Security

D6LTS wind down and D7 extension with Tim Lehnen

lynette@tag1consulting.com — Wed, 18 May 2022 11:26:28 +0000

The last two years have been eventful for most of us, and the Drupal community is no exception to that. From the shift to online DrupalCons and their return to in person this year, to new releases of Drupal and the revisiting of old ones, it’s been a momentous time. Drupal 7 was originally scheduled to reach end of life (community support) in November of 2021.

lynette@tag1co… Wed, 05/18/2022 - 04:26

Drupal Security and Drupal end of life, with Michael Hess: Part 2

lynette@tag1consulting.com — Wed, 20 Oct 2021 13:44:28 +0000

The end of life for Drupal 7 (Nov 2022) and Drupal 8 (Nov 2021) is no surprise to anyone who’s been using Drupal. But what happens to websites who still want or need to run these older versions - especially Drupal 7? Does the Drupal security team really not have anything to do with end of lifed versions of software?

lynette@tag1co… Wed, 10/20/2021 - 06:44

Get to know the Drupal Security Team with Michael Hess: Part 1

lynette@tag1consulting.com — Tue, 12 Oct 2021 13:59:40 +0000

Drupal’s Security Team has been one of the most critical and long-lasting sub-groupings throughout the entire existence of Drupal as an open source project. This team of volunteers evaluates, processes, and reviews security reports and fixes, helping to ensure that Drupal as a project maintains its status as highly secure software. In this Tag1 Team Talk, Tag1 Managing Director Michael Meyers is joined by Drupal Security Team member Michael Hess. In this installment, they will talk about what the Security Team does, who does it, and how. They will also differentiate between the Security Team and the Working Group, and how their responsibilities overlap but are not the same. If you’ve ever reported a security issue, or wondered how security reports are handled, this talk explains it all. And if you’ve ever considered joining the Drupal Security Team, get the inside scoop on how that happens, here. Click here for Part 2 --- ### Additional Links - Drupal core release cycle: major, minor and patch releases - [The Open Web Applications Security Project (OWASP) developed the list of Top 10 Security Vulnerabilities](http://tag1.com/OWASP "The Open Web Applications Security...

lynette@tag1co… Tue, 10/12/2021 - 06:59

Serenity Notes: End-to-End Encrypted Collaborative Notes

lynette@tag1consulting.com — Wed, 15 Sep 2021 13:06:51 +0000

Serenity Notes is a new application that enables you to collaborate on Notes across devices, with multiple users, in real-time, using end-to-end encryption to keep all your data and info private and secure. It has a game changing SDK enabling the addition of e2e real-time collaboration to your applications, without the complicated underlying complexities. In this Tag1 Team Talk, Managing Director Michael Meyers interviews Nik Graf, the founder of Serenity Notes. Nik has worked for and with Tag1 on many occasions, and is a regular guest on our Tag1 Team Talks program. He’s also a regular contributor to open source projects, as an organizer of ReasonConf, a board member of the ReScript Language Association, and the co-creator of DraftJS Plugins, along with many other projects. For a transcript of this video, see Transcript: Serenity Notes - End-to-End Encrypted Collaborative Notes. ## Additional resources * matrix.org End-to-End Encryption implementation guide * https://www.reason-conf.com * ReScript Language Association * DraftJS Plugins * A Deep Dive Into End To End Encryption (E2EE) in Yjs - Part 1 * A Deep Dive Into End To End Encryption (E2EE) in Yjs - part 2 Photo by Kelly Sikkema...

