trying to take credit for anything. But I always think in the back of my mind that at least I was a part of a movement that helped open WordPress up to a significant amount of users who may not have ever thought of it as anything more than just a little blog platform. Matt Mullenweg: That’s a interesting question. It’s actually one I’ve thought about a lot. Because, if the answer is yes, then what we should be doing is trying to have everything be premium, right? If the answer is no, then we should try to eliminate premium themes. Or maybe it’s someplace in the middle. Based on the data, it’s someplace in the middle. Here’s what I mean by that. In absolute terms, it’s undeniable. You can look at your numbers and say, “I have sold X tens of thousands,” or, for some folks, into the hundreds of thousands of copies of this theme. I’m sure everyone has heard from customers — especially because many premium theme sellers are really good at marketing. I would say better than WordPress.org and better than Automattic in some cases. They say, “I wasn’t going to use WordPress, but I found this theme and I decided to use it.” Have you heard that before? Yeah, so that’s undeniable on an absolute sense. The relative sense, meaning, “Does it change the growth curve of WordPress?” The numbers — because we’re able to track through the update system how many of every theme is run. If you added up all the premium themes, or let’s say all themes not in the directory, which is a good proxy for premium themes — although, as you know, there are some that have up-sells or pro versions of things — it comes to be cumulatively 10 percent, 12 percent. It’s had an impact, but still the vast majority of the overall growth is driven by some of the default themes and the many free ones out there. I think that if you think about this, it makes sense a little bit. Although some people start with WordPress from our premium theme, it might be more likely that when they’re comparing things they’re probably comparing WordPress … They’re either getting it from their web host, and I would say that web hosts have been a big driver of WordPress adoption and growth because it’s one click and they get started there — or they’re comparing it to other solutions like Squarespace, Weebly, etc. They start with WordPress. They’re probably going to start with a free theme because they’re not sure whether it’s going to work for them or not. Then, once they figure it out and they say “Hey, okay this is something I can use to solve my problems,” then they go to premium themes. That’s for everyday users. The other thing that drives this market a lot is developers. It’s folks who know WordPress and they’re being hired to build WordPress sites for people. They have a theme that they love because it enables them to make great-looking client sites really quickly. It’s got the functionality and they know it as a platform on top of WordPress. It’s their go-to. So they’ll buy a copy for every single one of their customers as they build it out. Do they have to? No. But do they want to support you so you’ll make more themes? Of course. Brian Gardner: Yeah, I think the definition of premium, back in the day — I think we at one point even had conversations of calling them paid themes versus premium, because premium’s kind of a subjective term. I’ve seen themes that are free that are probably better coded and better designed than some of the ones I’ve seen being sold. Matt Mullenweg: I think that’s what we call them on WordPress.org too. I think we call them paid themes. Brian Gardner: Paid themes, yeah. Okay, let’s talk about the future of WordPress. Matt Mullenweg: Wait, does that answer makes sense to you? Brian Gardner: It totally does. I realized that when I take myself out of the equation that WordPress is huge. There’s just — like you alluded to, even the hosting. That seems like within the last few years, especially with movements like Go Daddy doing one-click installs, and Bluehost and so on, that the hosting companies could say the very same thing. Saying, “Well, from 2010 on we really had a big role in the growth of WordPress,” and all of that. I’ve just always thought about that one back in the day. It was like, “What would’ve happened if … ?” type of thing. If it wasn’t me, it would’ve been someone else, so it certainly wasn’t my intuition. Matt Mullenweg: It’s also something to keep an eye on. Maybe that percentage of what’s driving changes over time. And also looking at new users, not just total users. I’ll keep an eye on it. I love data. The Future of WordPress Brian Gardner: All right. Let’s talk just about the future of WordPress. We alluded to it a little bit earlier with e-commerce and stuff like that. Not necessarily how folks can make money from it, but where do you see WordPress going and what are the things that maybe stand as the biggest hurdles in terms of growth for Automattic and WordPress and all of that? Matt Mullenweg: I think that what’s cool about WordPress as a platform is that it can do a lot at once, meaning that I believe that WordPress is going to grow hugely as a blogging platform. Some people might think that blogging is dead, but I see the next six billion people coming online and blogging being an interesting thing for a lot of them. It’s growing as an e-commerce platform. It’s growing as a site creator. It’s growing as a platform that people build things — maybe even just using the API, whether that’s a REST API or a PHP APIs, to make applications. Whether they’re using WordPress as a development platform to do things that don’t look like a blog at all. The challenges and threats is that, in every single one of those areas that we’re in, there are some purpose-built