Contributors: Difference between revisions
From Mahara Wiki
No edit summary |
|||
(112 intermediate revisions by 2 users not shown) | |||
Line 3: | Line 3: | ||
=Core Teams= | =Core Teams= | ||
* [https://launchpad.net/~mahara-contributors/+members Contributors] | *[https://launchpad.net/~mahara-contributors/+members Contributors] | ||
* [https://launchpad.net/~mahara-packaging/+members Debian/Ubuntu Packaging] | *[https://launchpad.net/~mahara-packaging/+members Debian/Ubuntu Packaging] | ||
* [https://launchpad.net/~mahara-release/+members Release Managers and Maintainers] | *[https://launchpad.net/~mahara-release/+members Release Managers and Maintainers] | ||
* [https://launchpad.net/~mahara-reviewers/+members Reviewers] | *[https://launchpad.net/~mahara-reviewers/+members Reviewers] | ||
* [https://launchpad.net/~mahara-security/+members Security] | *[https://launchpad.net/~mahara-security/+members Security] | ||
* [https://launchpad.net/~mahara-lang/+members Translation] | *[https://launchpad.net/~mahara-lang/+members Translation] | ||
=Community= | =Community= | ||
* [http://www.ohloh.net/p/mahara/contributors?query=&sort=commits Developers] | *[http://www.ohloh.net/p/mahara/contributors?query=&sort=commits Developers] | ||
* [https://translations.launchpad.net/+groups/mahara-translation-group Translators] | *[https://translations.launchpad.net/+groups/mahara-translation-group Translators] | ||
=Security researchers= | =Security researchers= | ||
== Mahara code == | ==Mahara code== | ||
This is a list of security researchers that have contributed to Mahara. These people have followed the [[Security | responsible disclosure practise after finding security vulnerabilities in the Mahara codebase]]. | This is a list of security researchers that have contributed to Mahara itself. These people have followed the [[Security | responsible disclosure practise after finding security vulnerabilities in the Mahara codebase]]. | ||
* Aaron Barnes | *[https://twitter.com/spastk Aaron Barnes] | ||
* | *[https://twitter.com/Abdulahhusam Abdullah Hussam Gazi] | ||
* | *[https://www.facebook.com/ad271 Abhishek Dashora] | ||
* | *[https://www.ad3sh.com Adesh Nandkishor Kolte] | ||
* | *[https://twitter.com/yappare Ahmad Ashraff] | ||
* | *[https://www.facebook.com/ahmed.jerbi.web.plus Ahmed Jerbi] | ||
* Dushyant Sahu | *[http://computersecuritywithethicalhacking.blogspot.in/ Ajay Singh Negi] | ||
* | *[https://twitter.com/hexachordanu Anurag Srivastava] | ||
* | *[https://www.facebook.com/vishnu.dfx C Vishnu Vardhan Reddy (Vishnu_dfx)] | ||
* | *[https://chbi.eu/ chbi] | ||
* | *[http://www.codesafe.cn/ 陈瑞琦 (Chen Ruiqi)] | ||
* | *[https://blog.deesee.xyz/ Dominic Couture] | ||
* | *Dushyant Sahu | ||
* Jaume Llopis Pujal | *[http://www.twitter.com/tibitximer Dylan S. Hailey] | ||
* | *[https://twitter.com/e3amn2l Emanuel Bronshtein] | ||
* | *[http://faisalahmed.me/ FaisaL Ahmed] | ||
* Mike Haworth | * Gwenole T. | ||
* | *[http://facebook.com/hammad.mahmood.14019 Hammad Mahmood] | ||
* | *[https://twitter.com/hamihax Hamid Ashraf] | ||
* | *[https://twitter.com/mehimansu Himanshu Kumar Das] | ||
* | *[https://twitter.com/JKS___ Jaume Llopis Pujal] | ||
* | *[https://twitter.com/kamilsevi Kamil Sevi] | ||
* | *[https://m.facebook.com/kirti.ar Kirtikumar Anandrao Ramchandani] | ||
* | *[https://twitter.com/fuserdd Marlon Starkloff] | ||
* Sergey Markov | *[https://twitter.com/vigneshkumarmr M.R.Vignesh Kumar] | ||
* | *[http://www.mahmutesat.com Mahmut Esat Yildirim] | ||
* | *Mike Haworth | ||
* Wan Ikram - [https://twitter.com/ | *[http://Facebook.com/mushrafmustafaofficial Mushraf Mustafa] | ||
*[https://twitter.com/NarendraBhatiB Narendra Bhati (R00t Sh3ll), Web Security Geeks] | |||
*[https://www.linkedin.com/in/nitingoplani Nitin Goplani] | |||
*[https://twitter.com/prashantnegi_ Prashant Negi] | |||
*[http://rafayhackingarticles.net Rafay Baloch] | |||
*[http://uk.linkedin.com/in/rmironov Roman Mironov] | |||
*[https://www.facebook.com/WhiteHatSecuri SaifAllah benMassaoud] | |||
*[https://www.facebook.com/sajibe.kanti Sajibe Kanti] | |||
*Saksham Anand | |||
*[https://facebook.com/saurabh.nemade Saurabh Chandrakant Nemade] | |||
*Sergey Markov | |||
*[http://iosec.in/ Shekhar Suman] | |||
*[http://www.facebook.com/pen3t3r Siddhesh Gawde] | |||
*[http://tomforb.es Tom Forbes] | |||
*[https://twitter.com/the_real_clown Vineet Kumar] | |||
*[https://twitter.com/rinakikun Wan Ikram] | |||
*[https://launchpad.net/~wcchien Wen-Chang Chien (簡文章)] | |||
*[https://twitter.com/yousukezan Yuji Tounai] | |||
*[http://fb.com/zeex.zeeshan Zeeshan] | |||
== Mahara project infrastructure == | ==Mahara project infrastructure== | ||
This second list is of security researchers who have | This second list is of security researchers who have reported security issues with the configuration or version of software used on the infrastructure of the Mahara project which can include all the websites (mahara.org, wiki.mahara.org, manual.mahara.org, langpacks.mahara.org, reviews.mahara.org, git.mahara.org, test.mahara.org) and the servers that host those websites. | ||
