David Jardin

web developer, open source enthusiast, Joomla!holic, Joomla! security teamlead / Fediverse: @[email protected]

[David Jardin @SniperSister]

@gothburz @ITSecurityguard I see, so NAs assign many CVEs but can’t deliver the quality that’s needed. As I’m managing the CNA for @joomla: anything that we as a NA can do to make your life easier?

[David Jardin @SniperSister]

@DocOnco Oktober 2020 metastasiertes Nicht-Seminom, OP, 3 Zyklen PEB, danach growing teratoma und RLA. Jetzt seit 4,5 Jahren krebsfrei. Im August 2022 dann Hodgkin bei meiner Partnerin, 4 Zyklen Beacop esk., seitdem krebsfrei. Es ist unglaublich, was Medizin leisten kann.

[David Jardin @SniperSister]

@Dr_Rainer_Kraft @MMittermeier Fragen Sie aus polemischen Gründen? Oder weil ihnen der Unterschied zwischen den Anlagetypen nicht klar ist? Spoiler: Sie sehen einen Widerspruch der keiner ist.

[David Jardin @SniperSister]

@DuaneStorey @joomla Ping me if you have any questions. I’ve co-authored the Joomla integration and have plenty of learnings to share.

[David Jardin @SniperSister]

@DuaneStorey @joomla 3rd party devs could either host their own TUF repo or you run the repo as part of the extension directory. Local information (either root key for own repo or path for centralized repo with delegations) could be stored on initial install of a plugin.

[David Jardin @SniperSister]

@DuaneStorey Take a look at https://t.co/nnDp6oaM3R - it’s a complete framework for secure software updates and @joomla uses it for core updates

[David Jardin @SniperSister]

@lokfuehrer_tim Hab mein Büro am Bf West, sehe die Erzzüge täglich vorbei schleichen. Jetzt weiß ich warum ;) Danke!

[David Jardin @SniperSister]

Reminder: there are no winners in a nuclear war. #wpdrama #wpengine #WordPress

[David Jardin @SniperSister]

@bennimack @elisasophia Missing you all too! Have a great event, wish you tons of fun and lots of good talks!

[Joomla! @joomla]

Joomla has been named among the 7 Best Content Management Systems of 2024 by Forbes! Recognised for its robust features and user-friendly design, making it the best choice for new developers.
https://t.co/JwkVPy7r4h
#Joomla #CMS #WebDevelopment #Forbes #BestCMS2024

[David Jardin @SniperSister]

@basicjoomla I don’t agree with that statement in the general way that it had been made here. Htaccess works fine for most headers, however configuring a strict CSP with hashes / nounces (that’s the part with the biggest security benefit) won’t work via htaccess.

[David Jardin @SniperSister]

Freiheit, Demokratie und Grundwerte gegen die verteidigen, die sie abschaffen wollen. #fckafd #K2101 #koeln #AfDsindFaschisten

[Volksverpetzer 🇪🇺🇺🇦🏳️‍🌈 @Volksverpetzer]

"Mut zur Wahrheit“? Dann solltest du diese Zitate lesen und ernst nehmen. Von Personen, die selbst in der #AfD waren. Aber jetzt ausgestiegen sind, weil diese Partei immer mehr zur reinen #Neonazi-Partei wird. Überzeug dich selbst. Teilen! #München #Correctiv #München

[JandBeyond @jandbeyond]

Ticket shop for #JAB24 is open book as long as they are hot #joomla

[David Jardin @SniperSister]

@bzz0 @sulpher Interesting :) didn’t know that, thanks for the hint!

[David Jardin @SniperSister]

@sulpher You are mixing “morally wrong” and “illegal”. JED-listed extensions have to be fully GPL-compliant, mixed licensing is disallowed. So, redistribution is perfectly legal.

[David Jardin @SniperSister]

@sulpher It’s morally questionable, no doubt - but it’s not illegal.

[David Jardin @SniperSister]

@sulpher Don’t get me wrong, I’m not supporting their actions at all, as it hurts the ecosystem and downloading extension from untrusted sources can cause security issues - BUT: how can these extensions be stolen? At the first glance it looks like most of them are GPL-licensed?