Issue 163 - November, 6th 2014

News

Drupal Core - Highly Critical - Public Service Announcement - PSA-2014-003

"This Public Service Announcement is a follow up to SA-CORE-2014-005 - Drupal core - SQL injection. This is not an announcement of a new vulnerability in Drupal." If you read my newsletter every week you already knew about this and should have already taken action.

Next Steps for the Drupal.org Terms of Service and Privacy Policy

Strategic Initiatives for Drupal.org in 2015

A road map for Drupal.org. The more I hear Josh Mitchell talk about Drupal.org the better I feel about it's future.

From Our Sponsor

Articles

Stay for the Community

Greg Dunlap (heyrocker) thoughtfully discusses the invisible structure at work in the Drupal project. Everyone who cares about the Drupal community should read this. "Drupal exists for us, and not vice versa. Drupal doesn’t change the world. You do."

2 Years Later: My Experience as a Drupal Initiative Lead

Jacine Luisi was the HTML Initiative Lead for Drupal 8 and her experience is worth reading about. I appauld here frankness in sharing her story.

8 Things to Know About the Drupal Security Issue

As usual Steve Burge does a great job synopsing the information arount Drupal security issue over the past few weeks.

A Lesson in Security

Noted PHP numinary Anthony Ferrara discusses emulated prepared statements in relation to the recent Drupal security issues. He also praises the Drupal security team. I echo that praise.

Drupal Security: Not Shocking but Responsible

Excellent response to the rediculous BBC post about Drupal this week from Bryan Ruby.

Why Doesn't Drupal Offer an Auto Update Feature Like Wordpress?

Where Brian Lewis of Modules Unraveled askes this timely question. Personaly I don't like the idea of automatic updates but I understand the appeal of this notion.