Connect with us

Published

on

Automattic founder, Matt Mullenweg

Source: Automattic

Matt Mullenweg, who turned 40 in January, has now spent more than half his life working on WordPress. He’s never had such an insane two weeks.

WordPress, best known as a leading content management system, has hundreds of millions of sites currently using its templates, tools and plugins. But the WordPress universe is a complicated mishmash of open-source products, nonprofits, for-profit companies, trademarks and licenses.

The typically quiet but extremely important part of the internet — WordPress powers roughly 40% of all websites — has suddenly emerged as a major source of tech industry drama, threatening to upend an ecosystem that’s long been viewed, from the outside at least, as collegial, thanks to its longevity and the various fun-loving camps and learning sessions it hosts every year.

While WordPress’ technology is open source, meaning anyone can install it and use it for free, Mullenweg is also founder and CEO of Automattic, a venture-backed startup valued at $7.5 billion, as of 2021. WordPress.com is Automattic’s central businesses, and individuals and companies pay anywhere from $4 a month to over $25,000 a year for services like ad products, security, customer support and inventory management.

The saga that burst into public view in September featured the normally mild-mannered Mullenweg as its central character in a battle with WP Engine, one of the leading providers of WordPress hosting. Silicon Valley private equity firm Silver Lake bought a majority stake in WP Engine in 2018, investing $250 million and obtaining three board seats.

“I’ve been doing WordPress for 21 years, I have good relationships with every other company in the world,” Mullenweg said in an interview this week with CNBC.

WP Engine’s offense, according to Mullenweg and a cease-and-desist letter his attorneys sent to the company on Sept. 23, revolves around years of trademark violations and WP Engine’s claim that it’s bringing “WordPress to the masses.”

“We at Automattic have been attempting to make a licensing deal with them for a very long time, and all they have done is string us along,” Mullenweg wrote in a Sept. 26 post on his personal website, ma.tt. “Finally, I drew a line in the sand, which they have now leapt over.”

Here's how a three-month paid sabbatical can solve employee retention and burnout problems

Since then, the matter has escalated on an almost daily basis. WordPress took the drastic step of banning WP Engine from using the WordPress resources necessary to serve its customers, which preceded a lawsuit filed on Wednesday by WP Engine against Mullenweg and Automattic. Mullenweg then put out another post, calling WP Engine’s suit “meritless,” and announcing that he’d hired Neal Katyal, former U.S. acting solicitor general, for legal defense.

Tomasz Tunguz, a venture capitalist and founder of Theory Ventures, says the conflict speaks to the perpetual challenge of open-source software.

“What are the legitimate ways of monetizing open source and does the commercial entity created by the authors — how much control should they have with the commercialization efforts?” Tunguz said. In this case, “hundreds of millions in revenue is at stake between the two,” he added.

‘Silver Lake doesn’t give a dang’

In Mullenweg’s telling of the brouhaha, the battle has been years in the making. He’s been actively trying to strike a deal since January and finally got fed up, he said.

But to the outside world, it all felt very sudden. Mullenweg first referenced the matter in public on Sept. 17, in a blog post ahead of WordCamp, the largest annual gathering in the U.S. of WordPress users. The four-day event took place in Portland, Oregon, beginning on Sept. 17.

In the post, Mullenweg criticized WP Engine for not contributing enough back to the WordPress ecosystem. He said that Automattic contributed 3,786 hours per week to WordPress.org, (“not even counting me!”) compared to 47 hours for WP Engine.

For businesses and developers considering who they want to support, Mullenweg had this message: “Silver Lake doesn’t give a dang about your Open Source ideals. It just wants a return on capital.”

A Silver Lake spokesperson said WP Engine was handling all inquiries. A WP Engine representative referred to the company’s complaint against Automattic and Mullenweg, filed on Oct. 2. The spokesperson highlighted the introduction of the complaint.

“This is a case about abuse of power, extortion, and greed,” the filing begins. “The misconduct at issue here is all the more shocking because it occurred in an unexpected place — the WordPress open source software community built on promises of the freedom to build, run, change, and redistribute without barriers or constraints, for all. Those promises were not kept, and that community was betrayed, by the wrongful acts of a few—[Matt Mullenweg and Automattic]—to the detriment of the many, including WPE.”

