SlideShare ist ein Scribd-Unternehmen logo
1 von 24
Downloaden Sie, um offline zu lesen
OSS isn’t just good, it’s
good for business
Alex Urevick-Ackelsberg
alex@zivtech.com
• Philadelphia-based, founded in 2008
• Open Source Software Development, Design, & Training
• Specialize in application/product development
• LivIT - Remote Patient Monitoring & Population Health Mgmt
• Alex UA - Cofounder & CEO
• Worked with Drupal since 2004
• Professional troublemaker & hat enthusiast
The Benefits of OSS
…for “consumers”
(businesses and orgs)
The Problems
• Wide spread confusion as to the nature of Open
Source Software
• Requires a different mind set for development:
partially public development
• Lots of misinformation (FUD)
• Vendors don’t insist on contribution
• Publicly committing code is talked about talked as
strictly an altruistic activity
OSS goes to Washington
• Clarifying Guidance Regarding Open Source Software (OSS) - bit.ly/dod-ossh
What makes it OSS-ome?
• Broad peer review = more secure & better
quality code
• Flexibility over time- the world changes &
you must too
• No vendor lock-in
• No restrictions on users of OSS
What makes it OSS-ome?
• No per-seat licenses = scalable usage
• Shared maintenance = lower TCO
• Iteration & Experimentation
• Ability to vet developers
One is the loneliest number
Don’t Hack What?
• Drupal Core
• Contrib Modules
• ~16,700
• Custom Modules
• Site-specific code
Hook everything, hack nothing!
• Contrib made possible by Drupal’s
hook system
• Source of Drupal’s flexibility
• Functionality should be alterable from
another module
• This a bug, not a feature
Hack Nothing!
Flexibility & Scalability
• Can’t take advantage of improvements
• Can’t interact with other modules
• Can’t use common scaling techniques
Hack Nothing!
Long Term Costs
• You broke it, you own it
• Not able to share costs
• Nobody will contribute to your private
fork
Hack Nothing!
Support & Vendor Lock In
• Good shops won’t work with hacked
code, & neither should you
• Either get stuck with hackers or will
have to pay to replace hacks
Hack Nothing!
Quality Assurance
• With enough eyes, all bugs are shallow
• With few enough eyes, there is no
limit to the stupidity & mistakes
• Peer review increases quality
• QA is a process
Security
• Doesn’t fall under community security
processes / authorities
• Can’t easily apply security patches
• Lose “enough” eyes
How?
Will work for pay
• http://zivte.ch/otddodcio
Will work for pay
• DoD recommendation: Add contractual
incentives for getting code committed “up
stream”
• We still are asked for the opposite (i.e. to give
a client a “break” on our charges if we are
allowed to release it)
• Ability to freely commit code is a non-
negotiable part of contracts
The Benefits of OSS
…for vendors
• Lead Generation
• Employees
• Community recruitment
• Retention
• Training
• Shaming (QA)
The Benefits of OSS
…for vendors
• Virtuous cycles
• Those who pay vendors to build modules get
more Drupal-based customers
• Direct business benefits (getting paid to make
modules)
• BUT… keep the costs of contribution in mind

Zivtech’s Project &
Patching Processes
• Create specs
• Architecture plan
• Evaluating landscape & determine approach
• Use community code as possible
• Create custom module to extend existing
contrib modules (prefered) or create new
module
Zivtech’s Project &
Patching Processes
• Patch existing modules
• Tracking the change and posting to d.o
• Add to patches folder - deployed
automatically
• Code and resolve issue
• Review and iterate
Module or Patch?
• Maintaining a module is both a personal
& business commitment
• Is there a business benefit?
• Is it an itch you want to scratch?
• If answer to either is no, we patch
Best Patch EVAH!!!
-2522 lines, +148 lines
Questions?
Comments?
Alex Urevick-Ackelsberg
Cofounder & CEO
alex@zivtech.com

Weitere ähnliche Inhalte

Was ist angesagt?