tools. And, in fact, an entire company is dedicated to that small area, which are in some cases doing a really good job. If I’m starting a store today, I’m going to compare how easy it is to get started with Woo to how easy it is to get started with Shopify. And today that comparison looks pretty good for Shopify because they’re quite good at providing the hosted service that really on-boards you in a slick way. The same thing in the CMS space and small business space. We’re getting some very good competition from Weebly, Squarespace, and Wix. Wix in particular, has really used marketing to leverage some breakout growth there. We have to keep in mind that they are spending $40 million dollars a quarter, so $160 million dollars this year, which is a big number, in advertising to drive people signing up for Wix. In certain markets now — you can go and the barista at the coffee shop might ask you about Wix. They might see your WordPress shirt and ask you about Wix. If they’re able to create a flywheel effect of that advertising driving brand awareness, driving people asking for Wix, that’s going to start to drive developers away as well, which could be very bad for WordPress. These are the things that we have to keep in mind and also do some coordination across the community. One thing that I’m sure about WordPress is that if we all run our own directions and just try to localize or maximize our own profit and everything, we’ll be outgunned by these other companies. The truth is that Wix’s $300 million dollars in revenue is bigger than any company I am aware of in the WordPress space individually, but it’s much smaller than we are collectively. The question becomes, “How can we work together? How can we team up? And how do we get the right philosophies and the right ways of doing business and everything out there? The best practices so that as we do our own things in our own places, we’re heading in the same direction in a way that, honestly, no company could ever compete with?” Just like the Encyclopedia Britannica could never compete with Wikipedia. Brian Gardner: Yeah, it’s that crowd-sourced approach, whether it be intentional or unintentional. I guess what you’re saying is that you guys at Automattic necessarily can’t, by yourselves, go out and compete against Squarespace or X. But through the enlistment of other, bigger, smaller companies that would themselves go after and cater to the types of people who would be using Squarespace — that is the bigger army. The WordPress as a whole army versus Automattic as the one company behind it. The more companies that are out there trying to build their own things off of WordPress, but to a user that might be interested in using Weebly or Wix or Squarespace, that that’s also a bigger win for you guys or just all of us as a whole. To think we are the ones that are out in the field trying to do the things, so the more we can do for ourselves, ultimately, goes up to the top. Matt Mullenweg: Yeah. It’s all about being long-term. If you think truly long-term about this, that’s how we can win. That’s how we’ve won in the past against competitors like Six Apart that had more people and were better funded, and it’s how we’re going to win against all the ones down the road. We kind of have to. You have a lot of business owners listening to this. Think about what makes this business relevant? What makes the WordPress ecosystem relevant in 10 years. Are you orienting your business to make that a reality? Are you going towards it or away from it? Brian Gardner: Well, I think those are great words for us to close by. I really do want to be sensitive to your time, because I know that you have a lot of things to do, a lot of responsibilities. First of all, before we go though, I do want to personally thank you for WordPress. Without a question, I’m not sitting in the house that I’m in if WordPress wasn’t around. I know that on behalf of all of our users and developers and designers — people who build off of Genesis, which was really built off of WordPress — you have created an ecosystem and an environment which, as you alluded to at the beginning of this call, you probably didn’t even forecast or even think of. It was just a matter of trying to build something for yourself that you could use to do something X. Little did you know, 10 years from now you will have companies making 8 figures a year in revenue and enabling — our company has 60 people. We have 60 people whose families are fed by way of, ultimately, what WordPress has enabled us to do. The stuff like that. I want to thank you. I should text you every once in a while or just shoot you an email and remind you, and say “thank you” and all that. I was a byproduct of your vision. You have put me on WordPress.org before to showcase some good work and stuff like that, so I just didn’t want that going unsaid. As much as I appreciate you being on the show, I also more importantly appreciate for what you’ve allowed me in my life and my family to experience because of the stuff that you did back in the day. Matt Mullenweg: Thank you. I wish I could take credit, but the reality is you’re part of that too. We all are. So let’s all give ourselves a round of applause there, because what we’ve created is pretty impressive and I hope that you can have 10 more houses in the future. Brian Gardner: My wife would like that too. No. Lauren Mancke: Matt, thank you for coming on the show. Everyone, if you like what you heard on today’s show you can find more episodes of StudioPress FM at StudioPress.FM. You can also help Brian and I hit the main stage by subscribing to the show in iTunes. It’s a great way to never ever miss an episode. Thanks for listening, and we’ll see you next week.
