Re: Suggestion: security fix area

Dear John,

That's excellent. I'd like to add a few more suggestions:

1 - In this days of higher hacker activities, I'd put a link on the sitemap
(blue footer) or on the "Get Plone" box (right column portlet on the first
page). It should make it easier for people to find that info.

2 - In the advisories page, there could be a "table view" for the
advisories, pointing which Plone version is affected by each vulnerability
and/or which vulnerability or which hotfix is related to each version. The
use case is a administrator that goes to the Plone site, and needs to know
if their Plone site (considering Plone version) has up-to-date security or
if it is outdated. This "query" should be easier than it is now.

3 - I dunno if this list is the best one to talk about that, but some of the
sites attacked the last few weeks are powered by Plone. There should be an
"official" statement about whether the attacks have something to do with
Plone or not.

Regards,

Alberto

On Fri, Jun 24, 2011 at 11:39 AM, Jon Stahl <[email protected]> wrote:

> There already is:
> http://plone.org/products/plone/security
>
> :jon
>
> On Fri, Jun 24, 2011 at 7:35 AM, Alberto Lopes <[email protected]> wrote:
> > Dear friends,
> > Considering that we had several security fixes the last few months, I
> > suggest an area to be created on plone.org to consolidate all of the
> > security related information on Plone.
> > Regards,
> > Alberto
> >
> ------------------------------------------------------------------------------
> > All the data continuously generated in your IT infrastructure contains a
> > definitive record of customers, application performance, security
> > threats, fraudulent activity and more. Splunk takes this data and makes
> > sense of it. Business sense. IT sense. Common sense..
> > http://p.sf.net/sfu/splunk-d2d-c1
> > _______________________________________________
> > Plone-website mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/plone-website
> > The Wiki: http://plone.org/development/current/projects/WebsiteTeam
> >
>

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a 
definitive record of customers, application performance, security 
threats, fraudulent activity and more. Splunk takes this data and makes 
sense of it. Business sense. IT sense. Common sense.. 
http://p.sf.net/sfu/splunk-d2d-c1

_______________________________________________
Plone-website mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/plone-website
The Wiki: http://plone.org/development/current/projects/WebsiteTeam