These people have followed the [[Security | responsible disclosure practise after finding security vulnerabilities in the Mahara project infrastructure]]. | |||
= | The list is in reverse chronological order. | ||
===2021=== | |||
SPF record not configured for subdomains of mahara.org - [https://www.facebook.com/rimel.ahamedzz MD. Rimel] | |||
===2019=== | |||
Restrict access to certain files on wiki.mahara.org - [https://www.linkedin.com/in/harsh-joshi-107397160 Harsh Joshi] | |||
== | ===2018=== | ||
*Content spoofing on mahara.org - [https://m.facebook.com/Mr.Ch4rLi3 Ratnadip Gajbhiye] | |||
*X-Frame-Options HTTP header on wiki.mahara.org not set to "Deny" - [https://m.facebook.com/Mr.Ch4rLi3 Ratnadip Gajbhiye] | |||
*SSH banner on git.mahara.org contains comment string - [https://m.facebook.com/kirti.ar Kirtikumar Anandrao Ramchandani] | |||
*Not disclosed yet; awaiting reply from the open source project affected - [https://www.linkedin.com/in/nikhil-sahoo-87204b106/ Nikhil Sahoo] and [https://www.linkedin.com/in/ipsita-subhadarshan-sahoo-907b32150/ Ipsita Subhadarshan Sahoo] | |||
* | *Host header attack on wiki.mahara.org - [https://www.linkedin.com/in/thrivikram-gujarathi-independent-web-penetration-tester-53074796 Thrivikram Gujarathi] | ||
* | |||
* [ | |||
* | |||
===2011-2017=== | |||
*Preloading of HSTS and increasing max age for wiki.mahara.org - [https://m.facebook.com/Mr.Ch4rLi3 Ratnadip Gajbhiye] | |||
*DNSSEC and Domain Registry Protection (DRP is not available for .org domains though) - [https://m.facebook.com/kirti.ar Kirtikumar Anandrao Ramchandani] | |||
*Set Certificate Authority Authorization - [https://www.facebook.com/profile.php?id=100011024580051 Shwetabh Suman] | |||
*Proxy protection to prevent bypassing of X-Frame-Options - [http://Facebook.com/mushrafmustafaofficial Mushraf Mustafa] | |||
*Extend spam protection with DMARC / DKIM - [https://www.facebook.com/sam.patel.9822 Pal Patel] | |||
*Strict-Transport-Security header was not set - [https://www.linkedin.com/in/kyawthiha89 Kyaw Thiha] | |||
*Content spoofing on 404 page - [https://www.facebook.com/T4YM.phtml Taimoor Abid] | |||
*Some 301 redirects on mahara.org used Host field of HTTP request rather than hard-coded URL; potential for a cache poisoning attack - Vikram Singh Rathore of [https://www.torridnetworks.com/home Torrid Networks Pvt Ltd] | |||
*SPF record for mahara.org breaks length limit - [https://twitter.com/rohittourister Rohit Kumar] | |||
<span | *X-XSS-Protection header is not set ([https://bugs.launchpad.net/mahara/+bug/1531987 Bug report to improve security allaround]) - [https://www.facebook.com/WhiteHatSecuri SaifAllah benMassaoud] - [http://fb.com/zeex.zeeshan Zeeshan] | ||
*<span id="error-page-phishing">mahara.org printing full requested URL on error pages, which could potentially be part of a very weak phishing attack</span> - [https://twitter.com/Girish0777 Girish Sp] | |||
*SSL configuration on mahara.org still allowing TLS_RSA_WITH_RC4_128_SHA and TLS_ECDHE_RSA_WITH_RC4_128_SHA - [http://shawarkhan.com Shawar Khan] | |||
*SSL configuration on mahara.org still allowing TLSv1 128 bit RC4-SHA - [https://www.facebook.com/WhiteHatSecuri SaifAllah benMassaoud] | |||
*SPF not setup for @mahara.org email - [https://www.facebook.com/ashesh1708 Ashesh Kumar] - [http://www.infobittechnologies.com/ Ketan Patil] | |||
*SHA-1 intermediate SSL certificates on some *.mahara.org sites - [https://www.facebook.com/TnMcH Mohamed Chamli] | |||
*mahara.org vulnerable to the CCS SSL/TLS attack (https://www.openssl.org/news/secadv_20140605.txt) - [https://twitter.com/pranavvenkats S. Venkatesh] | |||
*Directory listings active on wiki.mahara.org - [https://www.facebook.com/proXy.test Parveen Yadav] & Ankit Bharathan | |||
*mahara.org servers exposing web server version - [https://twitter.com/e3amn2l Emanuel Bronshtein] | |||
*A problem in the custom DuckDuckGo search setup on mahara.org - [https://twitter.com/secalert David Vieira-Kurz of MajorSeurity] | |||
*mahara.org vulnerable to the BEAST SSL/TLS attack - [http://adamziaja.com Adam Ziaja] | |||
= | =Organisations= | ||
A large part of the development on Mahara would not be possible without the funding from institutions and organisations. | |||
==Mahara 23.04== | |||
* [https://call-learning.fr/ CALL Learning] | |||
*[https://carleton.ca/ Carleton University] | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[https://mitstek.com Mitstek] | |||
*[https://www.pharmacycouncil.org.nz/ Pharmacy Council] | |||
*[https://switch.ch/ SWITCH] | |||
* [https://www.uvic.cat/ Universitat de Vic - Universitat Central de Catalunya] | |||
* [https://www.ccdhb.org.nz/ Te Whatu Ora - Capital, Coast and Hutt Valley] | |||
* [https://www.adhb.health.nz/ Te Whatu Ora - Te Toka Tumai Auckland] | |||
*[https://waitematadhb.govt.nz/ Te Whatu Ora - Waitematā] | |||
*[https://www.wiltshire.ac.uk/ Wiltshire College and University Centre] | |||
==Mahara 22.10== | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[http://cqu.edu.au/ Central Queensland University] | |||
