A Security Checklist for Drupal 8 Sites with Private Data

February 21, 2019

Drupal has a great reputation as a CMS with excellent security standards and a 30+ member security team to back it up. For some Drupal sites, we must do more than just keep up-to-date with each and every security release. A Drupal site with private and confidential data brings with it some unique risks. Not only do you want to keep your site accessible to you and the site’s users, but you also cannot afford to have private data stolen. This article provides a checklist to ensure the sensitive data on your site is secure.

Upcoming Live Coding Events in Minnesota and Wisconsin

November 27, 2018

The worldwide live coding community is a diverse group of people that includes programmers, academics, musicians, dancers, visual artists, and others who like to get together in person to share sounds, visuals, and ideas. Compared to some parts of the world where live coding events happen regularly, the Midwest does not have a lot of opportunities to experience live coding live. However, this week we have two live coding events within relatively close proximity.

Six Months of Tidal

November 10, 2018

I first attempted to install TidalCycles about six months ago, in May 2018. I've learned a lot in the past six months, and I'd like to share some of the knowledge I've acquired. If you are new to Tidal or you've tried it out in the past and got stuck, then this unnumbered list of observations is for you.

OpenVPN on Ubuntu 18.04

May 30, 2018

I needed to install Ubuntu 18.04 recently and I ran into some problems with OpenVPN 2.4.4 not working (it had worked fine with OpenVPN 2.4.0 from Debian stretch/stable). The errors pointed to ns-cert-type being the problem, which is indeed a deprecated option. But that led me to find suggestions to instead use remote-cert-tls server that did not help me get things working.

Drupal as a Political Act

December 9, 2016

The Drupal community can bring people together, discourage hate, and promote democracy. I hope that we can find common ground, build on what we have accomplished, and organize against the forces that seek to divide us against ourselves.

Who Sponsors Drupal Development?

September 6, 2016

Dries Buytaert and I examined commit data to help understand who develops Drupal, how much of that work is sponsored, and where that sponsorship comes from. We illustrate that the Drupal community is far ahead in understanding how to sustain and scale the project, and show that the Drupal project is a healthy project with a diverse community of contributors. Nevertheless, in Drupal's spirit of always striving to do better, we also highlight areas where the Drupal community can and should do better.

Why Paid Drupal Modules Fail: Drupal as Art

April 7, 2016

Recently the Drupal Association announced accepted sessions for DrupalCon New Orleans. While it looks like we can expect another great DrupalCon (this will be my 7th straight North American DrupalCon), one particular session on the program about the sale of Drupal modules caught my attention. Although I have tried to stay focused on preparing my own sessions, I have had conversations with other people in the Drupal community about “paid modules” that have led me to the conclusion that confusion about this topic persists. So here I would like to offer a perspective on why these kinds of plans consistently fail. Specifically, I hope to expand the scope of this frequently discussed issue and suggest why so many paid module initiatives fail: the Drupal community protects its free software with the same vigor that other communities protect artistic freedom.

Accelerated Mobile Pages (AMP): Open or closed?

April 6, 2016

The AMP project has occupied my mind quite a bit lately: not only am I one of the developers of the new AMP module for Drupal, I am also an outspoken free software advocate and host of Hacking Culture, which features in-depth interviews with open source and free software advocates. I have had to decide whether or not I think AMP represents a positive change for the open web. Although I think it is still rather early to assess the full impact of AMP, I have concluded that it is a move in the right direction.