Молодой тестировщик Александр Лысенко (Харьков) - засыпал в прямом эфире экспертов вопросами. В программе, которую вел программист, создатель UI-testing framework Selenide Андрей Солнцев (@asolntsev, Эстония) принимали участие гости-эксперты Алексей Петров (директор по качеству Mail.ru, Москва), Алексей Виноградов (@vinogradoff, Германия) и Станислав Катков (Таиланд) В выпуске: приветствие и представление экспертов Основное блюдо - вопросы "подрастающего" тестировщика В каком порядке применять техники тест-дизайна? Должны ли техники, проверяющие основное поведение бизнес-модели, следовать первыми? проблема декомпозиции требований: как правильно декомпозировать очень сложные переплетённые функциональности? как тестировать хранение данных и целостность этих данных? регрессионное тестирование: как из всех тестов отобрать тест для регрессионного набора? как часть нужно добавлять новые тесты в существующий регрессионный набор и какие выбирать тесты? отчёт о выполнении регрессионного тестирования: что необходимо отобразить? применение priority и severity (доклад с SQA Days 17) Рубрика "Новости" закон о забвении, подробности German Testing Day 2015, Франкфурт; ReTest.de - генерация автоматизированных UI-тестов (на немецком) Рубрика "Плачь, Ярославна!" Утилиты для управления двумя PC с одной Keyboard и Mouse, вторая утилита Jing падает при заливке файла на сервер после обновления до Windows 8. Лучше использовать Skitch. Evernote обновил интерфейс, стало больше движений. Рубрика "Последний писк" русскоязычные сессии Weekend Testing с Романом Шейко в скайпе. сервис Gravatar для аватарок книга "50 quick ideas to improve your tests" от Gojko Adzic. Пример: "Даже не пытайтесь заменить ручные тесты автотестами" обзор пользовательских интерфейсов российских интернет-банков от Алексея Скобелева из Markswebb простая багтрекинговая система LeanTesting
Mit Gast Tobias Günther diskutieren wir die Grundlagen von Git, warum Versionskontrolle für jedes Projekt lohnend ist, warum Tower der beste Mac Git-Client ist und hauen dabei ein Haufen Zeug per Gewinnspiel raus. Link zum Bild: Blick ins Cockpit Als Pilot braucht man eines ganz bestimmt: Einen Tower der einem sagt was Sache ist. Deshalb haben wir diese Woche den fournova Chef Tobias Günther zu Gast. Als fournova CEO führt er nämlich einen Tower. Dieser ist zwar nicht für Flugzeuge gedacht, sondern für Git, zeitgleich nutzt er im Cockpit eigentlich nix außer man sitzt am Steuer eines Macs. Im Großen und ganzen passt das also super und deshalb ist Tobias unser Gast und Git-Guru, der zu eben diesem Thema gerne Rede und Antwort steht. Eine Warnung vorab… Patrick’s Tonbandaufnahme ist beim Winken aus dem Fenster gefallen und wurde direkt von der Turbine angesaugt und zerschreddert. Das heißt: 3x mal super Qualität + einmal der Bordanlagenmitschnitt für euch. Denkt euch eine Bestrafung für ihn aus und postet diese. Des weiteren verbürgt sich das komplette Team dafür, dass sowas nie wieder passiert, sollte dem doch irgendwann so ein so regnet es Gratisflüge nach Mallorca im Odenwald als Entschädigung für euch. Das schönste gleich vorab: Heute werden gnadenlos die Goodies rausgehauen, gleich 3 Gewinne werden von Der Ubercast verlost! Lieber Fluggast, wenn dir das Gehörte gefällt oder dir Sorgenfalten auf die edle Stirn fabriziert, dann haben wir etwas für dich: iTunes Bewertungen. Überbleibsel – Overcast unter Feuer Das Follow-up fängt gut an, denn nach einer zweiwöchigen Overcast Testphase müssen wohl einige der Piloten ihre Meinung kund tun. Die Nörgelfraktion wird angeführt von Andreas, der sein Trilliarden an Podcastfeeds nicht gescheit per OPML-Datei importiert bekommen hat. Als altgedienter Podcaster hat er dann in den sauren Apfel gebissen und manuell