*[https://www.curtin.edu.au/ Curtin University] | |||
*[https://www.innersummit.co.uk Innersummit] | |||
*[https://learningworks.co.nz/ LearningWorks] | |||
*[https://learnopen.tech/ learnOPENtech] | |||
*[https://mitstek.com Mitstek] | |||
*[https://www.openlms.net/ Open LMS] | |||
*[https://www.pharmacycouncil.org.nz/ Pharmacy Council] | |||
*[https://www.phbern.ch/ PHBern] | |||
*[https://schulportal.hessen.de/ Schulportal Hessen] | |||
*[https://switch.ch/ SWITCH] | |||
*[http://anu.edu.au/ The Australian National University] | |||
*[http://www.waitematadhb.govt.nz Te Whatu Ora - Waitematā] | |||
<br /> | |||
==Mahara 22.04== | |||
*[http://carleton.ca Carleton University] | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[https://www.curtin.edu.au/ Curtin University] | |||
*[https://www.dcu.ie/ Dublin City University] | |||
*[https://www.griffith.ie/ Griffith College] | |||
*[https://learnopen.tech/ learnOPENtech] | |||
*[https://www.monash.edu Monash University] | |||
*[https://www.pharmacycouncil.org.nz/ Pharmacy Council] | |||
*[https://www.phbern.ch/ PHBern] | |||
*[https://schulportal.hessen.de/ Schulportal Hessen] | |||
*[https://switch.ch/ SWITCH] | |||
*[https://usq.edu.au/ University of Southern Queensland] | |||
*[https://www.unisg.ch/ University of St.Gallen] | |||
*[http://www.waitematadhb.govt.nz Waitematā District Health Board] | |||
== Mahara | <br /> | ||
==Mahara 21.10== | |||
* [ | *[https://www.cambridgeassessment.org.uk Cambridge Assessment] | ||
* [http://www. | *[http://carleton.ca Carleton University] | ||
* [http://www. | *[https://catalyst.net.nz/ Catalyst] | ||
* [http://www. | *[https://www.d2l.com/ D2L] | ||
* [http://www. | *[https://www.griffith.ie/ Griffith College] | ||
* [http:// | *[https://learningworks.co.nz/ LearningWorks] | ||
* [http://www. | *[https://mitstek.com Mitstek] | ||
*[https://www.openedu.nl/ OpenEDU] | |||
*[https://www.openlms.net/ Open LMS] | |||
*[https://www.pharmacycouncil.org.nz/ Pharmacy Council] | |||
*[https://switch.ch/ SWITCH] | |||
*[http://anu.edu.au/ The Australian National University] | |||
*[https://www.visol.ch/ Visol] | |||
<br /> | |||
==Mahara 21.04== | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[https://www.ccdhb.org.nz/ Capital & Coast District Health Board] | |||
*[https://learningworks.co.nz/ LearningWorks] | |||
*[https://www.pharmacycouncil.org.nz/ Pharmacy Council] | |||
*[https://switch.ch/ SWITCH] | |||
*[https://www.uni-bremen.de/ Universität Bremen] | |||
*[https://zhaw.ch ZHAW] | |||
<br /> | |||
==Mahara 20.10== | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[https://learningworks.co.nz/ LearningWorks] | |||
*[https://mitstek.com Mitstek] | |||
*[https://switch.ch/ SWITCH] | |||
*[http://www.waitematadhb.govt.nz Waitematā District Health Board] | |||
*[https://zhaw.ch ZHAW] | |||
<br /> | |||
==Mahara 20.04== | |||
*[https://www.cambridgeassessment.org.uk Cambridge Assessment] | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[http://www.cal.org/ Center for Applied Linguistics] | |||
*[http://education.govt.nz/ Te Tāhuhu o te Mātauranga Aotearoa Ministry of Education New Zealand] | |||
*[https://mitstek.com Mitstek] | |||
*[https://www.openedu.nl/en_US/ OpenEDU] | |||
*[https://www.phbern.ch/ PHBern] | |||
*[http://switch.ch/ SWITCH] | |||
*[https://www.ecnz.ac.nz Te Rito Maioha Early Childhood New Zealand] | |||
*[http://www.waitematadhb.govt.nz Waitematā District Health Board] | |||
| |||
==Mahara 19.10== | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[https://www.dcu.ie/ Dublin City University] | |||
*[https://learningworks.co.nz/ LearningWorks] | |||
*[https://mitstek.com Mitstek] | |||
*[http://switch.ch/ SWITCH] | |||
*[http://anu.edu.au/ The Australian National University] | |||
*[https://www.uni-bremen.de/ Universität Bremen] | |||
*[http://umontreal.ca Université de Montréal] | |||
*[https://unisa.edu.au University of South Australia] | |||
*[http://sussex.ac.uk University of Sussex] | |||
| |||
==Mahara 19.04== | |||
*[http://carleton.ca Carleton University] | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[http://www.ls-bw.de/,Lde/Startseite Landesinstitut für Schulentwicklung] (State Institute for School Development in Baden-Württemberg, Germany) | |||
*[https://learningworks.co.nz/ LearningWorks] | |||
*[http://povsod.com/ Povsod] | |||
*[https://recordingarts.com/ Recording Arts Canada] | |||
*[http://switch.ch/ SWITCH] | |||
*[http://synergy-learning.com/ Synergy Learning] | |||
*[http://umontreal.ca Université de Montréal] | |||
*[https://www.schule.de/ Verein zur Förderung eines Offenen Deutschen Schul-Netzes] | |||
*[http://www.waitematadhb.govt.nz/ Waitematā District Health Board] | |||
| |||
==Mahara 18.10== | |||
*[http://acu.edu.au/ Australian Catholic University] | |||
*[https://catalyst.net.nz/ Catalyst] | |||
*[http://cqu.edu.au/ Central Queensland University] | |||
*[https://www.countiesmanukau.health.nz Counties Manukau District Health Board] | |||
*[https://www.dcu.ie/ Dublin City University] | |||