On Sept. 20, three days after Mullenweg’s initial post, the WordPress founder showed he wouldn’t be backing down.

In his keynote, at an event that attracted an estimated 1,500 WordPress fanatics, Mullenweg warned the audience upfront that it “might be one of my spiciest WordCamp presentations ever.” After reading out his prior blog post, Mullenweg took swipes at Silver Lake, even naming a partner at the firm, Lee Wittlinger, as the man behind WP Engine, comparing him to a “schoolyard bully.”

Prior to taking questions, Mullenweg said of WP Engine’s presence at WordCamp, “they’re not going to be at future ones, I don’t think.”

Gap between closed-source and open-source AI companies smaller than we thought: Hugging Face

He wasn’t done.

The next day, in a post titled, “WP Engine is not WordPress,” Mullenweg wrote that even his mother didn’t know the difference, and he said WP Engine is “profiting off of the confusion” and “needs a trademark license to continue their business.”

His mom wasn’t the only one confused.

Bob Perkowitz, president of environmental nonprofit ecoAmerica, told CNBC that he’s known Mullenweg for 16 years and is even an investor in Automattic. For a number of his organizational and personal websites, Perkowitz said he’s long been a WP Engine customer. Tuning in remotely, he heard Mullenweg’s WordCamp presentation.

“I always thought that was part of WordPress,” Perkowitz told CNBC in an interview, referring to WP Engine. “They’re misleading, and they don’t contribute to the community.”

Perkowitz said he’s having his website administrator migrate all of the websites to different hosting companies.

Following Mullenweg’s presentation, WP Engine sent Automattic’s legal chief a cease-and-desist letter on Sept. 23, due to what the company called Mullenweg’s self-described “scorched earth nuclear approach.” The letter said Mullenweg had demanded a payout of a “very large sum of money” before his WordCamp keynote, and WP Engine didn’t pay up.

The letter said Mullenweg’s “false, misleading, and disparaging statements are legally actionable.”

Two days later, Mullenweg wrote on the WordPress.org site that WP Engine had been banned, meaning it “no longer has free access to WordPress.org’s resources.” Mullenweg encouraged WP Engine’s thousands of customers to contact the company “and ask them to fix it.”

WordPress then temporarily unblocked WP Engine and gave it until Oct. 1 to agree to terms of a licensing agreement, which Mullenweg made public. The crux of the deal is that WP Engine would agree to a royalty fee of 8% of monthly revenue to Automattic or commit 8% of revenue “in the form of salaries of WP Engine employees” working on WordPress features for WordPress.org.

No deal was made. The ban went into effect Oct. 1.

To the universe of WP Engine customers, Mullenweg’s actions were harsh and clumsy. Mullenweg says that what his critics don’t understand is how long he’s been trying to come to a deal.

“They’ve been delaying forever,” Mullenweg told CNBC. He decided, “I’m going to finally start talking about the evil stuff you’re doing unless you talk to me,” he said.

Fighting back

Far from negotiating, WP Engine on Wednesday filed its explosive lawsuit against Mullenweg and Automattic.

WP Engine accuses Mullenweg of slander and libel due to his public comments and says the WordPress founder has numerous conflicts of interest in how he runs the community and his company, give the open-source nature of the technology.

“Over the last two weeks, Defendants have been carrying out a scheme to ban WPE from the WordPress community unless it agreed to pay tens of millions of dollars to Automattic for a purported trademark license that WPE does not even need,” the lawsuit says. “Defendants’ plan, which came without warning, gave WPE less than 48 hours to either agree to pay them off or face the consequences of being banned and publicly smeared.”

Following WP Engine’s demands for a jury trial in its 61-page lawsuit, Mullenweg fired back, describing the complaint as “baseless” and “flawed, start to finish.”

On his personal website, Mullenweg acknowledged that the ordeal was causing a big internal clash at his company.

“It became clear a good chunk of my Automattic colleagues disagreed with me and our actions,” Mullenweg wrote.

He says he made the decision to offer buyout packages for anyone who resigned before early afternoon Thursday, offering $30,000 or six months of salary, whichever is higher. Anyone who took the deal wouldn’t be eligible to “boomerang,” a term for getting rehired.

Mullenweg said that 159 people, or 8.4% of the workforce, took the offer while the 91.6% who opted to stay turned down a collective $126 million.