mal einen Feed hinzugefügt. Kurz um, die Menüführung und auch das Abspielen hat ihm überhaupt nicht gefallen. De facto konnte sich Andreas auch nicht dazu durchringen, die Extrafeatures der App für bare Münze zu erwerben oder Overcast auch nur länger als ein paar Tage zu nutzen. Der Retter in der schillernden Rüstung naht, mit dem Mikrofon als Schwerte in seiner Faust gereckt, stürzt sich aber sogleich auf den bösen bayrischen Drachen und lässt folgendes verlauten. Sven F. aus S.: Ehrlich? Also ich hab’ mich da wohl, muss ich sagen, wirklich mit angefreundet. Hab’ auch den Button gedrückt - 4,99 für die In-App-Purchases. Ja, … und hör da eben jetzt ganz fleißig. Sven Fechner Gast Tobias ist vorbildlich, er verplempert seine Zeit nicht mit Podcasts. Wenn er das tut, dann hört er n-a-t-ü-r-l-i-c-h Der Übercast; und das ganz genussvoll mit der Pilotenmütze aus unserem Fanshop auf dem Kopf… ach ja, … und ein paar Sachen von 5by5. Dazu reicht ihm dann auch Apples Podcast App. Gewohnheitstier Patrick mosert immer noch wie letzte Woche darüber das er Pocket Casts Grid Ansicht stark vermisst. Im Gegensatz zu Andreas hat er aller Wahrscheinlichkeit nach weniger Podcasts im Abo, denn bei im ging der Import reibungslos. Hinzu kommt aber, dass er wie sein Co-Pilot die UI nicht sehr schlüssig findet und das navigieren in dieser ihm doch recht schwer fällt. Als wenig Intuitiv empfindet er zum Beispiel auch die Menüleiste ganz oben (Settings, Downloads, Playlists, Hinzügen). Was aber der Hit ist, sei die Smart Speed Funktion, welche die Sprechpausen kürzt und somit Zeit spart beim Anhören ohne wie eine Jauchefarm zu klingen. Deshalb, und alleine deshalb, nutzt Patrick seitdem Overcast als seinen Podcast-Player (Pssst, Patrick. Pocket Casts arbeitet auch schon an einer Alternative). Smart-Boost interessiert ihn nicht, wobei das Feature wohl nach Olli aus England (Freund von Andreas) ganz praktisch sein soll, da das Zeug was Olli sich durch die Ohren zieht wohl nicht ganz astrein mit Stahlmantel um’s Micro produziert ist. Halten wir fest: Tobias ist zufrieden mit der Apple App; Sven war noch Jungfrau, da er bisher nur ge-Appel-podcasthört hat ((Anmerkung der Redaktion: Bitte noch einmal den Link zum Fanshop klicken an dieser Stelle)); Andreas ist “not amused” und Patrick wird zum hören gezwungen dank eines Alleinstellungsmerkmals. So, falls ihr uns als Leitwolf was Podcastapp-Empfehlungen angeht angesehen habt, der euch jetzt die Absolution zum Geld rausfeuern gibt, weit gefehlt. Ich verweise an dieser Stelle mal auf einen Auszug aus unserer “Über Über” Seite: »Ehrlich gesagt weiß Der Übercast das alles auch nicht so genau, was Andreas, Patrick und Sven allerdings kein bisschen davon abhält diese Themen zu diskutieren.« Nichtsdestotrotz ist Overcast ein sehr solider und populärer Podcast-Client mit mehreren Features die es so nirgendwo anders im Moment gibt. Besonders das hören (und syncen der Position) über die Webapp gefällt Patrick noch sehr gut, da es in seinen Hörflow passt (und er sich das nun sparen kann), Smart Speed und Voice Boost sind ebenso nützlich und die Entdecker- & Empfehlungsfunktion (brought to you by Twitter) ist schlichtweg Klasse. Marco Arment ist zudem ein fleißiges Bienlein und hat wohl mittlerweile auch den OPML-Import für solche Horter wie Andreas gefixt. Als fairer und sympathischer Typ hat er auch die besten Podcast-Clients für iOS in seiner App aufgelistet, falls einem nach dem Gratisdownload die App so wirklich rein gar nicht zusagt. Wir ziehen auf jeden Fall den Hut. Überschallneuigkeiten Die Macbook Air Sticker Ad löst Gefühlsausbrüche bei Sven aus und er hört den Soundtrack nun wohl jeden Morgen auf dem Weg zur Arbeit. Deshalb will er auch gleich wissen, wer