Twin Cities Salesforce.com Developer User Group Presentation April 2012
Twin Cities Salesforce.com Developer User Group Presentation April 2012Twin Cities Salesforce.com Developer User Group Presentation April 2012
Twin Cities Salesforce.com Developer User Group Presentation April 2012
Developer Force - Force.com Community
 
Forrester Webinar: Coming Changes in Application Delivery
Forrester Webinar: Coming Changes in Application DeliveryForrester Webinar: Coming Changes in Application Delivery
Forrester Webinar: Coming Changes in Application Delivery
XebiaLabs
 

Was ist angesagt? (7)

Evaluating Blockchain Companies
Evaluating Blockchain CompaniesEvaluating Blockchain Companies
Evaluating Blockchain Companies
 
Twin Cities Salesforce.com Developer User Group Presentation April 2012
Twin Cities Salesforce.com Developer User Group Presentation April 2012Twin Cities Salesforce.com Developer User Group Presentation April 2012
Twin Cities Salesforce.com Developer User Group Presentation April 2012
 
Building Customer Feedback Loops: Learn Quicker, Design Smarter
Building Customer Feedback Loops: Learn Quicker, Design SmarterBuilding Customer Feedback Loops: Learn Quicker, Design Smarter
Building Customer Feedback Loops: Learn Quicker, Design Smarter
 
Polyglot Ethereum - Smart Contracts for the Enterprise
Polyglot Ethereum - Smart Contracts for the EnterprisePolyglot Ethereum - Smart Contracts for the Enterprise
Polyglot Ethereum - Smart Contracts for the Enterprise
 
Forrester Webinar: Coming Changes in Application Delivery
Forrester Webinar: Coming Changes in Application DeliveryForrester Webinar: Coming Changes in Application Delivery
Forrester Webinar: Coming Changes in Application Delivery
 
Documentation in the Agile Space
Documentation in the Agile SpaceDocumentation in the Agile Space
Documentation in the Agile Space
 
The SharePoint Migration Playbook
The SharePoint Migration PlaybookThe SharePoint Migration Playbook
The SharePoint Migration Playbook
 

Andere mochten auch

Css compass sasssusy
Css   compass sasssusyCss   compass sasssusy
Css compass sasssusy
Zivtech, LLC
 
My Art Plot Presentation
My Art Plot PresentationMy Art Plot Presentation
My Art Plot Presentation
RyanTrev
 
The business case for contributing code
The business case for contributing codeThe business case for contributing code
The business case for contributing code
Zivtech, LLC
 

Andere mochten auch (8)

Css compass sasssusy
Css   compass sasssusyCss   compass sasssusy
Css compass sasssusy
 
Migrate
MigrateMigrate
Migrate
 
Fatherto Son
Fatherto SonFatherto Son
Fatherto Son
 
Proactive Displays, UW, 16 July 2008
Proactive Displays, UW, 16 July 2008Proactive Displays, UW, 16 July 2008
Proactive Displays, UW, 16 July 2008
 
From a Contractor to a Shop: How to grow your Drupal business without losing ...
From a Contractor to a Shop: How to grow your Drupal business without losing ...From a Contractor to a Shop: How to grow your Drupal business without losing ...
From a Contractor to a Shop: How to grow your Drupal business without losing ...
 
My Art Plot Presentation
My Art Plot PresentationMy Art Plot Presentation
My Art Plot Presentation
 
Social media presentation Adoption By Nigerian Universities-How Have They Fared?
Social media presentation Adoption By Nigerian Universities-How Have They Fared?Social media presentation Adoption By Nigerian Universities-How Have They Fared?
Social media presentation Adoption By Nigerian Universities-How Have They Fared?
 