Mullenweg concluded by saying, “now I feel much lighter.”

“I’m grateful and thankful for all the people who took the offer, and even more excited to work with those who turned down $126M to stay,” Mullenweg wrote. “As the kids say, LFG!”

Mullenweg may be openly enthusiastic and grateful for the employees he still has on board, but the WordPress community is a mess. Many WP Engine customers are suffering, and Automattic is gearing up for a legal fight against a private equity firm with over $100 billion in assets.

WATCH: An open-source future

AI's Open-Source Future

Continue Reading

Technology

Google’s new AI model puts OpenAI, the great conundrum of this market, on shakier ground

Published

on

By

Google's new AI model puts OpenAI, the great conundrum of this market, on shakier ground

Continue Reading

Technology

Americans are holding onto devices longer than ever and it’s costing economy

Published

on

By

Americans are holding onto devices longer than ever and it's costing economy

If you are holding onto your aging printer or cracked smartphone longer than you had planned, you are not alone.

Heather Mitchell, 69, retired and living in Tucson, Arizona, is content with her phone even though it is old by smartphone standards.

“My Samsung Galaxy A71 is six-years-old. It’s hanging in there surprisingly well for a jalopy. I’ve had issues with it, and still do, but they are minor,” said Mitchell. “I love Samsung phones, but can not afford a new one right now. A new phone would be a luxury.”

The average American now holds onto their smartphone for 29 months, according to a recent survey by Reviews.org, and that cycle is getting longer. The average was around 22 months in 2016.

While squeezing as much life out of your device as possible may save money in the short run, especially amid widespread fears about the strength of the consumer and job market, it might cost the economy in the long run, especially when device hoarding occurs at the level of corporations.

Research released by the Federal Reserve last month concludes that each additional year companies delay upgrading equipment results in a productivity decline of about one-third of a percent, with investment patterns accounting for approximately 55% of productivity gaps between advanced economies. The good news: businesses in the U.S. are generally quicker to reinvest in replacing aging equipment. The Federal Reserve report shows that if European productivity had matched U.S. investment patterns starting in 2000, the productivity gap between the U.S and European economic heavyweights would have been reduced by 29 percent for the U.K., 35 percent for France, and 101% for Germany.

Experts agree lost productivity and inefficiency are the unintended consequences of people and businesses clinging to aging technology.

“Think about how much internet speeds have changed in the past decade or more. In the 2010s, 100MB speeds were considered high speed and very good. A short 10 years later and we’re operating at 1GB speeds, which is roughly 10 times faster,” said Cassandra Cummings, CEO of New Jersey-based electronics design company Thomas Instrumentation. Operating at higher GB speeds requires different electronic hardware, and a lot of the older technology can’t handle it.

“Those devices were engineered when no one could fathom speeds that much faster would be mainstream,” Cummings said.

That can be a drain on nationwide networks as well.

“Both the cellular and internet infrastructure has to operate to be backwards compatible in order to support the older, slower devices. Networks often have to throttle back their speeds in order to accommodate the slowest device,” Cummings said. “Often entire sections of networks or company internal networks are running slower than they would if all devices were up to the newer standards,” she added.

Cummings doesn’t deny that staying up to date with new devices and hardware is expensive.

“Many companies, especially small businesses, and individual people can’t afford to constantly upgrade to the latest and greatest devices,” she said.

To ease the transition to new technologies, she says there should be designs that are repairable or modular rather than the constant purge and replace cycles. “So perhaps future devices can have a partial upgrade in say ethernet communications rather than forcing someone to purchase an entirely new computer or device,” Cummings said. “I’m not a fan of the throw-away culture we have these days. It may help the economy to spend more and force upgrades, but does it really help people who are already struggling to pay bills?” she said.

Indeed, entrepreneurs in the device resale market see the longer-lived tech as a success story that can be improved upon. Steven Athwal, CEO of the UK-based The Big Phone Store — which specializes in refurbished phones — says devices longevity is not the problem. “The issue is the lag. Businesses and individuals are trying to squeeze modern workloads out of old hardware, heavy processing, rendering, generation, and admin, and that creates a productivity drag. Things like slow processors, outdated software, and degraded batteries on older tech waste energy and morale,” Athwal said.

He adds that when people hold onto their phones or laptops for five or six years, the repair and refurbishment market becomes an active part of the economy. But right now, in both European, American, and global markets, too much of that happens in the shadows.