Sticker auf seinem MacBook hat. Gast Tobias ist nackt unterwegs… was uns die Sprache verschlägt und voll in ein Luftloch steuern lässt: Link zum Bild: Fotomontage zum Thema “Tobias sein MacBook ist nackt… also ohne Sticker”. Die einzigen Sticker die Patrick für sein Ex-MacBook gesammelt hat befanden sich in einem Evernote-Notebook. Die Idee an sich fand er nicht verkehrt, wollte aber alles komplett bedeckt haben und bis er genügend Material angesammelt hatte, war sein MacBook schon verkauft. Andreas glänzt mit dieser Kombination: Link zum Bild: Ganz rechts das bitte. … was im Klartext heißt: Ableton Live, Reason, Apfeltalk, Producer’s Conference (Reason), Weiss nicht (Traktor von NI?), Pustefix, GitHub, NSBrief, Reason Channel Strip. Alle Sticker aus der Werbung findet ihr in diesem Sammelpost von TUAW. Die meisten der gezeigten Sticker und Decals findet ihr auf Etsy kostengünstig. Viele davon sind auch in Deutschland erhältlich. Und wer noch wirklich gute, geile, gemeine Stickerempfehlungen hat schickt die Bitte an flugdeck@derubercast.com oder zwitschert die uns direkt ins Ohr. Wer es noch nicht mitbekommen hat, die Yosemite Public Beta ist gestartet. Wer uns auf Twitter folgt hat vielleicht mitbekommen, dass Andreas und Patrick ab und zu schuldbewusst über Probleme fluchen. Im großen und ganzen läuft der Karren aber schon recht gescheit. Sven empfiehlt nochmals allen Neugierigen vorher ein Backup zu machen oder Yosemite von einer Zweitpartition aus zu booten. Andreas führt auch geradewegs noch einmal eine große Leidklage an: Zum Zeitpunkt unserer Aufnahme ist Audio Hijack Pro noch nicht kompatibel mit OS 10.10. Hier ist jedoch ein erneuter Blick hinter die Kulissen nötig, um diese Sendung komplett zu (ent)würdigen. Patrick betrauert das natürlich genauso, kurz nach der letzten Sendung hat er upgedatet und ein paar Tage später nachgeschaut, ob sich bei Rogue Amoeba was getan hat in Punkto Kompatibilität. Geistesabwesend wie die zwei Bruchpiloten sind, hat aber keiner von Ihnen gecheckt, dass 3-4 Tage vor dem Aufnahmetermin ein entsprechendes Update zur Verfügung stand. Beide nehmen mit QuickTime auf und den Rest vom Lied kennt ihr. Patricks Aufnahme crasht und ist unwiederbringlich verloren (normal gibt’s da ein paar Tricks… aber in einer Beta gelten nun einmal andere Regel. Unwiderruflich!). Also be aware of betas! … oder schneidet wie obiges leidgeplagte Opfer einen halben Tag lang eine Backupspur die “eh nix klingt” und versucht es euren Hörer als Bordanlage unterzujubeln. (Anmerkung der Redaktion: Sorry du, passiert nüscht widahr). Und ja… Audio Hijack ist so steil, dass das damit nicht passiert wäre (da es die Spur live, direkt blank und ohne Präser auf die Platte schreibt – also keine Angst vor nächster Woche, Sven). Podcaster? Audio Hijack Pro kaufen! Im Zeichen dieser Sendung soll ebenfalls nicht unerwähnt bleiben, dass Tower bereits jetzt schon Yosemite kompatibel ist. Mehr news, news, news: Shawn Blancs multimediales Buch “Delight is in the Details” ist in einer neuen Version verfügbar und zwei Exemplare werden bei uns verlost. Mehr dazu gegen Ende dieses Artikels. Together, der beliebte lokale Evernote Ersatz ist nun auch für iOS verfügbar. Es soll zwar noch ein wenig Probleme geben mit dem iCloud-Sync, aber Entwickler Steve Harris setzt alles daran, dass es bald richtig flüssig läuft und hat schon 2 Updates seit der Aufnahme rausgeprügelt. Patrick nutzt die App schon seit geraumer Zeit auf seinem Mac - Weshalb alles folgende eine reine Mac Sicht der Dinge ist - und das Together Archiv befindet sich in seiner Dropbox. Der Aufgabenbereich von Together umfasst bei ihm lediglich die Themen Design und Inspiration – es wird also nicht als all-in basket benutzt. Das beste