The business case for contributing code
The business case for contributing codeThe business case for contributing code
The business case for contributing code
 

Ähnlich wie Open Source isn't Just Good, it's Good Business - DrupalCamp Colorado 2014

Ähnlich wie Open Source isn't Just Good, it's Good Business - DrupalCamp Colorado 2014 (20)

Driving Developers To Your API
Driving Developers To Your APIDriving Developers To Your API
Driving Developers To Your API
 
Bootstrapping an Open-Source Program Office at Blue Cross NC
Bootstrapping an Open-Source Program Office at Blue Cross NCBootstrapping an Open-Source Program Office at Blue Cross NC
Bootstrapping an Open-Source Program Office at Blue Cross NC
 
MaGIC Startup Academy Launch : Day 1 - Enterprise Product Development & Sales...
MaGIC Startup Academy Launch : Day 1 - Enterprise Product Development & Sales...MaGIC Startup Academy Launch : Day 1 - Enterprise Product Development & Sales...
MaGIC Startup Academy Launch : Day 1 - Enterprise Product Development & Sales...
 
Prepare the sled in summer and project release at its beginning
Prepare the sled in summer and project release at its beginningPrepare the sled in summer and project release at its beginning
Prepare the sled in summer and project release at its beginning
 
DevOps: Retooling the End-to-End IT Model
DevOps: Retooling the End-to-End IT ModelDevOps: Retooling the End-to-End IT Model
DevOps: Retooling the End-to-End IT Model
 
Best Practices for API Adoption - WIP Factory presentation for AnyPresence we...
Best Practices for API Adoption - WIP Factory presentation for AnyPresence we...Best Practices for API Adoption - WIP Factory presentation for AnyPresence we...
Best Practices for API Adoption - WIP Factory presentation for AnyPresence we...
 
Serverless Toronto helps Startups
Serverless Toronto helps StartupsServerless Toronto helps Startups
Serverless Toronto helps Startups
 
The Agile BA (Business Analyst)
The Agile BA (Business Analyst)The Agile BA (Business Analyst)
The Agile BA (Business Analyst)
 
05 DIGI CREATIVE people&process
05 DIGI CREATIVE people&process05 DIGI CREATIVE people&process
05 DIGI CREATIVE people&process
 
Digitization solutions - A new breed of software
Digitization solutions - A new breed of softwareDigitization solutions - A new breed of software
Digitization solutions - A new breed of software
 
Software Standards
Software StandardsSoftware Standards
Software Standards
 
Java DevOps at Enterprise Scale
Java DevOps at Enterprise ScaleJava DevOps at Enterprise Scale
Java DevOps at Enterprise Scale
 
Open Source Contribution Policy at DB Systel - Schlomo Schapiro - AK Open Sou...
Open Source Contribution Policy at DB Systel - Schlomo Schapiro - AK Open Sou...Open Source Contribution Policy at DB Systel - Schlomo Schapiro - AK Open Sou...
Open Source Contribution Policy at DB Systel - Schlomo Schapiro - AK Open Sou...
 
Agile Practice in a DevOps World
Agile Practice in a DevOps WorldAgile Practice in a DevOps World
Agile Practice in a DevOps World
 
Requirements to Include in a Digital Transformation RFP
Requirements to Include in a Digital Transformation RFPRequirements to Include in a Digital Transformation RFP
Requirements to Include in a Digital Transformation RFP
 
Agility via Software Engineering Practices - Agile Tour Montreal 2015
Agility via Software Engineering Practices - Agile Tour Montreal 2015Agility via Software Engineering Practices - Agile Tour Montreal 2015
Agility via Software Engineering Practices - Agile Tour Montreal 2015
 
Agile Data Warehousing
Agile Data WarehousingAgile Data Warehousing
Agile Data Warehousing
 
DevSecCon KeyNote London 2015
DevSecCon KeyNote London 2015DevSecCon KeyNote London 2015
DevSecCon KeyNote London 2015
 
DevSecCon Keynote
DevSecCon KeynoteDevSecCon Keynote
DevSecCon Keynote
 
Mucon microservices and innovation
Mucon microservices and innovationMucon microservices and innovation
Mucon microservices and innovation
 

Mehr von Zivtech, LLC

Shift left testing for continuous collaboration
Shift left testing for continuous collaborationShift left testing for continuous collaboration
Shift left testing for continuous collaboration
Zivtech, LLC
 