“It’s unregulated, underreported, and underutilized. If governments and big tech supported refurbishment properly, aging devices could become part of a sustainable circular economy,” Athwal said, improving the second-hand cycle by extending software support, improving access to parts, and treating repair as infrastructure.

“That’s how you disable constant replacement. No need to constantly push upgrades, which financially strains both small and large businesses alike,” Athwal said.

Still, some device manufacturers have found ways to entice consumers to ditch their older phones for newer ones. For instance, Apple just had one of its most successful new launches with the iPhone 17, and artificial intelligence could be a game-changer.

Najiba Benabess, dean of the business school at Neumann University, says rising prices and sustainability concerns are among reasons “America’s gadgets are aging out,” but the market should be focused on slowing productivity, increasing repair and maintenance expenses, and limited access to software updates and efficiency gains.

“Small businesses, in particular, lose valuable hours each year due to lagging systems, creating what economists call a ‘productivity drag,'” Benabess said. On a national scale, this translates to billions of dollars in lost output and reduced innovation. “While keeping devices longer may seem financially or environmentally responsible, the hidden cost is a quieter erosion of economic dynamism and competitiveness,” she added.

Most people still want the newest and most up-to-date phones and tablets, according to Jason Kornweiss, senior vice president of advisory services at Diversified, a global technology solutions provider, but research does show a widening gap between businesses and individuals when it comes to aging devices.

“Corporations with hundreds or thousands of people are not investing at the same rate,” Kornweiss said, adding that technology is changing so fast IT departments can’t keep up with the pace and that bloated corporations need to vet the newest technology, which takes time, and by the time they do the vetting, something new has arrived anyway. The result: businesses with increasingly long-in-the-tooth technology.

“Businesses establish shelf-life that is multi-year. Employees look at replacing devices within an organization as too tedious and people cringe when the IT department comes with a new device,” Kornweiss said, even when it is a meaningful upgrade, he added.

The price to the organization is then paid in lack of productivity, inability to multitask and innovate, and needless, additional hours of work that stack up. Workplace research conducted by Diversified last year found that 24% of employees work late or overtime due to aging technology issues, while 88% of employees report that inadequate workplace technology stifles innovation. Kornweiss says he doesn’t expect there’s been any improvement in those numbers over the past year.

There’s a disconnect between the numbers and behavior. Many workers report that aging devices stifle productivity, but like a favorite pair of shoes or an old sweater, they don’t want to give them up to learn the intricacies of a new device (which they’ll learn and then have to replace with another). Familiarity can trump productivity for many workers. But the result of that IT clinginess is felt in the bottom line.

“Productivity is hampered and it all has a tangible impact on the economics,” Kornweiss said.

The biggest commodity a worker has is time, he says, and older devices gobble that up. Bring-your-own-device (BYOD) policies can be a savior for businesses slow to upgrade, with individuals using their own more functional devices easily able to integrate into most workplace systems these days, Kornweiss said. Another option for companies that don’t want to buy a bunch of quickly dated devices is to lease.

Kornweiss sees a future where technology continues to advance at warp speed and companies will continue to have trouble keeping up. And individuals like Heather Mitchell will continue to hang on to their devices.

“I tend to hang onto my phone until I have no choice in the matter. In 26 years, this is only my fifth phone,” Mitchell said.

Continue Reading

Technology

More companies are shifting workers to passwordless authentication

Published

on

By

More companies are shifting workers to passwordless authentication

It’s safe to say that no one is crazy about passwords. For chief information security officers, there’s the nightmare of employees leaving lists of passwords on their desks or putting them on Post-it notes on their computers. For workers, there’s the inconvenience of having to enter multiple passwords to gain access to various devices and resources.

Passwordless authentication technology is designed to address these issues, and use of these tools is on the rise. A recent survey of 200 CISOs by Wakefield Research, sponsored by security vendor Portnox, showed that a significant majority (92%) of the security leaders said their organizations had implemented or were planning to implement passwordless authentication. That’s up from 70% in 2024. CISOs cited improved employee productivity and enhanced user experience as the top benefits.

Passwordless authentication verifies user identity without the need for traditional passwords, through alternative methods such as hardware tokens, biometrics, or mobile push notifications. It offers potential benefits such as enhanced security and improved user experience.