lynette@tag1co… Wed, 09/15/2021 - 06:06

Automating Infrastructure with EKS and Pulumi: Deploying New Enterprise Web Applications in Minutes - Part 1

lynette@tag1consulting.com — Wed, 21 Apr 2021 18:26:12 +0000

Today’s business reality is nearly every company needs at least one website in order to be successful in their business. As organizations get larger, the number of websites companies need also increases. From Human Resources, to sales support, to customer service and support, different groups in your organization may have some similar needs, but different access levels. Making these websites turnkey can reduce the amount of time your IT or devops teams need to spend standing up resources. It can also significantly reduce development costs when you have a deployable website instance that can be used to fulfill the needs of several organizations in your company. In this first part a two part series, Tag1 Managing Director Michael Meyers talks with CIO Jeff Sheltren, and Senior Infrastructure Engineer Travis Whitehead about the challenges large enterprises face, and the software-based solutions Tag1 is using to help our customers be more successful with standardized website deployments. ### Additional resources - EKS - Pulumi For a transcript of this video, see Transcript: Deploying New Enterprise Web Applications in Minutes - Part 1. Photo by Amir Hanna on Unsplash

lynette@tag1co… Wed, 04/21/2021 - 11:26

A Deep Dive Into End To End Encryption (E2EE) in Yjs - part 2

lynette@tag1consulting.com — Mon, 19 Apr 2021 14:30:18 +0000

There are significant challenges in implementation of E2EE protocols, from who handles the security, to ensuring all participants can access the same data. E2E encryption introduced lots of challenges for history snapshots and what it means for Tombstones. Multiple types of encryption: local, using keys, and end to end all have different implementations and implications when using a collaborative app - especially a decentralized one.

lynette@tag1co… Mon, 04/19/2021 - 07:30

A Deep Dive Into End To End Encryption (E2EE) in Yjs - Part 1

lynette@tag1consulting.com — Mon, 05 Apr 2021 14:21:42 +0000

In today’s electronically driven communication world, data security is no small matter. What’s safe? Who do you trust? Who else can access your data, and do you even know who those people or companies are selling it to?

lynette@tag1co… Mon, 04/05/2021 - 07:21

Drupal 7 Extended Support From Tag1

lynette@tag1consulting.com — Mon, 18 Jan 2021 17:07:12 +0000

Tag1 Consulting is proud to announce that it has been selected by the Drupal Association and Drupal Security Team as an approved member of the Drupal 7 Extended Support (D7ES) Program. Drupal 7 end-of-life is November 2022, and the Drupal security team is partnering with a few select vendors with the demonstrated expertise to provide security and maintenance support to ensure that orgs using D7 can continue to run it, well into the future. Tag1 Consulting is one of the all time leading contributors to Drupal, and one of only two companies currently offering Drupal 6 Extended Support. We have a proven track record, and over 5 years of experience enabling orgs to maximize the lifespan and return on investment in Drupal - we helped pioneer the model for Drupal Extended Support. When Drupal 7 reaches its end of life, the community will no longer be providing updates, security fixes, or enhancements. Tag1 helps Drupal 7 and Drupal 6 websites stay up to date with its Tag1 Quo subscription product and service offering. Tag1 Quo is unique in providing you with a dashboard, enabling you to see exactly what security and maintenance issues need work, from urgent down to minor...

lynette@tag1co… Mon, 01/18/2021 - 09:07

Drupal 7 extended support- Pt. 2: An overview of the Tag1 Quo Drupal 7 extended support service & how it works. - Tag1 TeamTalk #028.2

preston — Wed, 11 Nov 2020 16:30:19 +0000

Tag1 Quo, Tag1's extended support service for Drupal, offers you peace of mind when it comes to receiving all of the important security updates that Drupal 7 Extended Support (D7ES) vendors maintain. But Tag1 Quo goes well beyond the minimum requirements of the D7ES program, because we cover all of your contributed modules and notify you right away of security patches that need your attention.

preston Wed, 11/11/2020 - 08:30

Drupal 7 Extended Support: What you need to know and how Tag1 can help, Pt. 1 - Tag1 TeamTalk #028.1

preston — Thu, 05 Nov 2020 02:02:11 +0000

Drupal has undergone a huge amount of innovation as of late, and the latest versions of Drupal portend an amazing future ahead for our community and ecosystem. But what happens when official community support for older versions, especially Drupal 7, ends? After all, Drupal 7 is among the most widely adopted versions of Drupal in the CMS's entire history, and it continues to have enduring staying power in the Drupal universe. Fortunately, Tag1 Consulting is among the vendors who will provide Drupal 7 extended support even past its end-of-life date.

preston Wed, 11/04/2020 - 18:02