Note: Survey is closed as of 9/18/08. Thanks for the feedback! WordPress 2.7 is currently in development and as some people already know, it features a revised layout with a left-hand navigation column that was designed in response to user feedback regarding the use of screen real estate. Because the navigation came straight from the Crazyhorse prototype that was developed quickly for usability testing, it is still a work in progress
Original post:
WordPress 2.7 Navigation Options Survey
Stefan Esser recently warned developers of the dangers of SQL Column Truncation and the weakness of mt_rand() . With his help we worked around these problems and are now releasing WordPress 2.6.2. If you allow open registration on your blog, you should definitely upgrade. With open registration enabled, it is possible in WordPress versions 2.6.1 and earlier to craft a username such that it will allow resetting another user’s password to a randomly generated password. The randomly generated password is not disclosed to the attacker, so this problem by itself is annoying but not a security exploit. However, this attack coupled with a weakness in the random number seeding in mt_rand() could be used to predict the randomly generated password. Stefan Esser will release details of the complete attack shortly. The attack is difficult to accomplish, but its mere possibility means we recommend upgrading to 2.6.2. Other PHP apps are susceptible to this class of attack. To protect all of your apps, grab the latest version of Suhosin . If you’ve already updated Suhosin, your existing WordPress install is already protected from the full exploit. You should still upgrade to 2.6.2 if you allow open user registration so as to prevent the possibility of passwords being randomized. 2.6.2 also contains a handful of bug fixes . Check out the full changeset and list of changed files
Read more:
WordPress 2.6.2
With 2.6.1, we’re continuing our trend of releasing a maintenance release shortly after a major release in order to get fixes for the inevitable “dot zero” bugs into your hands without a long wait. If you’re happy with 2.6, however, keep on using it. You need not upgrade to 2.6.1 if 2.6 is getting the job done.
Excerpt from:
WordPress 2.6.1
I’m happy to announce that version 2.6 of WordPress.org is now available , almost a month ahead schedule. Version 2.6 “Tyner,” named for jazz pianist McCoy Tyner , contains a number of new features that make WordPress a more powerful CMS: you can now track changes to every post and page and easily post from wherever you are on the web, plus there are dozens of incremental improvements to the features introduced in version 2.5 . We’ve prepared a brief video tour of 2.6, if you have 3 minutes and 29 seconds to spare, it’s worth a watch: If you’d like to embed the tour video in your blog, copy and paste this code for the high quality version: <embed src="http://v.wordpress.com/mARhRBcT/fmt_dvd" type="application/x-shockwave-flash" width="640" height="385" flashvars="blog_domain=http://wordpress.org/development/2008/07/wordpress-26/&width=640&height=385"> </embed> And here’s a smaller version, 400 pixels wide: <embed src="http://v.wordpress.com/mARhRBcT/fmt_std" type="application/x-shockwave-flash" width="400" height="250" flashvars="blog_domain=http://wordpress.org/development/2008/07/wordpress-26/&width=400&height=250"> </embed> Here’s a more textual overview of what’s hawt in 2.6: Post Revisions: Wiki-like tracking of edits With the power of modern computers, it’s silly that we still use save and editing metaphors from the time when the most common method of storage was floppy disks
More here:
WordPress 2.6
On Tuesday, May 27th, WordPress will turn 5 years old. We’ve come a long way from that original 0.7 release
See more here:
WordPress Birthday Party
We’re doing some usability testing in New York City . Join in if you’re in the area.
WordCamps are my favorite events to go to because there’s something about the core WordPress community that attracts smart folks with good philosophies that are fun to hang out with.
The rest is here:
Upcoming WordCamps