Training services provider Universal Technical Institute has begun using a passwordless platform from Microsoft, “and as we expand adoption, the benefits show up quickly, with fewer password resets, fewer service desk tickets, and a faster start to the day,” said Adrienne DeTray, senior vice president and CIO at the company.

“The bigger impact is cultural,” DeTray said. “It shows that we’re serious about making technology feel lighter and more human again. Over the years, we’ve added so many systems and logins that the weight of technology has become part of the work. This is one of those steps that helps remove that administrative drag and makes the ecosystem feel more seamless and connected.”

It’s not just about security, DeTray said, but user experience as well. “Every password reset or lockout slows people down and chips away at their focus,” she said. “Passwordless takes that friction out of the day and gives people time back. It’s part of designing a connected ecosystem where security and usability work hand in hand.”

MFA losing status as ‘gold standard’ cybersecurity

R Systems International, a provider of digital product engineering services, is in the midst of a phased migration to a passwordless environment, said CTO Srikara Rao. “For us, this isn’t about chasing a trend, it’s a direct response to the fact that our previous gold standard, multi-factor authentication, is showing its age,” Rao said. “The threat landscape has evolved past what traditional MFA can handle.”

R Systems’ decision to make the move is driven by both security and business enablement factors. “Credential-based attacks remain the top threat vector, with a significant rise in phishing attempts and several near-miss incidents underscoring the urgency to act,” Rao said. “We want to promote solutions within our organization that are phishing resistant.”

On the operational side, password resets have become quite expensive, Rao said. Resets can be costly due to direct labor expenses and significant indirect costs such as lost employee productivity and IT resource drain. Research firm Forrester estimates that a single password reset can cost $70, and this can add up quickly for large enterprises.

In addition, it’s critical that the company adhere to compliance requirements such as PCI 4.0, which mandates that users reauthenticate everything they restart or access. “Passwordless authentication will make it seamless,” Rao said. “And finally, as we compete for top tech and cybersecurity talent, being a passwordless enterprise signals that we’re a forward-thinking, security-first organization.”

Bring-your-own-device policies are a factor

Health-care services provider Diversus Health is also moving to passwordless authentication, using the technology in the form of certificate-based network access control.

“Due to recently adopting a bring-your-own-device policy, our internal annual HIPAA compliance audit detected lack of network access control as one of our high-risk threats,” said Neil Ford, IT security administrator. “So, we began looking into solutions that could be used to mitigate the threat.”

Diversus Health earlier this year deployed a system from Portnox that uses certificate-based authentication to verify the identity of devices. “We deploy the certificate through a cloud-based endpoint management solution, so verification with Portnox is transparent to staff,” Ford said.

The solution has effectively mitigated the threat of unknown devices connecting to the company’s network and being able to access internal resources, Ford said.

One of the keys to a successful adoption of passwordless authentication is to effectively communicate the security change with staffers. “Employees are overcoming decades of password muscle memory and addressing legitimate user anxiety about ‘what if I lose my device?’ is critical,” Rao said. “We learned quickly that we had to sell the ‘why’ to our employees.”

Enterprises need to frame passwordless authentication not as another security mandate, but as a direct benefit to employees through less frustration, faster logins, and the elimination of password resets, Rao said. Before making the shift, R Systems ran small, interactive training sessions to get people comfortable with access tools such as fingerprint identification on their phones.

“I cannot stress enough the importance of organizations providing user education,” Rao. “It’s a significant difference between a successful deployment and a shelfware investment.”

R Systems passwordless strategy isn’t tied to a single vendor, but built on FIDO2 and WebAuthn open standards, “giving us flexibility to choose the right tool for each risk profile,” Rao said. “Privileged users such as administrators, developers, and executives use FIDO2 hardware security keys, while the broader workforce relies on passkeys integrated with device biometrics like Windows Hello and Face ID.”

The company is still evaluating the results of the transition to passwordless authentication and working to ensure that it works best for everyone.

“We’ve seen our employee experience improve dramatically, with faster logins and a significant reduction in password-related help desk tickets,” Rao said. “Most importantly, passwordless authentication has become a cornerstone of our zero-trust architecture, giving us a stronger, high-assurance identity layer that enables secure access regardless of user or device location.”

Continue Reading

Trending