Posted by goldieashe on November 23, 2014 at 11:51pm
Start:
2014-12-15 17:30 - 20:00 America/New_York Organizers:
Event type:
User group meeting
Where: Zone 5, Downtown Albany (See their website for directions & information http://www.zone5.com/contact-us)
When: Monday, December 15th, 5:30-8pm
What: Drupal Security (and a custom modules teaser)
Please RSVP through the sign-up button below. We'd like to let Zone 5 know how many people to expect.
Proposed/Tentative Agenda (Please submit your proposals for talks and lightening rounds in the comments below):
Possible topics:
What are your best practices?
How can we keep our Drupal environments safe?
What advantages (disadvantages) does the open source environment present?
Feel free to bring your laptop; there is wireless
A huge thank you to Zone 5 for hosting!
Comments
Security notes from NERD Camp
Howdy. I have some notes and a pdf of a NERD Camp presentation for Security - it focuses on Server settings, but I think that it could still be helpful - I did blather about this briefly before, but I can talk about it more.
Thanks Brendan!
That would be terrific! I'll touch base with you via email about details.
Going to miss
Hi guys. I had full intentions of coming tonight, but I had an outside of state work, work obligation come up. Sorry for the short notice.
sorry we missed you
Hi Chris,
Hope to see you at the next gathering - we had a great security chat and Jim C showed us the process he went through to build his custom module. We should have some resources mentioned in the comments soon!
Thanks Meredith. Tom was
Thanks Meredith. Tom was catching everyone up this morning. Good stuff. Thanks again!
Links to Drupageddon Pages
Or Drupalgeddon, depending on which variant you prefer.
** Drupal Releases
https://www.drupal.org/node/3060/release?api_version%5B%5D=103
** Drupal 7.29 Bug with JavaScript
https://www.drupal.org/node/2305017
** Drupal Security Advisory for 7.29
https://www.drupal.org/SA-CORE-2014-003
** Drupal Security Advisories for Drupal (note change in classification at SA-SORE-2014-004)
https://www.drupal.org/security
** Drupal Security Advisotry for 7.32
https://www.drupal.org/SA-CORE-2014-005
** And the PSA
https://www.drupal.org/PSA-2014-003
** Follow up about SA-2014-005
https://www.drupal.org/node/2387517
** Drush command to check for exploit
https://www.drupal.org/project/drupalgeddon
** Best description of how to remediate
http://drupal.geek.nz/blog/your-drupal-website-has-backdoor
http://www.paulbooker.co.uk/drupal-developer/code-snippet/10-commands-co...
*** Greg Knaddison's "Your Drupal Site Got Hacked, Now What?
https://www.drupal.org/node/2365547
https://github.com/greggles/cracking-drupal/blob/master/after-an-exploit.md
** The Code Change
https://www.drupal.org/files/issues/SA-CORE-2014-005-D7.patch
** Explanation of what's going on
http://mattkorostoff.com/article/I-survived-drupalgeddon-how-hackers-too...
http://flocondetoile.fr/blog/drupal-sa-core-2014-005-perspective-and-les...
https://www.acquia.com/blog/learning-hackers-week-after-drupal-sql-injec...
** Implications
http://www.newmediadenver.com/blog/coming-soon-hacked-drupal-site-near-y...
https://ohthehugemanatee.org/blog/2014/11/03/drupalgeddon-means-we-cant-...
** "Vendor" Responses
https://www.acquia.com/blog/shields
https://www.acquia.com/blog/acquias-response-october-15-drupal-security-...
https://www.getpantheon.com/blog/what-we-are-seeing-drupal-sa-2014-005
http://www.erpal.info/de/blog/how-we-automate-drupal-security-updates
** The Market Responds
http://www.drop-guard.net/
** Securing File Permissions
https://www.drupal.org/node/244924
New Member
I just wanted to say thank you to the group for being very inviting at the last meeting. I am am new to Drupal and development in general and there was a lot of great information for me to take in. Everyone was very nice and I'm looking forward to the next one!
Brett