Open Channels FM: Why Open Source Projects Need a License Before They Need Code
Open source fosters creativity but involves complex issues like licensing and ownership, especially in hackathons. Proper planning with appropriate licenses upfront is crucial for project success and flexibility.
Open Channels FM: Signal – Issue 18
Talk about personal journeys in web development, the complexities of fame, and the benefits of open source, emphasizing enriching content options for listeners beyond traditional podcasts.
WordPress.org blog: WordPress 7.1 Beta 4

WordPress 7.1 Beta 4 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features. How to Test WordPress 7.1 Beta 4 You can test WordPress 7.1 Beta 4 in any of the following ways: WordPress Beta Tester Plugin Install and activate the WordPress Beta Tester plugin on a WordPress install. Select the “Bleeding edge” channel and “Beta/RC Only” stream. Direct Download Download the Beta 4 version (zip) and install it on a WordPress website. Command Line (WP-CLI) Use this WP-CLI command: wp core update –version=7.1-beta4 WordPress Playground Use a 7.1 Beta 4 WordPress Playground instance to test the software directly in your browser. No setup required-just click and go! The scheduled final release date for WordPress 7.1 is August 19, 2026. The full release schedule can be found here. Your help testing Beta and RC versions is vital to making this release as stable and powerful as possible. Thank you to everyone who contributes by testing! Find out what’s new in WordPress 7.1: Read the Beta 1 announcement for details and highlights. How important is your testing? Testing for issues is a critical part of developing any software, and it’s a meaningful way for anyone to contribute – whether or not you have experience. Details on what to test in WordPress 7.1 are available here. If you encounter an issue, please share it in the Alpha/Beta area of the support forums. If you are comfortable submitting a reproducible bug report, you can do so via WordPress Trac. You can also check your issue against this list of known bugs. Curious about testing releases in general and how to get started? Follow along with the testing initiatives in Make Core and join the #core-test channel on Making WordPress Slack. What’s in WordPress 7.1 Beta 4? WordPress 7.1 Beta 4 contains more than 114 updates and fixes since the Beta 3 release, including 51 in the Editor and 63 in Core. Each beta cycle focuses on bug fixes, and more are on the way with your help through testing. You can browse the technical details for all issues addressed since Beta 3 using these links: GitHub commits for 7.1 since July 22, 2026 Closed Trac tickets for 7.1 since July 22, 2026 Beta 4 brings a round of fixes that make the editor smoother to work with. Notes now stay reliably tied to the passage they refer to, and tagged people are displayed cleanly and clearly. A Beta 4 haiku Testers lend their eyes,edge cases hide in plain sight—Patch, rebuild, refine. Props to @krupajnanda for preparing this post and @annezazu, @wildworks, @amykamala for proofreading and review. Join us for the launch of WordPress 7.1 at WordCamp US 2026, August 16–19.
WPTavern: #227 – Maciek Palmowski on Testing Secure WordPress Hosting: Does the Marketing Match Reality?
Transcript [00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley. Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, testing secure WordPress hosting, does the marketing match the reality? If you’d like to subscribe to the podcast, you can do that by searching for WP Tavern in your podcast player of choice, or by going to wptavern.com/feed/podcast, and you can copy that URL into most podcast players. If you have a topic that you’d like us to feature on the podcast, I’m keen to hear from you and hopefully get you, or your idea, featured on the show. Head to wptavern.com/contact/jukebox, and use the form there. So on the podcast today we have Maciek Palmowski. Maciek is based in Poland and works at Patchstack, one of the companies in the WordPress ecosystem dedicated specifically to security. At Patchstack, Maciek collaborates with other security professionals on industry reports, bug bounty programmes, and solutions for agencies, product owners, and hosting companies aiming to secure their client sites. I met up with Maciek at WordCamp Europe, and we discussed his presentation there. It examined the claims of secure hosting made by many WordPress hosting providers. He describes how Patchstack set out to test these claims with real world penetration testing, using 30 known plugin vulnerabilities across multiple hosts. Employing standardised methodologies and validating their results independently. The findings are sobering. The majority of WordPress specific attacks still get through, and there’s a significant gap between the marketing hype and real protection. The conversation starts with Maciek’s background, and how his journey in the WordPress security space led to a focus on the promises made by hosts. From there, the discussion gets into the research approach, the selection of well-known vulnerabilities, consistent testing across different hosting environments, and the surprising result that even hosts with identical security tooling produce drastically different