*[https://methodistnorth.org.nz/east-coast-bays-methodist/ East Coast Bays Methodist Parish] | |||
*[https://enovation.ie/ Enovation] | |||
*[http://www.kpu.ca/ Kwantlen Polytechnic University] | |||
*[http://www.ls-bw.de/,Lde/Startseite Landesinstitut für Schulentwicklung] (State Institute for School Development in Baden-Württemberg, Germany) | |||
*[https://learningworks.co.nz/ LearningWorks] | |||
*[https://www.monashcollege.edu.au/ Monash College] | |||
*[http://phbern.ch/ PHBern] | |||
*[http://povsod.com/ Povsod] | |||
*[https://www.qmul.ac.uk/ Queen Mary University of London] | |||
*[http://switch.ch/ SWITCH] | |||
*[https://www.stcatherinescollege.school.nz/ St. Catherine's College, Wellington] | |||
*[http://synergy-learning.com/ Synergy Learning] | |||
*[https://www.tc.columbia.edu/ Teachers College, Columbia University] | |||
*[http://anu.edu.au/ The Australian National University] | |||
*[https://www.uni-bremen.de/ Universität Bremen] | |||
*[http://unil.ch/ Université de Lausanne] | |||
*[https://www.canberra.edu.au/ University of Canberra] | |||
*[https://usq.edu.au/ University of Southern Queensland] | |||
*[http://www.waitematadhb.govt.nz/ Waitematā District Health Board] | |||
*[https://www.yorksj.ac.uk/ York St John University] | |||
| |||
==Mahara 18.04== | |||
*[http://anu.edu.au The Australian National University] | |||
*[http://carleton.ca Carleton University] | |||
*[https://catalyst.net.nz Catalyst] | |||
*[http://cqu.edu.au Central Queensland University] | |||
*[http://www.ls-bw.de/,Lde/Startseite Landesinstitut für Schulentwicklung] (State Institute for School Development in Baden-Württemberg, Germany) | |||
*[http://education.govt.nz New Zealand Ministry of Education] | |||
*[http://pace.edu Pace University] | |||
*[http://phbern.ch PHBern] | |||
*[http://povsod.com/ Povsod] | |||
*[https://www.qmul.ac.uk Queen Mary University of London] | |||
*[http://switch.ch SWITCH] | |||
*[http://synergy-learning.com Synergy Learning] | |||
*[https://www.totaralms.com Totara LMS] | |||
*[http://sussex.ac.uk University of Sussex] | |||
| |||
==Mahara 17.10== | |||
*[http://aut.ac.nz Auckland University of Technology] | |||
*[http://anu.edu.au/ Australian National University] | |||
*[http://blackboard.com/ Blackboard] | |||
*[http://carleton.ca Carleton University] | |||
*[http://catalyst.net.nz Catalyst] | |||
*[http://cqu.edu.au Central Queensland University] | |||
*[http://dcu.ie Dublin City University] | |||
*[http://eticeo.fr Eticeo] | |||
*[https://education.govt.nz New Zealand Ministry of Education] | |||
*[http://www.switch.ch SWITCH] | |||
*[http://tc.columbia.edu Teachers College, Columbia University] | |||
*[https://www.totaralms.com Totara LMS] | |||
*[http://umontreal.ca Université de Montréal] | |||
*[http://uqam.ca/ Université du Québec à Montréal] | |||
*[http://usq.edu.au University of Southern Queensland] | |||
*[http://sussex.ac.uk University of Sussex] | |||
| |||
==Mahara 17.04== | |||
*[http://catalyst.net.nz/ Catalyst] | |||
*[http://catalyst.net.nz/academy Catalyst Open Source Academy] | |||
*[http://donau-uni.ac.at/ Donau-Universität Krems] / [http://ats2020.eu/ ATS2020 Project] | |||
*[http://instructure.com/ Instructure] | |||
*[http://kineo.co.nz/ Kineo (Pacific)] | |||
*[http://www.kpu.ca Kwantlen Polytechnic University] | |||
*[http://www.minedu.govt.nz/ New Zealand Ministry of Education] | |||
*[http://northlanddhb.org.nz/ Northland District Health Board] | |||
*[http://povsod.com/ Povsod] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[http://ecnz.ac.nz Te Rito Maioha Early Childhood New Zealand] | |||
*[http://umontreal.ca/ Université de Montréal] | |||
| |||
==Mahara 16.10== | |||
*[http://athabascau.ca/ Athabasca University] | |||
*[http://anu.edu.au Australian National University] | |||
*[http://catalyst.net.nz/ Catalyst] | |||
*[https://www.phbern.ch/ PH Bern] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[https://www.dvt.at/services/tsn-tiroler-schulnetz/ Tiroler Schulnetz] | |||
*[http://uqam.ca Université du Québec à Montréal] | |||
| |||
==Mahara 16.04== | |||
*[http://athabascau.ca/ Athabasca University] | |||
*[http://cardiff.ac.uk/ Cardiff University] | |||
*[http://catalyst.net.nz/ Catalyst] | |||
*[http://catalyst.net.nz/academy Catalyst Open Source Academy] | |||
*[http://federation.edu.au/ Federation University Australia] | |||
*[http://pace.edu/ Pace University] | |||
*[http://povsod.com/ Povsod] | |||
*[http://tirol.gv.at/ Province of Tirol] | |||
*[http://solent.ac.uk/ Southampton Solent University] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[http://umontreal.ca/ Université de Montreal] | |||
*[http://yale.edu/ Yale University] | |||
*[https://www.zhaw.ch/en/university/ Zurich University of Applied Sciences] | |||
| |||
==Mahara 15.10== | |||
*[http://catalyst.net.nz/ Catalyst] | |||
*[http://catalyst.net.nz/academy Catalyst Open Source Academy] | |||
*[http://edict.co.uk/ EdICT Training] | |||
*[http://fernuni-hagen.de/ FernUniversität in Hagen] | |||
*[http://www.icampus21.com/ iCampus 21] | |||
