[wp-hackers] wordpress security

[Chris Williams]

This idea is a home run.

Make the first post be something like: "Congrats on your new WP blog.  Make
sure you keep up-to-date by subscribing to this email list...".  Perhaps
make the first comment also be: "That's a great idea!" :)

Then make sure the WP-Announce mailing list is used very carefully.  Exactly
once for each update, no noise, no beta announcements, just a good clear
release note each time an update comes out.

Perfect solution, Lynne.


> From: Lynne Pope <lynne.pope at gmail.com>
> 
> The WP-Announce list exists. Everyone can use it, including hosts, to get
> email announcements (assuming the list will ever be used). So, what I
> propose is this:
> Get a commitment from the core team that they will issue announcements on
> that list. And that they will state which upgrades are necessary for
> security.
> Change the sample data - instead of, "this is a post", provide some
> meaningful information. With a link to subscribe to WP-Announce.
> Make an entry announcing that WP-Announce is being used, so this will show
> in the dashboard feeds. Bloggers will quickly pick up on this and news of it
> will spread.