outcomes, showing it’s not just about the tools you use, but how you use them. We talk about the Swiss cheese model of security, every layer will have holes, so you need multiple overlapping defences, and honest communication from hosts about their limitations. We also explored whether an industry-wide standard, or badge, for secure hosting is feasible or even desirable, given how easy it is for strong marketing claims to outpace reality. AI also enters the conversation, increasing both the speed and sophistication of attacks, and making patching, and processes, even more important, especially as the volume of vulnerabilities continues to rise and the time to exploitation drops. If you’re interested in understanding what secure hosting really means, how to ask intelligent questions of providers, and the realities of WordPress security in 2026, this episode is for you. If you’d like to find out more, you can find all of the links in the show notes by heading to wptavern.com/podcast, where you’ll find all the other episodes as well. And so without further delay, I bring you Maciek Palmowski. [00:03:56] Maciek Palmowski: I am joined on the podcast by Maciek Palmowski. Hello Maciek. Perfect. You did great. [00:04:01] Nathan Wrigley: For some reason, your name has got into my head. A lot of the people that I interview, I struggle with their name, and I continue to struggle, but for some reason, I established many years ago that was how to say your name. And I think I’ve done it correctly ever since then. [00:04:16] Maciek Palmowski: Yes you did. You’re almost having the typical Polish accent, so you’re doing great. [00:04:21] Nathan Wrigley: So we are at WordCamp Europe, which is in Krakow, or Krakow, I don’t know how. [00:04:26] Maciek Palmowski: Krakow. [00:04:27] Nathan Wrigley: Thank you, that was good. And the reason Maciek is correcting my pronunciation is because Maciek is actually from Poland, which I suppose means that this is a bit of a, well, it’s like a home game to you. [00:04:37] Maciek Palmowski: In a way so, but it’s also like a bit of a shame because I do like travelling when WordCamp Europe’s are happening. And, you know, just hopping on the train and going to Krakow, it was like a, I mean it’s cool because, yeah, the venue’s amazing, everything is great, but still I’m staying home, so yeah. [00:04:53] Nathan Wrigley: Yeah, mixed feelings. So Maciek has done, or is going to do a presentation at WordCamp EU. Have you done it yet? [00:05:02] Maciek Palmowski: I will do it tomorrow. [00:05:04] Nathan Wrigley: Okay. And are you all set, are you one of these like really prepared people that has all the slides done, or are you last minute? [00:05:11] Maciek Palmowski: Everything is ready. I already did one version of it at the Checkout Summit in Palermo, so. [00:05:17] Nathan Wrigley: Oh I see. So you’ve had a sort of dry run of elsewhere. [00:05:19] Maciek Palmowski: Of course. [00:05:20] Nathan Wrigley: Excellent. So the presentation, which is going to be the focus of today’s conversation, is called Testing the promise, does secure hosting deliver? And I may as well read the blurb because it was a reasonably short one. So it says, secure hosting, in quotes, is everywhere in WordPress. What does it actually protect against? We put this claim to the test with real penetration testing. 30 known vulnerabilities, multiple hosting providers, standardised methodology, validated by independent observers. The findings reveal a critical gap between marketing and reality. WordPress specific attacks succeed most of the time. That’s quite an alarming sentence. This talk shares the complete results and explains why generic security fails. So, we’ll get into that in a moment. But as with all people, when I’m talking to them about security, I guess it’s good to establish who you are, and what your credentials are and what you’ve done, and how is it that you get to talk about security with authority. So over
Open Channels FM: Navigating Client Expectations in the Age of AI-Assisted Web Design
The growing use of AI tools is reshaping web design, as clients increasingly present AI-generated content. Education and proactive communication are essential for web professionals to navigate these complexities effectively.
Open Channels FM: Why Real-Time Threat Detection Matters for Website Security
Much of the conversation around web security centers on preventative measures and layers of defense, but there’s a new front line that deserves focused attention: real-time threat detection at the runtime level. With attacks now happening faster and at greater scale thanks to AI, the ability to identify and block malicious activity as it unfolds […]
Open Channels FM: The Journey Back to Enjoying Web Development and Personal Blogging
In this episode, Bob and Simon discuss the creative ups and downs of building personal websites, overcoming perfectionism, and finding joy in fun coding projects as part of the indie web journey.
Open Channels FM: AI Bots Now Dominate Web Traffic and Court Sides Against Google in Scraping Case
Automated bots now dominate web traffic, outnumbering humans, significantly impacting ad models. In legal news, SERPAPI won a court case against Google’s web scraping efforts. Tech mourns icons Om Malik and John C. Dvorak.
