Tim Nash
tna.sh
Tim Nash
@tna.sh
Doomspeaker and Security Consultant for WordPress ecosystem.

πŸ”— https://tna.sh
🏠 https://timnash.co.uk
πŸŽ“ https://wpsecurity101.com
πŸ‘” https://agencystreamline.co.uk/
Still time for you to get on a train/plane/automobile and get to London for WPLDN this evening and come and be scared with WordPress horror tales!

Want a sneak peek here is my opening slide for tonight horror tale.
October 30, 2025 at 10:55 AM
Reposted by Tim Nash
Today πŸŽ‰Join us Nathan Wrigley, Michelle Frechette, Tim Nash and me
@nathanwrigley.com @michellefrechette.bsky.social @bsky.app/profile/tna.sh #TWiW #WordPress at 15:00 CEST (13:00 UTC) wpbuilds.com/live
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
wpbuilds.com
October 20, 2025 at 8:12 AM
I like it!
October 17, 2025 at 9:58 AM
What does Wapuu do?

Nothing. Absolutely nothing.
It doesn’t boost SEO.
It doesn’t compress images.
It doesn’t even have a block editor opinion.
It just sits there, hugging its WordPress orb like it knows the secret to the custom post type apocalypse.

I would point to wordpress.org/plugins/wapu...
October 9, 2025 at 9:16 AM
Currently playing will I have made it to stable internet connection in time for the show! Not to scary @nathanwrigley.com to much.
October 6, 2025 at 10:46 AM
Reposted by Tim Nash
Join us LIVE for the 'This Week in #WordPress' show. It's fun, and we'd love your comments, really! Starts in a couple of hours, so 2pm UK time.
wpbuilds.com/live
This week, I'm with Michelle Frechette, Tim Nash and Courtney Robertson.
@michellefrechette.bsky.social @tna.sh @courtneyr.dev #TWiW
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
wpbuilds.com
October 6, 2025 at 10:36 AM
Ever wondered how random wp_rand() really is?

No? I'm not surprised I would be more surprised if you knew this function even existed in WordPress.

Now you do, are you curious?
So was I let's go on a random adventure!

timnash.co.uk/nothing-is-t...
Nothing is truly random by Tim Nash
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
timnash.co.uk
October 6, 2025 at 9:18 AM
I hope it involves lavalamps?
October 5, 2025 at 3:02 PM
Want something to read on your Sunday afternoon? Come join me on a random adventure into wp-rand()

timnash.co.uk/nothing-is-t...

#wordpress
Nothing is truly random by Tim Nash
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
timnash.co.uk
October 5, 2025 at 1:55 PM
Reposted by Tim Nash
It's here! Menu Designer has landed at WP.org!

Menu Designer is a powerful new way to build beautiful mobile menus and dropdown menus in the @WordPress block editor β€” no coding required. And now it's available right in your dashboard.

wordpress.org/plugins/oll...
September 29, 2025 at 2:39 PM
Reposted by Tim Nash
WordPress 6.8.3 is here! This crucial security release addresses vulnerabilities to keep your site safe. Update now and ensure your site is secure! Learn more about the updates and download it here: wp.me/pZhYe-4ZK.
wp.me
October 1, 2025 at 1:38 AM
p.s If you found it helpful, do share the video for some this might be the thing that makes them go, oh that makes sense.
October 1, 2025 at 10:37 AM
I was lucky to present at #WCGdynia on automatic updates.

Even if you don't use them I encourage you to watch this talk, not to convince you, but to see what things you can do around updates in general to make them safer and more reliable. (Hint it's testing)

wordpress.tv/2025/09/30/t...
The Dark Side of Automatic Updates: Securing WordPress Supply Chains inΒ CI/CD
Automatic updates in WordPress are a safety net, ensuring that sites are always running the latest code. But for development teams working with continuous integration and delivery (CI/CD), the real…
wordpress.tv
October 1, 2025 at 10:37 AM
Has yours?
If not what a sucky morning you must be having clicking an update button.

Coincidentally my talk on automatic updates just dropped on @wordpress.org TV

wordpress.tv/2025/09/30/t...
Your site has updated to WordPress 6.8.3
Your site has updated to WordPress 6.8.3
Your site has updated to WordPress 6.8.3
Your site has updated to WordPress 6.8.3
Your site has updated to WordPress 6.8.3
Your site has updated to WordPress 6.8.3
Your site has updated to WordPress 6.8.3
Your site…
October 1, 2025 at 9:51 AM
Reposted by Tim Nash
NEW POST: On being inspired at #loopconf and hitting publish on a blog post I had half written....
Comment.
Like. Comment. Subscribe. That’s what the YouTubers say isn’t it? I miss folks commenting on blog posts really. At my peak I’d post a blog post at home, walk the half a mile from my student digs to university, and then be greeted with 4 or 5 comments. Now? I think I’ve had one comment … Continue reading
www.rhyswynne.co.uk
September 29, 2025 at 4:51 PM
Thanks! I'm off to hibernate for a week.
September 28, 2025 at 9:39 AM
Taking @ohhelloana.blog talk seriously and hit publish...
The long way to WordCamp Gdynia πŸš€
Leeds β†’ London (WPLDN + LoopConf) β†’ Poland πŸ‡΅πŸ‡±
Turns out it’s quicker to get to Gdynia than London.
timnash.co.uk/the-long-way...

#loopconf #WCGdynia
The Long Way to WordCamp Gdynia: LoopConf, WPLDN and a Lot of Coffee by Tim Nash
From Leeds to London for WPLDN and LoopConf, then on to WordCamp Gdynia β€” turns out Poland is easier to reach than the capital. A week of security talks, AI debates, community, and flight delays.
timnash.co.uk
September 28, 2025 at 8:19 AM
You can send me a message on LinkedIn linkedin.com/in/tnash
or via the WPUK Slack wpslack.uk

Both are logged in on my phone.
Please don't use Bluesky chat feature as I have no access to it! So you will just be a message I can't access.
linkedin.com
September 24, 2025 at 12:27 PM
Coming to #WPLDN but worried you don't know anyone? Events can be intimidating!

I really want to say Hi and I can hopefully gently introduce you to people.

If the idea of coming up to me is scary then just drop me a message and I will come to you even if it's outside of the venue.

This is me:
September 24, 2025 at 12:24 PM
The wonderful @mwug.uk is back! Very excited to be here in Stockport which is totally Manchester...

But so happy to see it happening congrats to @rhys.wales @jwo.ng on re-launch.
September 9, 2025 at 5:47 PM
I don't know there possibly is to much Evan...
September 9, 2025 at 1:49 PM
Heads up!
If you make use of NPM there has been multiple packages compromised and distributing malware. List of effected packages github.com/advisories?q... including big ones like debug and chalk.

Some commentary on the event including from the Chalk dev news.ycombinator.com/item?id=4516...
GitHub Advisory Database
A database of software vulnerabilities, using data from maintainer-submitted advisories and from other vulnerability databases.
github.com
September 9, 2025 at 5:50 AM
☝️
September 5, 2025 at 9:09 AM