Feature, die Tag-Bundle-Gruppen, verschweigt er in gewohnter Manier, aber… Show Notes Lesen wissen mehr. Also, ihr legt zum Beispiel fest, dass alles was im Ordner “Webseiten Inspiration” gleichzeitig mit vier Tags (website, inspiration, webdesign, ubercast) versehen werden soll. Beim nächsten Start von Together wird alles automatisch getaggt. Klar… geht auch mit Hazel, aber Together kanns’ halt auch und man muss kein Genie sein um die Funktion zu nutzen. Dateien in solche Buckets schieben geht auch ganz leicht, denn Together kommt mit einer Desktoperweiterung (ein “Shelf”). Bewegt ihr die Maus an den Bildschirmrand, könnt ihr dort in den Ordner eurer Wahl die Datei oder den Link ablegen. Beide Versionen sind 50% günstiger für einen Monat (also bis ca. zum 23.08.2014) – Tags syncen sich von Device zu Device: App Store 17,99 € iTunes App Store 8,99 € (ohne Gewähr, wie in der Show besprochen nutzt unser Pilot nur die Direktversion der Mac App) FiftyThree, die Macher von Papers und dem Pencil haben nun eine SDK zu ihrem Stylus nachgeliefert auf das in Zukunft Drittanbieter auf die erweiterten Funktionen zugreifen können. Git Tobias gibt uns eine kleine Einführung in Git und schafft auch gleich das große Missverständnis aus der Welt dem Neueinsteiger gerne auf den Leim gehen: Git ≠ GitHub. Letzteres ist nur ein Ort an dem eure Git Repositories lagern und dort von allen Teammitgliedern genutzt und weiterverteilt werden können. Git an sich ist ein modernes, dezentrales Versionskontrollsystem, welches sowohl lokal im kleinen Rahmen genutzt werden kann, aber auch von Riesenprojekte wie jQuery, Ruby on Rails, etc. verwenden Git. Tobias nennt uns seine Beweggründe, warum er Git als zukunftssicher ansieht und was ihn begeistert im Vergleich zu den Alternativen. Es wird schnell klar das fournova Missionare sind was Git angeht. Auf ihrer Webseite findet man kostenloses Material für Einsteiger und Fortgeschrittene, unter anderem Lernvideos, eine Online Lernplattform und ein Ebook. Was ist Git? Eine kurze Übersicht Patrick fasst die Basics zusammen in seinem Lieblingsformat, einer Liste: History/Verlauf-Tracking und Sicherung = Nichts geht verloren Schnappschüsse von momentanen Dateien zu ausgewähltem Zeitpunkt. Ein Sammlung and Dateien und deren Verlauf wird gespeichert in einem Repository. Distributionsbeispiel/Teamworking Zentrales (online) Haupt-Repository Lokale Repositories 1, 2 und 3 der drei Teammitglieder Erstellen von Branches/Zweige, z.B. Webseite neue Navigation oder auch nur Textänderungen in der “Über uns” Seite. Zusammenführen von Änderungen wieder zurück ins Hauptrepository. Commandline oder GUI Hier wird es wieder interessant, denn Tobias ist der Kommandozeile, also “dem Terminal” gar nicht so zugetan wie man vielleicht annehmen mag. fournova wollte Git einsetzen in einer Zeit, wo es noch keine grafisches Userinterface für Git gab. Schon früh wünschte er sich eine simpel zu bedienende Lösung mit grafischer Benutzeroberfläche, um die Kraft die Git innehält per Maus und mit übersichtlicherer Informationsdarstellung zu bewältigen. Das war der Stein des Anstoßes und wenig später wurde Tower geboren. Tobias gewährt Einblicke hinter die Kulissen seiner Softwareschmiede und der geneigte Hörer bekommt am eigenen Ohr zu spüren was so alles geölt werden muss, dass ein Unternehmen in der Softwarebranche reibungslos läuft. Wie lerne ich das? Die wichtigsten und schönsten Git-Befehle gibt euch Andreas mit auf den Weg. Patrick rät dazu am Anfang möglichst klein anzufangen und nur die Git Basics zu lernen. Also in der Kommandozeile mal ein Repository erstellen, lernen wie man einen commit macht, klont, etc. Ja nicht mehr. Nur kleine Babyschritte. Am besten indem man dies in ein eigenes kleines