Over the past few years, implementing security properly has become a big issue for software applications of all stripes, including open source applications and platforms. That's why I noted with interest a couple of blog posts on the topic from leaders behind two high-profile open source projects: Firefox and Drupal. In a piece called
Learning From Mozilla Security on InternetNews, Jonathan Nightingale of Mozilla's security team, who has the title Human Shield, provides some instructive examples of the lengths Mozilla goes to to keep Firefox secure (and security is the reason some people use the browser). Meanwhile, Dries Buytaert, founder of the open source
Drupal content management system,
has a post up on strategic steps he wants to put in place for a security team to police Drupal and its many modules.?