What’s Coming in WordPress 7.1? (Features & Screenshots)

WordPress 7.1 beta is now available for testing, and we have been running it on our test sites for the past week. The official release is scheduled for August 19, 2026, timed with WordCamp US. While WordPress 7.0 rebuilt the admin and introduced the AI Client, 7.1 turns to the editor. For the first time, you can design for tablets and phones, and style hover and focus states, without writing a line of CSS. Let’s take a look at what’s coming in WordPress 7.1, with screenshots and examples of how each feature works. TL;DR: What’s coming in WordPress 7.1 Notes get a major upgrade with @mentions, the ability to add notes to specific text, support for multiple discussion threads, and rich formatting. Responsive styling lets you control how blocks look on tablets and phones, directly in the editor, without custom CSS. A new image editor and smarter media handling, including HEIC support and uploads pause if your connection drops, then continue when you are back online. New Tabs and Playlist blocks, plus the admin toolbar now stays visible while you work in the editor. Note: This beta release is for testing and development only. So, please do not install, run, or test this version of WordPress on your live website. Instead, we recommend using a staging site or a local site. You can test WordPress 7.1 Beta by installing and activating the WordPress Beta Tester plugin. When Is WordPress 7.1 Coming Out? Collaborate Better With the Upgraded Notes Responsive Styling Without Writing CSS Style Hover and Focus States for Buttons New Tabs Block New Playlist Block Block Improvements in WordPress 7.1 A New Image Editor in WordPress 7.1 Smoother and Smarter Media Handling The Admin Toolbar Now Stays Visible When Editing A More Personal, More Navigable Admin What Didn’t Make It Into WordPress 7.1? Under the Hood (Developer & Performance Updates) When Is WordPress 7.1 Coming Out? WordPress 7.1 will be released on August 19, 2026, which is the final day of WordCamp US 2026. The date is still marked tentative on the official WordPress release schedule, so it could shift if testing uncovers a serious bug. Before then, WordPress 7.1 will go through two release candidates, on August 5 and August 12. Those are near-final builds, so you will know exactly what is in the release by early August. Collaborate Better With the Upgraded Notes The Notes feature arrived in WordPress 6.9 as a simple way to leave comments on blocks. WordPress 7.1 will turn it into a proper feedback system. The most useful addition is @mentions. Typing ‘@’ inside a note brings up a searchable list of collaborators to tag directly. This makes it much easier to direct feedback to the right person on your team. Inline notes are new too. Instead of attaching a comment to an entire block, you can select a specific sentence or phrase and leave a note on just that text. The selection stays highlighted, so everyone can see exactly what the note refers to. This removes a lot of guesswork. Previously, a note saying “please rephrase this” could apply to anything in a long paragraph. Now, it points at the exact words. Other Notes improvements include: Multiple threads: More than one conversation can run on the same block, instead of folding every comment into a single thread. Text formatting: Notes now support bold, italic, code, links, and emoji. Show more / show less: Long notes collapse by default to keep the sidebar tidy. These changes make Notes genuinely useful for teams, agencies, and multi-author blogs. Responsive Styling Without Writing CSS You can now define how a block looks at different screen sizes directly in the editor. For example, a smaller font size for headings on mobile, or different spacing for tablets, without writing a single line of CSS. When you switch the editor preview to Tablet or Mobile, any style change you make applies only to that screen size. WordPress also shows a small badge in the block settings panel, so you always know which screen size you are styling. It works on two levels. Responsive styles set in Global Styles apply to every instance of a block across your site. Styles set on a single block apply only to that page. The editor canvas is also more flexible. Instead of being limited to the Desktop, Tablet, and Mobile preview presets, you can drag the canvas to any width and watch your blocks respond in real time. In our testing, this felt natural very quickly. Theme developers can even define their own breakpoints in theme.json, so the preview widths can match the theme you’re actually using. If you style one block and then decide you want that look everywhere, applying the change to Global Styles brings up a quick review step. You can choose exactly which modified styles to apply globally and keep the rest as local overrides. Style Hover and Focus States for Buttons Alongside responsive styling, WordPress 7.1 will introduce interactive state styling. A new ‘States’ dropdown lets you visually style how blocks respond to interaction. The most common use case is buttons: you can now set a different background color for hover, focus, or active states and preview the change live in the editor. Until now, changing a button’s hover color meant writing custom CSS, even though it’s a tiny change. Now, it’s a built-in design option. New Tabs Block WordPress 7.1 will add a Tabs block that many users have been asking for. Tabs let you organize content into clickable panels instead of showing everything at once. They are great for product specifications, FAQs, or comparing options without making a page feel long. Previously, you had to add tabbed content using a plugin. Just keep in mind that tabs you already built with a plugin will not convert to this core block automatically. New Playlist Block The second new block in WordPress 7.1 will be the Playlist block. It lets you add a collection of audio files
Matt: How ISO Works
Inspired by Om I’ve been getting back into my DSLR photography. I learned a lot about how ISO settings work from this delightful physics YouTube channel MinutePhysics.