Projekt einbindet und dort alle wichtigen Änderungen per commit festhält. Das wichtigste ist, dass man keine Angst vor Fehlern haben muss, da so gut wie nie etwas gelöscht wird von Git. Alle diese kleinen Weisheiten und mehr findet ihr auch auf SixRevisions. Dort wartet ein kleiner und feiner Artikel von Tobias in welchem er 7 Tipps für Einsteiger aufzählt. Dort bringt er auch das Konzept an sich näher und zeigt auf was es zu verstehen gibt um durchzustarten. Patrick hat quasi nach dieser Anleitung angefangen Git zu lernen und ist dann nach einem längeren Client-Vergleich in der Tat bei Tobias seinem Produkt, Tower, gelandet. Denn mit dieser GUI konnte er dann auch problematischere Dinge lösen, wie zum Beispiel das wiederherstellen eines bestimmten Stückchen Codes aus einer alter Revision. Wofür brauche ich das? Halten wir die Erkenntnisse aus allem Vorangegangen fest, merken wir, Gits Versionskontrolle zu nutzen kann einfacher sein als man zunächst denkt. Mann muss nur daran denken es zu nutzen. Wenn man das verinnerlicht hat, dann kann man eine weite Bandbreite an Möglichkeiten ausschöpfen, ob man nun einen Aufsatz schreibt, ein Buch, seine kleine Webseite zusammenschustert oder große Webprojekte zusammen mit einem Team meistern will. Andreas Anwendungsbeispiele ~/.vim Kollaboration → Dokumentation, Historie LaunchBar Scripts Keyboard Maestro Macros und Markdown Library Skript Lösungen, Beta Apps für die Videoproduktion Patricks Anwendungsbeispiele Repo für /usr/local/bin Einstellungen in meinem User Ordner (.bashrc, .bash_login, etc.) Skripte, templates (ob Webzeugs, LaTeX, oder was auch immer) Backups auf dem eigenem Server versionieren Kostenfrage GitHub ist für Studenten kostenlos nutzbar. Mehr Informationen dazu findet ihr auf GitHub Education. Alle öffentlichen Repositories sind ebenfalls grundsätzlich kostenlos. Eine Tower 2 Lizenz kostet euch $59. Studiert ihr, so erhaltet ihr von fournova 50% Rabatt auf Tower. Gleiches gilt, wenn ihr von Tower 1 upgraden wollt. Zusätzlich gibt es auch Discounts beim Erwerb von mehreren Lizenzen. Universitäten erhalten 20% Rabatt. Detaillierte Informationen dazu findet ihr im Tower Store. … und wer eine kostenlose Tower 2 Lizenz ergattern möchte blättert weiter nach unten zu unserem Gewinnspiel. Mit fournova oder unserem sympathischen Gast Tobias könnt ihr wie folgt in Kontakt treten: fournova Webseite: http://www.fournova.com/ fournova auf Twitter: @fournova fournova Email: info@fournova.com Tower Webseite: http://www.git-tower.com/ Tower Kontakt: http://www.git-tower.com/support/contact Tower auf Twitter: @gittower Tower auf Google+: https://plus.google.com/+Git-tower Tobias auf Twitter: @gntr Abschließende Links Erst einmal ein Spaß-Schmankerl - Tiere die Git nutzen - vom LaunchBar-Meister Manfred, einem unserer letzten Gäste. Svens Sammelsurium: Das Fournova/Tower eigene Lernprojekt inkl. Videos, Online Learning und Ebook: http://www.git-tower.com/learn/ Eine Sammlung von nützlichen Links für Git-Einsteiger von Stefan Imhoff. Roger Dudler hat eine sehr gutgemachte und in der Tat einfache Einführung in die Grundlagen von Git geschrieben. Auch wenn auf Englisch finde ich die zweiteilig Einführung in GitHub (Teil I, Teil II) — und somit auch Git — von ReadWrite (Lauren Orsini) am verständlichsten. Gutes Interview von ReadWrite (Lauren Orsini) zur Historie und Zielen von GitHub. Fun fact: Tom Preston-Werner hat auch Gravatar gegründet (heute Teil von Automattic, der Firma hinter WordPress). Pro Git => Hier online, aber auch als PDF, mobi und ePub als kostenloser Download erhältlich. Patricks Favoriten: Git Git - Documentation Git - Tutorial 7 Useful Git Tips for Beginners A successful Git branching model » nvie.com Twitter / Zettt: Can