Contributors

Mahara is developed by a world-wide team of programmers, translators, designers and enthusiastic amateurs. Many individuals and groups have contributed to Mahara so far.

Core Teams

• Contributors
• Debian/Ubuntu Packaging
• Release Managers and Maintainers
• Reviewers
• Security
• Translation

Community

• Developers
• Translators

Security researchers

Mahara code

This is a list of security researchers that have contributed to Mahara itself. These people have followed the responsible disclosure practise after finding security vulnerabilities in the Mahara codebase.

• Aaron Barnes - @spastk
• Abhishek Dashora - Facebook
• Ahmad Ashraff - @yappare
• Ahmed Jerbi - Facebook
• Ajay Singh Negi personal website - @ajaysinghnegi
• Anurag Srivastava - @hexachordanu
• C Vishnu Vardhan Reddy (Vishnu_dfx) - Facebook
• Dushyant Sahu
• Dylan S. Hailey - @TibitXimer
• Emanuel Bronshtein - @e3amn2l
• FaisaL Ahmed - personal website
• Hammad Mahmood - Facebook
• Hamid Ashraf - @hamihax
• Himanshu Kumar Das - @mehimansu
• Jaume Llopis Pujal - @JKS___
• Kamil Sevi - @kamilsevi
• Mahmut Esat Yildirim - personal website
• Mike Haworth
• Narendra Bhati (R00t Sh3ll), Web Security Geeks - @NarendraBhatiB
• M.R.Vignesh Kumar - @vigneshkumarmr
• Nitin Goplani - LinkedIn
• Prashant Negi - @prashantnegi_
• Rafay Baloch - personal website
• Roman Mironov - LinkedIn
• Saurabh Chandrakant Nemade - Facebook
• Sergey Markov
• Siddhesh Gawde - Facebook
• Tom Forbes - personal website
• Wan Ikram - @rinakikun

Mahara project infrastructure

This second list is of security researchers who have found security issues with the infrastructure of the Mahara project which can include all the websites (mahara.org, wiki.mahara.org, manual.mahara.org, langpacks.mahara.org, reviews.mahara.org, git.mahara.org, test.mahara.org), the servers that host those websites, and any auxillary tools (such as launchpad for bug tracking, github.com for git hosting).

These people have followed the responsible disclosure practise after finding security vulnerabilities in the Mahara project infrastructure.

• mahara.org vulnerable to the BEAST SSL/TLS attack
  • Adam Ziaja (http://adamziaja.com)
• A problem in the custom DuckDuckGo search setup on mahara.org
  • David Vieira-Kurz of MajorSeurity - @secalert
• mahara.org servers exposing web server version
  • Emanuel Bronshtein - @e3amn2l
• Directory listings active on wiki.mahara.org
  • Parveen Yadav (https://www.facebook.com/proXy.test) & Ankit Bharathan
• mahara.org vulnerable to the CCS SSL/TLS attack (https://www.openssl.org/news/secadv_20140605.txt)
  • S. Venkatesh - @pranavvenkats
• SHA-1 intermediate SSL certificates on some *.mahara.org sites
  • Mohamed Chamli (https://www.facebook.com/TnMcH)
• SPF not setup for @mahara.org email
  • Ashesh Kumar (https://www.facebook.com/ashesh1708)
  • Ketan Patil (http://www.infobittechnologies.com/)
• SSL configuration on mahara.org still allowing TLSv1 128 bit RC4-SHA
  • SaifAllah benMassaoud (https://www.facebook.com/WhiteHatSecuri)

Organizations

A large part of the development on Mahara would not be possible without the funding from institutions and organizations.

Mahara 15.04

Athabasca University Catalyst IT Catalyst Open Source Academy Hochschule für Bildende Künste Braunchschweig (The Braunschweig University of Art) iCampus21 Lancaster University Liip New York Institute of Technology New Zealand Ministry of Education SWITCH Teaching and Learning Centre, University of Canberra Totara LMS Université de Montreal University of the Arts London Zentrum für Mediales Lernen (Center for Technology-Enhanced Learning) at Karlsruhe Institute of Technology (KIT)

Mahara 1.10

ARNES Catalyst IT Center for Open and Distance Learning at Karlsruhe Institute of Technology (KIT) iCampus21 Lancaster University New Zealand Ministry of Education Pratt Institute SWITCH Teaching and Learning Centre, University of Canberra Totara LMS

Mahara 1.9

ARNES Catalyst IT Center for Open and Distance Learning at Karlsruhe Institute of Technology (KIT) Deltak Innovation Lancaster University Liip New York Institute of Technology New Zealand Ministry of Education Principals Australia Institute SWITCH Teachers College Columbia University Totara LMS University of the Arts London

Mahara 1.8

ARNES Catalyst IT Forth Valley College, Jasmin Jodge iCampus21 Lancaster University Massey University NetSpot New Zealand Ministry of Education Teachers College Columbia University University of California, San Francisco University of the Arts London

Mahara 1.7

Catalyst IT Deltak edu eduONE Lancaster University Liip Massey University Mozilla

Mahara 1.6

Aotearoa New Zealand Association of Social Workers Catalyst IT Deltak edu Lancaster University New Zealand Ministry of Education PLANE Southampton Solent University Teaching and Learning Centre, University of Canberra University of the Arts London

Mahara 1.5

• Birmingham City University
• Catalyst IT
• Deltak edu
• Education Services Australia
• Goucher College
• Lancaster University
• New Zealand Ministry of Education
• PLANE
• Rocky View Schools
• Two Sense Media
• United World College of South East Asia
• Teaching and Learning Centre, University of Canberra

Pre Mahara 1.5

The University of Glasgow have funded several pieces of work for us, including View Templates, part of Import/Export (the HTML export is thanks to them), and various bug fixes.

GLISI/Ray Merrill funded enhancements to Mahara's groups, and Ray has provided much invaluable guidance around Mahara's usability.

With JISC funding we were able to add import/export functionality to the Mahara e-portfolio system, as part of the 1.2 release. This work was sponsored by the University of London Computer Centre, University of Glasgow and JISC Cetis.

A collaborative group in the State of New Hampshire funded the ability to submit Mahara Views for assessment in Moodle, through a grant from the New Hampshire Department of Education.

Cambridge University School of Clinical Medicine sponsored the development of the plugin Problems & Conditions.

The BScE at the University of Luxembourg funded the development of the tag cloud, improvements to the feedback function in the 1.2 and 1.3 releases, and bug fixes for Mac servers.

Birmingham City University funded the initial development work for Collections and Plans (new features in Mahara 1.3). They also supported the development of locking down blog posts and files that are used in submitted views.

Lancaster University Network Services (LUNS Ltd.) was funded by Cumbria and Lancashire Education Online (CLEO) to design several features.

The New Zealand Ministry of Education funded a large number of features and usability changes to Mahara 1.4 and 1.5 that were implemented by Catalyst IT