*[http://www.kpu.ca/ Kwantlen Polytechnic University] | |||
*[http://tirol.gv.at/ Land Tirol] | |||
*[http://www.ncnu.edu.tw/ National Chi Nan University] | |||
*[http://www.minedu.govt.nz/ New Zealand Ministry of Education] | |||
*[http://pace.edu/ Pace University] | |||
*[http://pratt.edu/ Pratt Institute] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[http://totaralms.com/ Totara LMS] | |||
*[http://umontreal.ca/ Université de Montreal] | |||
*[http://usherbrooke.ca/ Université de Sherbrooke] | |||
*[http://usq.edu.au/ University of Southern Queensland] | |||
*[http://www.warwick.ac.uk/ University of Warwick] | |||
*[http://yale.edu/ Yale University] | |||
| |||
==Mahara 15.04== | |||
Mahara 15.04 was released on 17 April 2015. | |||
*[http://www.athabascau.ca/ Athabasca University] | |||
*[http://catalyst.net.nz Catalyst IT] | |||
*[http://catalyst.net.nz/academy Catalyst Open Source Academy] | |||
*[http://hbk-bs.de/ Hochschule für Bildende Künste Braunchschweig (The Braunschweig University of Art)] | |||
*[http://www.icampus21.com/ iCampus21] | |||
*[http://www.lancs.ac.uk/ Lancaster University] | |||
*[http://liip.ch Liip] | |||
*[http://nyit.edu/ New York Institute of Technology] | |||
*[http://www.minedu.govt.nz New Zealand Ministry of Education] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[http://www.canberra.edu.au/tlc Teaching and Learning Centre, University of Canberra] | |||
*[http://totaralms.com Totara LMS] | |||
*[http://umontreal.ca/ Université de Montreal] | |||
*[http://www.arts.ac.uk University of the Arts London] | |||
*[http://www.zml.kit.edu/ Zentrum für Mediales Lernen (Center for Technology-Enhanced Learning) at Karlsruhe Institute of Technology (KIT)] | |||
| |||
==Mahara 1.10== | |||
Mahara 1.10 was released on 21 October 2014. | |||
*[http://www.arnes.si/en.html ARNES] | |||
*[http://catalyst.net.nz Catalyst IT] | |||
*[http://www.fsz.kit.edu/ Center for Open and Distance Learning at Karlsruhe Institute of Technology (KIT)] | |||
*[http://www.icampus21.com/ iCampus21] | |||
*[http://www.lancs.ac.uk/ Lancaster University] | |||
*[http://www.minedu.govt.nz New Zealand Ministry of Education] | |||
*[https://www.pratt.edu Pratt Institute] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[http://www.canberra.edu.au/tlc Teaching and Learning Centre, University of Canberra] | |||
*[http://totaralms.com Totara LMS] | |||
| |||
==Mahara 1.9== | |||
Mahara 1.9 was released on 15 April 2014. | |||
*[http://www.arnes.si/en.html ARNES] | |||
*[http://catalyst.net.nz Catalyst IT] | |||
*[http://www.fsz.kit.edu/ Center for Open and Distance Learning at Karlsruhe Institute of Technology (KIT)] | |||
*[http://deltak-innovation.com/ Deltak Innovation] | |||
*[http://www.lancs.ac.uk/ Lancaster University] | |||
*[http://liip.ch Liip] | |||
*[http://nyit.edu/ New York Institute of Technology] | |||
*[http://www.minedu.govt.nz New Zealand Ministry of Education] | |||
*[http://www.pai.edu.au/ Principals Australia Institute] | |||
*[http://www.switch.ch/ SWITCH] | |||
*[http://tc.columbia.edu Teachers College Columbia University] | |||
*[http://totaralms.com Totara LMS] | |||
*[http://www.arts.ac.uk University of the Arts London] | |||
| |||
==Mahara 1.8== | |||
Mahara 1.8 was released on 24 October 2013. | |||
*[http://www.arnes.si/en.html ARNES] | |||
*[http://catalyst.net.nz Catalyst IT] | |||
*[http://www.forthvalley.ac.uk/ Forth Valley College, Jasmin Jodge] | |||
*[http://icampus21.com iCampus21] | |||
*[http://www.lancs.ac.uk/ Lancaster University] | |||
*[http://www.massey.ac.nz Massey University] | |||
*[http://netspot.com.au/ NetSpot] | |||
*[http://www.minedu.govt.nz New Zealand Ministry of Education] | |||
*[http://tc.columbia.edu Teachers College Columbia University] | |||
*[http://ucsf.edu University of California, San Francisco] | |||
*[http://www.arts.ac.uk University of the Arts London] | |||
| |||
==Mahara 1.7== | |||
Mahara 1.7 was released on 19 April 2013. | |||
*[http://catalyst.net.nz Catalyst IT] | |||
*[http://www.deltak-innovation.com/ Deltak edu] | |||
*[http://www.eduone.net.au eduONE] | |||
*[http://www.lancs.ac.uk/ Lancaster University] | |||
*[http://www.liip.ch/ Liip] | |||
*[http://www.massey.ac.nz Massey University] | |||
*[http://www.mozilla.org/ Mozilla] | |||
| |||
==Mahara 1.6== | ==Mahara 1.6== | ||
Mahara 1.6 was released on 17 April 2012. | |||
* [http://anzasw.org.nz Aotearoa New Zealand Association of Social Workers] | *[http://anzasw.org.nz Aotearoa New Zealand Association of Social Workers] | ||
* [http://catalyst.net.nz Catalyst IT] | *[http://catalyst.net.nz Catalyst IT] | ||
* [http://www.deltak-innovation.com/ Deltak edu] | *[http://www.deltak-innovation.com/ Deltak edu] | ||
* [http://www.lancs.ac.uk/ Lancaster University] | *[http://www.lancs.ac.uk/ Lancaster University] | ||
* [http://www.minedu.govt.nz New Zealand Ministry of Education] | *[http://www.minedu.govt.nz New Zealand Ministry of Education] | ||
* [http://plane.edu.au PLANE] | *[http://plane.edu.au PLANE] | ||
* [http://www.solent.ac.uk Southampton Solent University] | *[http://www.solent.ac.uk Southampton Solent University] | ||