Mehr von Zivtech, LLC (6)

Shift left testing for continuous collaboration
Shift left testing for continuous collaborationShift left testing for continuous collaboration
Shift left testing for continuous collaboration
 
DrupalCon San Francisco- The State of Drupal as a Web Application & Product ...
DrupalCon San Francisco-  The State of Drupal as a Web Application & Product ...DrupalCon San Francisco-  The State of Drupal as a Web Application & Product ...
DrupalCon San Francisco- The State of Drupal as a Web Application & Product ...
 
Probo.ci Drupal 4 Gov Devops 1/2 day Presentation
Probo.ci Drupal 4 Gov Devops 1/2 day Presentation Probo.ci Drupal 4 Gov Devops 1/2 day Presentation
Probo.ci Drupal 4 Gov Devops 1/2 day Presentation
 
Drupaldelphia 2014 - Mission Bicycle Case Study - Slides by Matt Cheney
Drupaldelphia 2014 - Mission Bicycle Case Study - Slides by Matt CheneyDrupaldelphia 2014 - Mission Bicycle Case Study - Slides by Matt Cheney
Drupaldelphia 2014 - Mission Bicycle Case Study - Slides by Matt Cheney
 
Drupal Problem-Solving Techniques
Drupal Problem-Solving TechniquesDrupal Problem-Solving Techniques
Drupal Problem-Solving Techniques
 
Drupal Presentation @ the Higher Education Web Symposium
Drupal Presentation @ the Higher Education Web SymposiumDrupal Presentation @ the Higher Education Web Symposium
Drupal Presentation @ the Higher Education Web Symposium
 

Kürzlich hochgeladen

Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi EscortsIndian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Monica Sydney
 
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Russian Escort Abu Dhabi 0503464457 Abu DHabi EscortsRussian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Monica Sydney
 
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
ydyuyu
 
一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样
一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样
一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样
ayvbos
 
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girlsRussian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Monica Sydney
 
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
ydyuyu
 
一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理
F
 
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
gajnagarg
 
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
ayvbos
 
一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理
F
 

Kürzlich hochgeladen (20)

Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi EscortsIndian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
 
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Russian Escort Abu Dhabi 0503464457 Abu DHabi EscortsRussian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
 
Real Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirtReal Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirt
 
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrStory Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
 
Tadepalligudem Escorts Service Girl ^ 9332606886, WhatsApp Anytime Tadepallig...
Tadepalligudem Escorts Service Girl ^ 9332606886, WhatsApp Anytime Tadepallig...Tadepalligudem Escorts Service Girl ^ 9332606886, WhatsApp Anytime Tadepallig...
Tadepalligudem Escorts Service Girl ^ 9332606886, WhatsApp Anytime Tadepallig...
 
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
 
一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样
一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样
一比一原版(Flinders毕业证书)弗林德斯大学毕业证原件一模一样
 
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girlsRussian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
 
Best SEO Services Company in Dallas | Best SEO Agency Dallas
Best SEO Services Company in Dallas | Best SEO Agency DallasBest SEO Services Company in Dallas | Best SEO Agency Dallas
Best SEO Services Company in Dallas | Best SEO Agency Dallas
 
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
 
一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理
 
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
 
Local Call Girls in Seoni 9332606886 HOT & SEXY Models beautiful and charmin...
Local Call Girls in Seoni  9332606886 HOT & SEXY Models beautiful and charmin...Local Call Girls in Seoni  9332606886 HOT & SEXY Models beautiful and charmin...
Local Call Girls in Seoni 9332606886 HOT & SEXY Models beautiful and charmin...
 
