Issue 335 - April, 19th 2018

News

DrupalCon Seattle 2019

Seattle, Washington, April 8-12, 2019.

DrupalCon Minneapolis 2020

Minneapolis, Minnesota, May 18-22, 2020

Drupal Core - Highly Critical - Public Service Announcement - PSA-2018-002

"This Public Service Announcement is a follow-up to SA-CORE-2018-002 - Drupal core - RCE. This is not an announcement of a new vulnerability. If you have not updated your site as described in SA-CORE-2018-002 you should assume your site has been targeted and follow directions for remediation..." in this post.

From Our Sponsor

DrupalCon

DrupalCon Nashville 2018: Driesnote

Dries Buytaert: State of Drupal Presentation (April 2018)

More info and slides for the Driesnote from DrupalCon Nashville.

DrupalCon Nashville 2018: Executive Summary

High level summary of DrupalCon Nashville from Mediacurrent's Dave Terry.

Decoupled Drupal Hard Problems

Great look at some of the pain points in a decoupled project as well as some of the solutions for some of them.

Shifting UX to the Editorial Experience

Some nice tips on to improve your Drupal site's admin experience.

Building "cooperative" APIs with HTTP/2

JavaScript and Accessibility: Don't Blame the Language

A very cool talk for designers and developers alike. Sadly the recording has some audio issues but the slides are available.

Build Banging Sites with BPM: Bricks, Paragraphs and Modifiers

Weather.com's Project Moonracer - Decoupled User Interfaces

Cracking the Shell: Command-Line for the Drupaler

Shameless plug for my own presentation. Had a lot of fun sharing some command-line fu. The last 20 minutes of the talk were cut off but I'm hopeful that will be fixed soon.

Articles

Drupal SA-2018-002 Weaponized: Coin Mining Exploits in the Wild

Josh Koenig explains how attackers are exploiting Drupal SA-2018-002 to mine crypto-currencies on target servers as well as how Pantheon addressed the attacks for their customers.

Acquia Blocks 500,000 Attack Attempts for SA-CORE-2018-002

Dries Buytaert shares some stats on the recent attacks on Acquia hosted Drupal sites.

Hackers Start Exploiting Drupalgeddon2 Vulnerability

Security Vulnerabilities Affect Your Dev Sites Too

Did you update your sites for SA-CORE-2018-002? No really, did you update _all_ of them? You may be at risk!

Uncovering Drupalgeddon 2

A look at how attackers are able to exploit the recently discovered Drupal vulnerability.

An Overview of March Global Training Days

Drupal, the Fastest - Improving the Evaluator Experience

Jeff Geerling discusses the fast ways to get Drupal up and going for testing.

Should Drupal's Installer Be Tailored Towards the Enterprise?

Tim Millwood shares thoughts about the Driesnote and Drupal's installation experience.

What's in the Drupal 8 Roadmap?

Steve Burge provides a nice summary of the D8 roadmap laid out by Dries Buytaert at DrupalCon Nashville last week.

Tutorials

Differentiate Websites Using Environment Indicator in Drupal 8

Web Development Workflows Simplified

It is DRUD Tech's mission to create a faster, better, simpler, and more reliable web development workflow.

Projects

Jsdrupal/drupal-Admin-Ui-Demo: Quick and Easy Composer Project for Testing Out the New Admin UI in Drupal

Jsdrupal/drupal-Admin-Ui: V Fancy ⬅️✌️➡️

The React based admin UI for Drupal. Still early days but it is very promising.

Releases

Devel 7.x-1.6

field_permissions 8.x-1.0-Rc1

file_entity 7.x-2.20

Iframe 7.x-1.9

Iframe 8.x-1.9

Media 7.x-2.18

Media 7.x-3.0-Rc4

page_manager 8.x-4.0-Beta3

Panelizer 8.x-4.1

Panels 8.x-4.3

search_api 8.x-1.8

Views 7.x-3.20

Warden Release 1.3.0

Podcasts

Talking Drupal #167 - Update from DrupalCon