{bjørn:johansen}

Four cheaper models auditioned for a seat on my review panel.

I was burning Claude session quota too fast, so I added another account. claude-swap auto-switches at 90% while the session keeps running.

Mitchell Hashimoto put words to something I have believed for years.

Every merge request I open gets read by three AI models that debate each other's findings with code evidence.

I wanted everything Claude Code writes for developers to follow the Google developer documentation style guide.

I kept running the same four commands to start work on an issue, so I wrote a script that does it. claude-work gives every issue its own git worktree, branch and tmux session running Claude Code.

So Long, and Thanks for All the Fish

Yesterday, I migrated this blog from WordPress to Hugo.

This afternoon’s hobby project was to convert my WordPress blog into a static site using Hugo.

One day you will be gone.

Using Composer is a great way of organizing your WordPress project, with WordPress itself, plugins and themes declared as dependencies.

If you’re using CloudFlare to host your DNS, there is a plugin for the official Let’s Encrypt client Certbot you can use to easily acquire and renew wildcard certificates from Let’s Encrypt.

This article is not an introduction to neither Xdebug, Local by Flywheel nor PhpStorm, but shows you how you can get started with debugging and profiling your WordPress sites in PhpStorm when using Local by Flywheel as a local development environment.

When WordPress 4.9.6 launched on May 17, 2018 it came with new tools for exporting and erasing personal data that you may have collected (you know, GDPR and all).

A little sensationalist written blog post by Barak Tawily claims that WordPress is vulnerable to a DoS attack because of the load-scripts.php file which concatenates JavaScript files on the fly.

With HTTP/2 push you can effectively send a web page’s assets to the client before the client even knows about them.

OMFG, BREAKING NEWS: Thousands of WordPress sites affected by some vulnerability.{{ double-space-with-newline }}

On March 2–4 2018, Friday through Sunday, there will be a great chance to meet WordPressers at the conference WordCamp Oslo 2018.

WordPress translations are compiled from human-readable PO-files into machine optimized MO-files, but still takes a lot of overhead to load.

Wouldn’t it be cool if you, in your PHP project could define a package that makes sure that everybody who even tries to commit code is forced to follow the project’s defined coding standards?

Generating the menus in WordPress is quite resource intensive.

Recently DigitalOcean released new pricing plans where they basically doubled the RAM for the same price of the old plans.

Whenever you upgrade a plugin, theme or WordPress itself through the WordPress dashboard, WordPress will put itself in maintenance mode and all your visitors will see the maintenance mode notice “Briefly unavailable for scheduled maintenance.

The resources you have available to spend on WordPress security for your website usually vary vastly whether you’re an international corporation or just a hobbyist blogger.

If you google “functions.php” you get about 7 million results.

Since I translate a lot of WordPress themes and plugins, I sometimes come across plugins who try to be clever with their translations.

I’ve been using, and advocating for others to use, Yoda conditions for a long time.

As you may know, WordPress sends out email notifications from time to time.

During WordCamp Europe 2017 in Paris, there was a Q&A session with Matt Mullenweg.

UUIDs (Universally Unique IDentifier), also known as GUIDs (Globally Unique IDentifier), is a string that identifies a piece of information in computer systems.

Email is fundamentally insecure.

This weekend I was at WordCamp Berlin, met a lot of great people, and watched a lot of interesting presentations.

Many ISPs and other DNS providers are slow or inject ads, track you, hijack DNS queries or do other nasty stuff.

This is the second post in my series of posts on some of the tools I use to stay a little safer and protect my privacy online.

WordPress doesn’t use a nonce for the login form, which opens up for you to perform a WordPress session donation attack.

If you’re utilizing the browser cache correctly, you’ll gain huge performance benefits for your users, as well as save bandwidth and server capacity which equals to saving money.

I’m running a series of posts on some of the tools I use to stay a little safer and protect my privacy online.

Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with their service.

Inspired by how Facebook assists their users when they log in, I decided to implement something like the same for WordPress.

More and more users are using adblockers or surfing the web via private browsing with tracking protection.

So, you’ve launched your WordPress site on a non-www domain, like example.com, but since then found out that running it on on www, like www.example.com, is better and want to move?

For 20 years or so, there has been the debate over whether you should use www or not in your web site’s canonical hostname.

“ A healthy Internet needs all of us”, Mozilla states.

If you have someone’s public SSH key, you can use OpenSSL to safely encrypt a file and send it to them over an insecure connection (i.e. the internet).

Field Manager doesn’t have a flexible content field type as Advanced Custom Fields Pro does, but it is possible to mimic the functionality by using a little logic.

Publishing open source software or articles for free is very giving.

Top 10 WordPress plugins with the most reported vulnerabilities according to the WPScan Vulnerability Database.

I very much appreciate comments that bring new insights, corrects my errors, or leaves a thank you note.

Nginx is an extremely efficient and quite flexible web server.

With the advent of the fully automated and free of cost certificate authorities Let’s Encrypt and StartCom there is no doubt that the future of CAs are changing.