Phil E. Taylor PhilETaylor

Joomla Fork (`joomla-backports/php-tuf`) vs Upstream (`php-tuf/php-tuf`)

The Joomla fork diverged from upstream around Dec 2023 (commit 7c2c58c5) and has 18 Joomla-specific commits on top. Meanwhile, upstream has continued with 25+ commits including major refactoring. The two have diverged significantly.

Joomla-Specific Changes (not in upstream)

1. Signature Verifier Recreation During Root Rotation (Critical Security Fix)

File: src/Client/Updater.php

Joomla added lines to recreate the SignatureVerifier and UniversalVerifier after each root metadata update in the updateRoot() loop (between steps 5.3.7 and 5.3.8 of the TUF spec).

Moments

00:02:10 - 00:03:28 Digital Jersey: Demonstrating Value for Money

Digital Jersey details how it provides a return on taxpayer investment. The organization showcases its success in attracting supplementary funding from the private sector and its commitment to efficient cost management.

00:02:10 - 00:02:17 so I think one of the things that we can do for value for money is, because we are arm's length, we're able to raise money from industry as well
00:02:29 - 00:02:41

	# Common typos for 'claude'
	alias claudw="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias calud="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias cualde="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias cladue="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias claud="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias claud3="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias claue="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias cluade="claude --permission-mode acceptEdits --dangerously-skip-permissions"
	alias claudde="claude --permission-mode acceptEdits --dangerously-skip-permissions"


	<!DOCTYPE html>
	<html>
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Security Verification</title>
	<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous">
	<style>
	#stackprotectform {

	<?php
	// Just a random example entity
	// /vendor/philetaylor/base/src/Entity/Changelog.php

	namespace Base\Entity;

	use Base\Doctrine\Encryption\Types\Encrypted;
	use Base\Repository\ChangelogRepository;
	use DateTime;
	use Doctrine\DBAL\Types\Types;

	<?php

	# composer require aws/aws-sdk-php
	use Aws\SesV2\SesV2Client;

	require 'vendor/autoload.php';

	define('AWS_ACCESS_KEY_ID', '');
	define('AWS_SECRET_ACCESS_KEY', '');
	$client = new SesV2Client([

	<?php

	declare(strict_types=1);

	use Rector\CodeQuality\Rector\BooleanAnd\SimplifyEmptyArrayCheckRector;
	use Rector\CodeQuality\Rector\Expression\InlineIfToExplicitIfRector;
	use Rector\CodeQuality\Rector\Foreach_\UnusedForeachValueToArrayKeysRector;
	use Rector\CodeQuality\Rector\FuncCall\ChangeArrayPushToArrayAssignRector;
	use Rector\CodeQuality\Rector\FuncCall\SimplifyRegexPatternRector;
	use Rector\CodeQuality\Rector\FuncCall\SimplifyStrposLowerRector;

	alias cdocker=docker
	alias cocker=docker
	alias d="docker"
	alias dcker=docker
	alias dcocker=docker
	alias dcoker=docker
	alias dd="docker"
	alias ddocker=docker
	alias deocker=docker
	alias dfocker=docker