Feels like half the web is down now…

Cloudflare and other MITM proxies with TLS termination have access to your WP usernames and passwords, and every WooCommerce transaction (including customer billing and address data).

Version 3.0.0 of the Minit plugin for WordPress now defers the script bundle by default and uses this trick to support scripts with "after" logic (which require the parent to be loaded).

Learn more here: https://github.com/kasparsd/minit

Responded to @kasparsd:

OK, found it. It is coming from this plugin https://wordpress.org/plugins/replace-image/

Has anyone seen WP add ?_t=… to image URLs? Couldn't find anything in the codebase where this is happening.

This is causing WP to fail at generating the srcsets.

Improve the local development experience for your team and point *.local.yourproject.com to 127.0.0.1 using the public DNS.

Here is how to configure it: https://kaspars.net/blog/public-dns-local-development-url

Everyone on Twitter now…

The whole re-auth flow is completely broken. I'm using the correct key and it still goes into this infinite loop.

Has anyone created a /metrics REST API endpoint for WordPress that reports data about the WP instance — object cache reads/writes/memory (from memcache/redis/apcu), php-fpm stats, system load, disk space, etc.

Ideally, with Prometheus and OpenTelemetry output formats.

New on blog: Custom Email Address for Kids Google Account https://kaspars.net/blog/google-account-custom-email

Here is a tip — you don't need the defined( 'ABSPATH' ) checks in class files that don't run any code. PHP will simply do nothing when a class definition is loaded.

I've noticed that AI is prone to adding it because of how WP core uses outside of class files.

Cmd+Z for restoring recently closed tab is really nice. That key combo is muscle memory for global undo.

TIL: Zen browser and others use Cmd+Shift+T to do that.

“Knowing what matters for a specific thing is called being an expert.

Knowing what matters over the course of a human life is called being wise.”

https://commoncog.com/only-thing-that-matters/

Finally managed to document the fix for Dell flickering issue with macOS: https://kaspars.net/blog/fix-dell-monitor-flickering-mac

What’s your preferred service for hosting 1000TB of S3-like data (videos, images) with ~300TB/month egress?

Backblaze B2 seems really nice but I’m looking for recommendations.

Responded to @kasparsd:

Learn more at: https://github.com/kasparsd/wp-env-domains

Did you know that *.wpenv.net (all subdomains) point to 127.0.0.1?

Use it for local development and avoid editing hosts file or setting up custom NS resolver.

Finally moved away from 1Password 7 (which still had the iCloud sync) to Strongbox which uses KeePass behind the scenes.

All started with trying out the Zen browser which doesn't work with the old 1Password extension 😅 Really love their sidebar UX and the extra vertical space. Their Glance feature is really nice on Twitter for quickly previewing linked URLs.

What is your browser and password manager of choice these days?

Facebook Ad Manager feels like a time capsule of bad UX decisions. It's slow, confusing and somehow gets worse every year.

A perfect case study in legacy product debt buried under layers of React.

Responded to @kasparsd:

Here is the extract Node.js app https://github.com/kasparsd/gtm-cloud-image

It is basically a wrapper which eventually loads https://www.googletagmanager.com/static/serverjs/server_bootstrap.js

Did you know that Google Tag Manager now supports server-side implementation which runs all the tag logic on your server?

Since they only publish a Docker image of the server, I extracted and published the source in case you're interested.