* [http://www.canberra.edu.au/tlc Teaching and Learning Centre, University of Canberra] | *[http://www.canberra.edu.au/tlc Teaching and Learning Centre, University of Canberra] | ||
* [http://www.arts.ac.uk University of the Arts London] | *[http://www.arts.ac.uk University of the Arts London] | ||
| |||
==Mahara 1.5== | ==Mahara 1.5== | ||
* [http://www.bcu.ac.uk/ Birmingham City University] | Mahara 1.5 was released on 13 June 2011. | ||
* [http://catalyst.net.nz Catalyst IT] | |||
* [http://www.deltak-innovation.com/ Deltak edu] | *[http://www.bcu.ac.uk/ Birmingham City University] | ||
* [http://esa.org.au/ Education Services Australia] | *[http://catalyst.net.nz Catalyst IT] | ||
* [http://www.goucher.edu Goucher College] | *[http://www.deltak-innovation.com/ Deltak edu] | ||
* [http://www.lancs.ac.uk/ Lancaster University] | *[http://esa.org.au/ Education Services Australia] | ||
* [http://www.minedu.govt.nz New Zealand Ministry of Education] | *[http://www.goucher.edu Goucher College] | ||
* [http://plane.edu.au PLANE] | *[http://www.lancs.ac.uk/ Lancaster University] | ||
* [http://www.rockyview.ab.ca Rocky View Schools] | *[http://www.minedu.govt.nz New Zealand Ministry of Education] | ||
* [http://www.twosensemedia.com/tsmhome/ Two Sense Media] | *[http://plane.edu.au PLANE] | ||
* [http://www.uwcsea.edu.sg/ United World College of South East Asia] | *[http://www.rockyview.ab.ca Rocky View Schools] | ||
* [http://www.canberra.edu.au/tlc Teaching and Learning Centre, University of Canberra] | *[http://www.twosensemedia.com/tsmhome/ Two Sense Media] | ||
*[http://www.uwcsea.edu.sg/ United World College of South East Asia] | |||
*[http://www.canberra.edu.au/tlc Teaching and Learning Centre, University of Canberra] | |||
| |||
==Pre Mahara 1.5== | ==Pre Mahara 1.5== | ||
Line 265: | Line 521: | ||
The [http://www.gla.ac.uk/ University of Glasgow] have funded several pieces of work for us, including View Templates, part of Import/Export (the HTML export is thanks to them), and various bug fixes. | The [http://www.gla.ac.uk/ University of Glasgow] have funded several pieces of work for us, including View Templates, part of Import/Export (the HTML export is thanks to them), and various bug fixes. | ||
[http://www.galeaders.org/ GLISI] | [http://www.galeaders.org/ GLISI] / Ray Merrill funded enhancements to Mahara's groups, and Ray has provided much invaluable guidance around Mahara's usability. | ||
With JISC funding we were able to add import/export functionality to the Mahara e-portfolio system, as part of the 1.2 release. This work was sponsored by the [http://www.ulcc.ac.uk/ University of London Computer Centre], University of Glasgow and [http://wiki.cetis.ac.uk/PIOP_Mahara JISC Cetis]. | With JISC funding we were able to add import/export functionality to the Mahara e-portfolio system, as part of the 1.2 release. This work was sponsored by the [http://www.ulcc.ac.uk/ University of London Computer Centre], University of Glasgow and [http://wiki.cetis.ac.uk/PIOP_Mahara JISC Cetis]. |
Latest revision as of 20:33, 27 April 2023
Mahara is developed by a world-wide team of programmers, translators, designers and enthusiastic amateurs. Many individuals and groups have contributed to Mahara so far.
Core Teams
- Contributors
- Debian/Ubuntu Packaging
- Release Managers and Maintainers
- Reviewers
- Security
- Translation
Community
Security researchers
Mahara code
This is a list of security researchers that have contributed to Mahara itself. These people have followed the responsible disclosure practise after finding security vulnerabilities in the Mahara codebase.
- Aaron Barnes
- Abdullah Hussam Gazi
- Abhishek Dashora
- Adesh Nandkishor Kolte
- Ahmad Ashraff
- Ahmed Jerbi
- Ajay Singh Negi
- Anurag Srivastava
- C Vishnu Vardhan Reddy (Vishnu_dfx)
- chbi
- 陈瑞琦 (Chen Ruiqi)
- Dominic Couture
- Dushyant Sahu
- Dylan S. Hailey
- Emanuel Bronshtein
- FaisaL Ahmed
- Gwenole T.
- Hammad Mahmood
- Hamid Ashraf
- Himanshu Kumar Das
- Jaume Llopis Pujal
- Kamil Sevi
- Kirtikumar Anandrao Ramchandani
- Marlon Starkloff
- M.R.Vignesh Kumar
- Mahmut Esat Yildirim
- Mike Haworth
- Mushraf Mustafa
- Narendra Bhati (R00t Sh3ll), Web Security Geeks
- Nitin Goplani
- Prashant Negi
- Rafay Baloch
- Roman Mironov
- SaifAllah benMassaoud
- Sajibe Kanti
- Saksham Anand
- Saurabh Chandrakant Nemade
- Sergey Markov
- Shekhar Suman
- Siddhesh Gawde
- Tom Forbes
- Vineet Kumar
- Wan Ikram
- Wen-Chang Chien (簡文章)
- Yuji Tounai
- Zeeshan
Mahara project infrastructure
This second list is of security researchers who have reported security issues with the configuration or version of software used on the infrastructure of the Mahara project which can include all the websites (mahara.org, wiki.mahara.org, manual.mahara.org, langpacks.mahara.org, reviews.mahara.org, git.mahara.org, test.mahara.org) and the servers that host those websites.
These people have followed the responsible disclosure practise after finding security vulnerabilities in the Mahara project infrastructure.
