How the WordPress Security Team Works

 

WordCamp Europe 2017

M1A2 Abrams Tank

Tough Rugby Players

Balancing Performers

Team

  • Over 50 people
  • Distributed around the world
  • Representing varying companies

Tools

Life of Bug

  • Reported
  • Triaged
  • Patch made
  • Patch tested (by reporter as well)
  • Slated for release
  • Patch backported and tested
  • Patches committed
  • Released
  • Disclosed?
  • Report closed and bounty paid
  • Disclosed

Q & A

 

Aaron D. Campbell – @AaronCampbell
GoDaddy

Slides: https://adcwp.me/wceu2017

This presentation is running on WordPress using the Presenter plugin