Talking Drupal Newsletter #396
#396 Drupal Security
Today we are talking about Drupal Security with Mark Shropshire & Benji Fisher.
Topics
Why do you care about security
Best tips for securing Drupal
Common Security Issues people have with Drupal
Convincing module maintainers to do full releases
Testing to ensure security
Guardr Drupal security distribution
What does the Drupal Security team do
Finding issues
Review compromised sites
Becoming a member
Process for writing security notices
Helping the security team
Resources
Passwords:
Discussed at this BadCamp talk - Sleep Better at Night with a Secure Drupal Site
Benji’s talk introducing the OWASP Top Ten
Sam Mortenson talk
Guests
Benji Fisher - tag1consulting.com @benji17fisher
Mark Shropshire - shrop.dev @shrop
Hosts
Nic Laflin - www.nLighteneddevelopment.com @nicxvan
John Picozzi - www.epam.com @johnpicozzi
Jordan Graham - @jordanlgraham
Module of the Week
Martin Anderson-Clutz - @mandclu
CrowdSec
Integrates your Drupal site with the open source CrowdSec Security Engine, a collaborative malicious activity detection and remediation tool.
Upcoming Episodes
#398 D9 Book with Selwyn Polit. Recording May 2.
#399 Jordan’s Show. Recording May 9.
#400 400 with Dries Buytaert. Recording May 16.
#401 Data Lakes with Melissa Bent and April Sides. Recording May 23.
Submit your questions on the #talkingDrupal channel on Drupal Slack or DM us on twitter @talkingdrupal.
Drupal Camps
DrupalCamp Finland 04/28. In person
Stanford WebCamp 05/11 - 05/12. Online
DrupalCamp Ruhr 2023 05/12 - 05/13. In person
DrupalCamp Poland 2023 05/13 - 05/14. In person
DrupalSouth Wellington 05/17 - 05/20. In person
Drupaljam 2023 :connected 06/01 - 06/02. In person
DrupalCamping Wolfsburg 06/15 - 06/19. In person
Local Meetups
Drupal Zurich Meetup - Ting, AI-Powered Search-Indexes & Splash Awards 2023 04/28. In person
Drupal Meetup Bangalore - April 2023 04/29. In person
Drupal Somerset May-23 05/09. In person
Brisbane meetup May’23 05/10. In person
Drupal Melbourne meetup - May 2023 05/11. Online
SFDUG - Technical Writing Workshop 05/11. Online
Training
Code of Conduct Incident Response Workshop 06/14. Online
Drops of Drupal
Small Drupal tips and tricks by StephenCross
#008 Drupal.org URL Shortener
dgo.re is a url shortener for Drupal.org. For example:
Projects
http://dgo.re/pathauto
takes you to https://www.drupal.org/project/pathauto
Issues
http://dgo.re/i/pathauto
takes you to https://www.drupal.org/project/issues/pathauto
Also available are shortcuts for Git Repositories, Project Docs, API, Sandboxes, Nodes, Comments, Users, and Groups.
Read more at https://dgo.re
Minifigure of the Week
by Nic Laflin
71037-6
This week I would like to share 71037-6 T-Rex Costume Fan! This is the 6th figure in Series 24 of collectible minifigures. This figure represents the blow-up trex Halloween costumes. It came with an extra tail for other figures!
Contact Us
@talkingdrupal on Twitter
#talkingdrupal on Drupal Slack