The list is in reverse chronological order.
2021
SPF record not configured for subdomains of mahara.org - MD. Rimel
2019
Restrict access to certain files on wiki.mahara.org - Harsh Joshi
2018
- Content spoofing on mahara.org - Ratnadip Gajbhiye
- X-Frame-Options HTTP header on wiki.mahara.org not set to "Deny" - Ratnadip Gajbhiye
- SSH banner on git.mahara.org contains comment string - Kirtikumar Anandrao Ramchandani
- Not disclosed yet; awaiting reply from the open source project affected - Nikhil Sahoo and Ipsita Subhadarshan Sahoo
- Host header attack on wiki.mahara.org - Thrivikram Gujarathi
2011-2017
- Preloading of HSTS and increasing max age for wiki.mahara.org - Ratnadip Gajbhiye
- DNSSEC and Domain Registry Protection (DRP is not available for .org domains though) - Kirtikumar Anandrao Ramchandani
- Set Certificate Authority Authorization - Shwetabh Suman
- Proxy protection to prevent bypassing of X-Frame-Options - Mushraf Mustafa
- Extend spam protection with DMARC / DKIM - Pal Patel
- Strict-Transport-Security header was not set - Kyaw Thiha
- Content spoofing on 404 page - Taimoor Abid
- Some 301 redirects on mahara.org used Host field of HTTP request rather than hard-coded URL; potential for a cache poisoning attack - Vikram Singh Rathore of Torrid Networks Pvt Ltd
- SPF record for mahara.org breaks length limit - Rohit Kumar
- X-XSS-Protection header is not set (Bug report to improve security allaround) - SaifAllah benMassaoud - Zeeshan
- mahara.org printing full requested URL on error pages, which could potentially be part of a very weak phishing attack - Girish Sp
- SSL configuration on mahara.org still allowing TLS_RSA_WITH_RC4_128_SHA and TLS_ECDHE_RSA_WITH_RC4_128_SHA - Shawar Khan
- SSL configuration on mahara.org still allowing TLSv1 128 bit RC4-SHA - SaifAllah benMassaoud
- SPF not setup for @mahara.org email - Ashesh Kumar - Ketan Patil
- SHA-1 intermediate SSL certificates on some *.mahara.org sites - Mohamed Chamli
- mahara.org vulnerable to the CCS SSL/TLS attack (https://www.openssl.org/news/secadv_20140605.txt) - S. Venkatesh
- Directory listings active on wiki.mahara.org - Parveen Yadav & Ankit Bharathan
- mahara.org servers exposing web server version - Emanuel Bronshtein
- A problem in the custom DuckDuckGo search setup on mahara.org - David Vieira-Kurz of MajorSeurity
- mahara.org vulnerable to the BEAST SSL/TLS attack - Adam Ziaja
Organisations
A large part of the development on Mahara would not be possible without the funding from institutions and organisations.
Mahara 23.04
- CALL Learning
- Carleton University
- Catalyst
- Mitstek
- Pharmacy Council
- SWITCH
- Universitat de Vic - Universitat Central de Catalunya
- Te Whatu Ora - Capital, Coast and Hutt Valley
- Te Whatu Ora - Te Toka Tumai Auckland
- Te Whatu Ora - Waitematā
- Wiltshire College and University Centre
Mahara 22.10
- Catalyst
- Central Queensland University
- Curtin University
- Innersummit
- LearningWorks
- learnOPENtech
- Mitstek
- Open LMS
- Pharmacy Council
- PHBern
- Schulportal Hessen
- SWITCH
- The Australian National University
- Te Whatu Ora - Waitematā
Mahara 22.04
- Carleton University
- Catalyst
- Curtin University
- Dublin City University
- Griffith College
- learnOPENtech
- Monash University
- Pharmacy Council
- PHBern
- Schulportal Hessen
- SWITCH
- University of Southern Queensland
- University of St.Gallen
- Waitematā District Health Board
Mahara 21.10
- Cambridge Assessment
- Carleton University
- Catalyst
- D2L
- Griffith College
- LearningWorks
- Mitstek
- OpenEDU
- Open LMS
- Pharmacy Council
- SWITCH
- The Australian National University
- Visol
Mahara 21.04
- Catalyst
- Capital & Coast District Health Board
- LearningWorks
- Pharmacy Council
- SWITCH
- Universität Bremen
- ZHAW
Mahara 20.10
Mahara 20.04
- Cambridge Assessment
- Catalyst
- Center for Applied Linguistics
- Te Tāhuhu o te Mātauranga Aotearoa Ministry of Education New Zealand
- Mitstek
- OpenEDU
- PHBern
- SWITCH
- Te Rito Maioha Early Childhood New Zealand
- Waitematā District Health Board
Mahara 19.10
- Catalyst
- Dublin City University
- LearningWorks
- Mitstek
- SWITCH
- The Australian National University
- Universität Bremen
- Université de Montréal
- University of South Australia
- University of Sussex
Mahara 19.04
- Carleton University
- Catalyst
- Landesinstitut für Schulentwicklung (State Institute for School Development in Baden-Württemberg, Germany)
- LearningWorks
- Povsod
- Recording Arts Canada
- SWITCH
- Synergy Learning
- Université de Montréal
- Verein zur Förderung eines Offenen Deutschen Schul-Netzes
- Waitematā District Health Board
Mahara 18.10
- Australian Catholic University
- Catalyst
- Central Queensland University
- Counties Manukau District Health Board
- Dublin City University
- East Coast Bays Methodist Parish
- Enovation
- Kwantlen Polytechnic University
- Landesinstitut für Schulentwicklung (State Institute for School Development in Baden-Württemberg, Germany)
- LearningWorks
- Monash College
- PHBern
- Povsod
- Queen Mary University of London
- SWITCH
- St. Catherine's College, Wellington
- Synergy Learning
- Teachers College, Columbia University
- The Australian National University
- Universität Bremen
- Université de Lausanne
- University of Canberra
- University of Southern Queensland
- Waitematā District Health Board
- York St John University
Mahara 18.04
- The Australian National University
- Carleton University
- Catalyst
- Central Queensland University
- Landesinstitut für Schulentwicklung (State Institute for School Development in Baden-Württemberg, Germany)
- New Zealand Ministry of Education
- Pace University