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
 
Nagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime Nagercoil
Nagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime NagercoilNagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime Nagercoil
Nagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime Nagercoil
 
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
 
Call girls Service in Ajman 0505086370 Ajman call girls
Call girls Service in Ajman 0505086370 Ajman call girlsCall girls Service in Ajman 0505086370 Ajman call girls
Call girls Service in Ajman 0505086370 Ajman call girls
 
20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf
 
一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理一比一原版田纳西大学毕业证如何办理
一比一原版田纳西大学毕业证如何办理
 
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
 

Open Source isn't Just Good, it's Good Business - DrupalCamp Colorado 2014

  • 1. OSS isn’t just good, it’s good for business Alex Urevick-Ackelsberg alex@zivtech.com
  • 2. • Philadelphia-based, founded in 2008 • Open Source Software Development, Design, & Training • Specialize in application/product development • LivIT - Remote Patient Monitoring & Population Health Mgmt • Alex UA - Cofounder & CEO • Worked with Drupal since 2004 • Professional troublemaker & hat enthusiast
  • 3. The Benefits of OSS …for “consumers” (businesses and orgs)
  • 4. The Problems • Wide spread confusion as to the nature of Open Source Software • Requires a different mind set for development: partially public development • Lots of misinformation (FUD) • Vendors don’t insist on contribution • Publicly committing code is talked about talked as strictly an altruistic activity
  • 5. OSS goes to Washington • Clarifying Guidance Regarding Open Source Software (OSS) - bit.ly/dod-ossh
  • 6. What makes it OSS-ome? • Broad peer review = more secure & better quality code • Flexibility over time- the world changes & you must too • No vendor lock-in • No restrictions on users of OSS
  • 7. What makes it OSS-ome? • No per-seat licenses = scalable usage • Shared maintenance = lower TCO • Iteration & Experimentation • Ability to vet developers
  • 8. One is the loneliest number
  • 9. Don’t Hack What? • Drupal Core • Contrib Modules • ~16,700 • Custom Modules • Site-specific code
  • 10. Hook everything, hack nothing! • Contrib made possible by Drupal’s hook system • Source of Drupal’s flexibility • Functionality should be alterable from another module • This a bug, not a feature
  • 11. Hack Nothing! Flexibility & Scalability • Can’t take advantage of improvements • Can’t interact with other modules • Can’t use common scaling techniques
  • 12. Hack Nothing! Long Term Costs • You broke it, you own it • Not able to share costs • Nobody will contribute to your private fork
  • 13. Hack Nothing! Support & Vendor Lock In • Good shops won’t work with hacked code, & neither should you • Either get stuck with hackers or will have to pay to replace hacks
  • 14. Hack Nothing! Quality Assurance • With enough eyes, all bugs are shallow • With few enough eyes, there is no limit to the stupidity & mistakes • Peer review increases quality • QA is a process
  • 15. Security • Doesn’t fall under community security processes / authorities • Can’t easily apply security patches • Lose “enough” eyes
  • 16. How? Will work for pay • http://zivte.ch/otddodcio
  • 17. Will work for pay • DoD recommendation: Add contractual incentives for getting code committed “up stream” • We still are asked for the opposite (i.e. to give a client a “break” on our charges if we are allowed to release it) • Ability to freely commit code is a non- negotiable part of contracts
  • 18. The Benefits of OSS …for vendors • Lead Generation • Employees • Community recruitment • Retention • Training • Shaming (QA)
  • 19. The Benefits of OSS …for vendors • Virtuous cycles • Those who pay vendors to build modules get more Drupal-based customers • Direct business benefits (getting paid to make modules) • BUT… keep the costs of contribution in mind

  • 20. Zivtech’s Project & Patching Processes • Create specs • Architecture plan • Evaluating landscape & determine approach • Use community code as possible • Create custom module to extend existing contrib modules (prefered) or create new module
  • 21. Zivtech’s Project & Patching Processes • Patch existing modules • Tracking the change and posting to d.o • Add to patches folder - deployed automatically • Code and resolve issue • Review and iterate
  • 22. Module or Patch? • Maintaining a module is both a personal & business commitment • Is there a business benefit? • Is it an itch you want to scratch? • If answer to either is no, we patch
  • 23. Best Patch EVAH!!! -2522 lines, +148 lines