Today we are talking about Drupal Security with Mark Shropshire & Benji Fisher.

For show notes visit:
www.talkingDrupal.com/396

Topics

• Why do you care about security
• Best tips for securing Drupal
• Common Security Issues people have with Drupal
• Convincing module maintainers to do full releases
• Testing to ensure security
• Guardr Drupal security distribution
• What does the Drupal Security team do
• Finding issues
• Review compromised sites
• Becoming a member
• Process for writing security notices
• Helping the security team

Resources

• How to Join the Drupal Security Team
• How to get involved
• Passwords:
  • xkcd
  • Spaceballs
• Discussed at this BadCamp talk - Sleep Better at Night with a Secure Drupal Site
• OWASP
• OWASP Zap baseline
• Benji’s talk introducing the OWASP Top Ten
  • Current
  • Other versions
  • Source code (markdown)
• Github repo building and testing guardr
• Sam Mortenson talk
  • https://drupal.slack.com/archives/C1DD80ZKM/p1550697032017600
  • https://drupal.tv/external-video/2018-02-06/how-write-insecure-drupal-8-code
• Guardr core

Guests

Benji Fisher - tag1consulting.com @benji17fisher
Mark Shropshire - shrop.dev @shrop

Hosts

Nic Laflin - www.nLighteneddevelopment.com @nicxvan
John Picozzi - www.epam.com @johnpicozzi
Jordan Graham - @jordanlgraham

MOTW

Correspondent

Martin Anderson-Clutz - @mandclu
CrowdSec
Integrates your Drupal site with the open source CrowdSec Security Engine, a collaborative malicious activity detection and remediation tool.

Today we are talking about Accessibility from the sales process to delivery with Kat Shaw.

For show notes visit:
www.talkingDrupal.com/395

Topics

• Where does Accessibility (A11y) begin
• What are the A11y levels
• Who should be thinking about A11y
• How do you research a solution for A11y
• What tools do you use
• What are the biggest struggles with selling A11y
• A11y and regulations
• Selling A11y only projects
• Ensuring delivery
• Ensuring support after launch
• Future of A11y 2.2 and 3.0

Resources

• GAAD
• Tools
  • Axe Devtools
  • ARC toolkit
  • Colorblindly
  • Webaim color checker
  • Webaim link contrast checker
  • Paciello group color checker
• Dominoes
• Screen readers
  • Narrator
  • Orca
  • NVDA
  • Voiceover
• How cool accessibility tools can make your life easier

Hosts

Nic Laflin - www.nLighteneddevelopment.com @nicxvan
John Picozzi - www.epam.com @johnpicozzi
Kat Shaw - drupal.org/u/katannshaw @katannshaw

MOTW

Correspondent

Martin Anderson-Clutz - @mandclu
Gesso
A Sass-based, Webpack-based, and Storybook integrated accessible starter theme.

Today we are talking about Open Source in K-12 Education with Stu Keroff.

For show notes visit:
www.talkingDrupal.com/394

Topics

• What is the Penguin Corp
• Why is Open Source important
• How can educators bring open soiurce to their classroom
• How difficult is it to change from closed to open source
• What are some resources
• Youtube Channel
• Hurdles to introducing open source
• Types of software you’ve introduced
• Sourcing hardware
• What to say to the question: Why is this important?
• Video games
• Statistics
• Homeschooling
• How to help

Resources

• TD 329 Penguin Corps
• H5P Examples
• H5P Github
• Linux Professional Institute: Clubs Program
• The Linux Club Guide
• Open source north
• Open source jobs report
• Gcompris
• Audacity
• Kdenlive
• Veronica explains
• The linux experiment
• Youtube Channel
• openshot
• gnucash
• SEH architectural
• Caribou coffee

Guests

Stu Keroff - @studoeslinux

Hosts

Nic Laflin - www.nLighteneddevelopment.com @nicxvan
John Picozzi - www.epam.com @johnpicozzi
Kat Shaw - drupal.org/u/katannshaw @katannshaw

MOTW

Correspondent

Martin Anderson-Clutz - @mandclu
H5P
Provides a toolset for adding HTML5 rich content to your site: interactive videos, presentations, quizzes, games, and more.

Today we are talking about Drupal & JavaScript with Andy Blum.

For show notes visit:
www.talkingDrupal.com/393

Topics

• Talk at FLDC
• Important Drupal JS features
• Drupal behaviors
• Why use JS
• Users with no JS
• jQuery
• Front end framework
• Bigpipe
• JS components single folder components
• Future of JS in Drupal

Resources

• DrupalCon Pittsburgh training
• Top-10 libraries slides
• Drupal JavaScript Modernization Initiative
• Drupal issue to replace jQuery with vanilla JS
• What is bigpipe?
• Bigpipe in Drupal
• State of JS 2022
• Talking Drupal 386 - Drupal Vs Wordpress
• Devel accessibility tool devel_a11y
• Bigpipe when it was first added showing the contrast between bigpipe and no bigpipe John’s Talk at FLDC
• Nic’s Talk at NERD Summit

Guests

Andy Blum - @andy_blum

Hosts

Nic Laflin - www.nLighteneddevelopment.com @nicxvan
John Picozzi - www.epam.com @johnpicozzi
Kat Shaw - drupal.org/u/katannshaw @katannshaw

MOTW

Correspondent

Martin Anderson-Clutz - @mandclu
Real-time SEO for Drupal
Provides content authors immediate feedback about how optimized their content is against specific keywords.