- PHBern
- Povsod
- Queen Mary University of London
- SWITCH
- Synergy Learning
- Totara LMS
- University of Sussex
Mahara 17.10
- Auckland University of Technology
- Australian National University
- Blackboard
- Carleton University
- Catalyst
- Central Queensland University
- Dublin City University
- Eticeo
- New Zealand Ministry of Education
- SWITCH
- Teachers College, Columbia University
- Totara LMS
- Université de Montréal
- Université du Québec à Montréal
- University of Southern Queensland
- University of Sussex
Mahara 17.04
- Catalyst
- Catalyst Open Source Academy
- Donau-Universität Krems / ATS2020 Project
- Instructure
- Kineo (Pacific)
- Kwantlen Polytechnic University
- New Zealand Ministry of Education
- Northland District Health Board
- Povsod
- SWITCH
- Te Rito Maioha Early Childhood New Zealand
- Université de Montréal
Mahara 16.10
- Athabasca University
- Australian National University
- Catalyst
- PH Bern
- SWITCH
- Tiroler Schulnetz
- Université du Québec à Montréal
Mahara 16.04
- Athabasca University
- Cardiff University
- Catalyst
- Catalyst Open Source Academy
- Federation University Australia
- Pace University
- Povsod
- Province of Tirol
- Southampton Solent University
- SWITCH
- Université de Montreal
- Yale University
- Zurich University of Applied Sciences
Mahara 15.10
- Catalyst
- Catalyst Open Source Academy
- EdICT Training
- FernUniversität in Hagen
- iCampus 21
- Kwantlen Polytechnic University
- Land Tirol
- National Chi Nan University
- New Zealand Ministry of Education
- Pace University
- Pratt Institute
- SWITCH
- Totara LMS
- Université de Montreal
- Université de Sherbrooke
- University of Southern Queensland
- University of Warwick
- Yale University
Mahara 15.04
Mahara 15.04 was released on 17 April 2015.
- Athabasca University
- Catalyst IT
- Catalyst Open Source Academy
- Hochschule für Bildende Künste Braunchschweig (The Braunschweig University of Art)
- iCampus21
- Lancaster University
- Liip
- New York Institute of Technology
- New Zealand Ministry of Education
- SWITCH
- Teaching and Learning Centre, University of Canberra
- Totara LMS
- Université de Montreal
- University of the Arts London
- Zentrum für Mediales Lernen (Center for Technology-Enhanced Learning) at Karlsruhe Institute of Technology (KIT)
Mahara 1.10
Mahara 1.10 was released on 21 October 2014.
- ARNES
- Catalyst IT
- Center for Open and Distance Learning at Karlsruhe Institute of Technology (KIT)
- iCampus21
- Lancaster University
- New Zealand Ministry of Education
- Pratt Institute
- SWITCH
- Teaching and Learning Centre, University of Canberra
- Totara LMS
Mahara 1.9
Mahara 1.9 was released on 15 April 2014.
- ARNES
- Catalyst IT
- Center for Open and Distance Learning at Karlsruhe Institute of Technology (KIT)
- Deltak Innovation
- Lancaster University
- Liip
- New York Institute of Technology
- New Zealand Ministry of Education
- Principals Australia Institute
- SWITCH
- Teachers College Columbia University
- Totara LMS
- University of the Arts London
Mahara 1.8
Mahara 1.8 was released on 24 October 2013.
- ARNES
- Catalyst IT
- Forth Valley College, Jasmin Jodge
- iCampus21
- Lancaster University
- Massey University
- NetSpot
- New Zealand Ministry of Education
- Teachers College Columbia University
- University of California, San Francisco
- University of the Arts London
Mahara 1.7
Mahara 1.7 was released on 19 April 2013.
Mahara 1.6
Mahara 1.6 was released on 17 April 2012.
- Aotearoa New Zealand Association of Social Workers
- Catalyst IT
- Deltak edu
- Lancaster University
- New Zealand Ministry of Education
- PLANE
- Southampton Solent University
- Teaching and Learning Centre, University of Canberra
- University of the Arts London
Mahara 1.5
Mahara 1.5 was released on 13 June 2011.
- Birmingham City University
- Catalyst IT
- Deltak edu
- Education Services Australia
- Goucher College
- Lancaster University
- New Zealand Ministry of Education
- PLANE
- Rocky View Schools
- Two Sense Media
- United World College of South East Asia
- Teaching and Learning Centre, University of Canberra
Pre Mahara 1.5
The University of Glasgow have funded several pieces of work for us, including View Templates, part of Import/Export (the HTML export is thanks to them), and various bug fixes.
GLISI / Ray Merrill funded enhancements to Mahara's groups, and Ray has provided much invaluable guidance around Mahara's usability.
With JISC funding we were able to add import/export functionality to the Mahara e-portfolio system, as part of the 1.2 release. This work was sponsored by the University of London Computer Centre, University of Glasgow and JISC Cetis.
A collaborative group in the State of New Hampshire funded the ability to submit Mahara Views for assessment in Moodle, through a grant from the New Hampshire Department of Education.
Cambridge University School of Clinical Medicine sponsored the development of the plugin Problems & Conditions.
The BScE at the University of Luxembourg funded the development of the tag cloud, improvements to the feedback function in the 1.2 and 1.3 releases, and bug fixes for Mac servers.
Birmingham City University funded the initial development work for Collections and Plans (new features in Mahara 1.3). They also supported the development of locking down blog posts and files that are used in submitted views.
Lancaster University Network Services (LUNS Ltd.) was funded by Cumbria and Lancashire Education Online (CLEO) to design several features.
The New Zealand Ministry of Education funded a large number of features and usability changes to Mahara 1.4 and 1.5 that were implemented by Catalyst IT