OStatic

Over the past few years, implementing security properly has become a big issue for software applications of all stripes, including open source applications and platforms. That's why I noted with interest a couple of blog posts on the topic from leaders behind two high-profile open source projects: Firefox and Drupal. In a piece called Learning From Mozilla Security on InternetNews, Jonathan Nightingale of Mozilla's security team, who has the title Human Shield, provides some instructive examples of the lengths Mozilla goes to to keep Firefox secure (and security is the reason some people use the browser). Meanwhile, Dries Buytaert, founder of the open source Drupal content management system, has a post up on strategic steps he wants to put in place for a security team to police Drupal and its many modules.?

Dries Buytaert, founder of the Drupal content management system, and co-founder of Acquia (which offers a commercially supported version of Drupal), is out with some remarkable statistics, here, and here. If you're unfamiliar with Drupal, it is a powerful open source content management system, and OStatic runs on it, as do many other sites, including Fast Company and The Onion. According to the latest data from Dries, based on the growth of the platform, there will be over 240,000 sites running on Drupal 6 by January of 2010, and that's up from fewer than 5,000 in July of 2008. Here are some more milestones for Drupal.