someone recommend a nice and easy beginner (video) tutorial for git? git - Der einfache Einstieg - kein Schnick-schnack! The Perfect Workflow, with Git, GitHub, and SSH - Tuts+ Code Tutorial Understanding Git - Part 1 by @earltedly — Realmac Blog 6 Myths Preventing Developers from Using Git Add-Ons Front-Ends/Clones für den eigenen Server gitbucket/README.md at master · takezoe/gitbucket GitPHP by xiphux Sonstiges doomrobo/DropboxIgnore Uberspace … und alle 12 Git Artikel der Ubernauten für die verschiedensten Anwendungsbeispiele auf (d)einem Shared Host Unsere Picks - Interessantes aus der Fundgrube Andreas: Codecheck Patrick: Übersicht Sven: Marked 2 (gibt es ebenfalls zu gewinnen bei uns!) Tobias: Kards Gewinnspiel-Marathon von Der Übercast Was gibt es abzustauben??? 2 Lizenzen für Tower 2 von fournova 2 Lizenzen für Marked 2 von Brett Terpstra 2 Kopien von Delight is in the Details von Shawn Blanc Wie nehme ich teil? (1) Hört euch den Flug UC#009 an (2) Werdet sozial aktiv: Auf allen sozialen Netzwerken findet ihr einen speziellen Post zu unserem Gewinnspiel. Es gilt diese frohe Botschaft zu verkünden. Es reicht sich ein soziales Netzwerk auszusuchen, dem Übercast dort zu folgen, bzw. zu liken Auf Facebook den Beitrag teilen und liken Oder auf Twitter den entsprechenden Tweet retweeten Es geht sogar bei Google+ plusen und sharen Oder bei App.net reposten Mit diesen zwei Schritten seid ihr im Pool und vielleicht einer der glücklichen Gewinner. Klar, wenn ihr auf mehreren Netzwerken aktiv werden, so steigert ihr damit auch eure Chancen. Teilnahmeschluss ist Sonntag, der 10. August 2014. Die Bekanntgabe der Gewinner erfolgt während Flug UC#010 (VÖ Freitag, den 15. August). Des weiteren werden die Sieger natürlich auf ihrem jeweiligen Sozialen Kanal - ob das nun Facebook, Twitter, Google+ oder App.net ist - kontaktiert und informiert. Möge die Lottofee mit euch sein. Im Senkflug auf die Landebahn Link zum Bild: Blick ins Cockpit und auf Quark mit Obst Das war’s. Wir bedanken uns bei unserem Gast für die tolle Zeit und wünschen euch einen angenehmen Aufenthalt. Bis zum nächsten Mal. In Spenderlaune? Wir haben Flattr und PayPal am Start und würden uns freuen.
Creating a free Gravatar account for your podcast, will allow you to automatically insert your branded logo or personal image alongside comments you make on the internet. For example, if you leave a comment below this post and you have a Gravatar account, when you type your email into the email section of the submission, […]
Tom Preston-Werner is one of the founders of Github.com. He's a Ruby programmer who has successfully launched a business used by hundreds of thousands of programmers all over the world to host their programming projects. He is also the original developer behind Gravatar. We discussed how Github.com got started. Tom also mentioned Gravatar, god, and Jekyll. We also discussed open source software, contributing, hiring developers, and what makes Github such a great place to work. If you want some good pointers about how things should work at a development shop, I recommend this episode.
Gravatar is a service for providing user avatars. See how easy it is to use in Rails in this episode.
Gravatar is a service for providing user avatars. See how easy it is to use in Rails in this episode.
Vortrag über Barrierefreiheit von Jens Meiert. Vergleich der Statistiken zwischen TheCounter.com und Webhits.de. Probleme mit Gravatar.com Google-Mail: wer braucht eine Einladung? Kölner Weblog-Treff Nr. 3. WeBuilder 2005: eine lange Suche hat ein Ende. “Der richtige Pfad”. Dateidownload: Podcast im MP3-Format (7,2mb). Podcast im Ogg-Format (5,8mb). Verwandte Beiträge: WordPress: WP-Camp am 13.10.2012 in Berlin Nicht vergessen: …