Hi! Big news – I’m going to be spinning down Giant Robot and joining Pete Davis & the team at Fuzion as of June 2013.

Giant Robot has been a great ride, and I really appreciate the support of my clients over the decade it’s been in operation.

Fuzion is a natural fit for the work I’ve been doing the last few years, helping connect campaigning organsations and their contacts.

I look forward to having to focus less on management, and more time to deliver results for the great organisations we’re backing.

Come say hi @ http://fuzion.co.nz :)

Aegir creates Drush aliases in /var/aegir/.drush/, eg /var/aegir/example.org.alias.drushrc.php for the example.org site.

Here’s how to make those available to your non-aegir login as well.

Taxonomy Image module contained a flaw which permitted users to bypass Drupal’s protection against malicious uploads, permitting remote code execution and XSS.

CiviCRM 4.1.3 includes a fix for a security issue I recently reported, where CiviCRM incorrectly retained customer credit card data after transaction completion.

Here’s a hotfix for sites which can’t upgrade immediately, and an SQL query to identify if you’re affected.

ZipCart module before version 6.x-1.4 contained a potential access bypass issue.

Kaltura module for Drupal contained an information disclosure vulnerability which I reported and resolved.

UC MIGS module for Drupal was susceptible to web parameter tampering.