You are on page 1of 7

TYPO3 Association Quarterly Report 2008

TYPO3 Association Quarterly Report


2008

Page 1 of 7, 23 July 2008


The TYPO3 Association
TYPO3 Association Quarterly Report 2008

Table of Contents
TYPO3 Association Quarterly Report..................................................................................................................................................1
Table of Contents...........................................................................................................................................................................2
Quality Control Committee............................................................................................................................................................3
Certification Team....................................................................................................................................................................3
Event Committee............................................................................................................................................................................4
T3CON08....................................................................................................................................................................................4
T3DD08......................................................................................................................................................................................4
Research & Development Committee...........................................................................................................................................4
v4 Team.....................................................................................................................................................................................4
5.0 Team....................................................................................................................................................................................5
Security Team...........................................................................................................................................................................6
Related Links:.................................................................................................................................................................................6
Certification Team....................................................................................................................................................................6
T3CON08....................................................................................................................................................................................6
T3DD08......................................................................................................................................................................................6
v4 Team.....................................................................................................................................................................................7
5.0 Team....................................................................................................................................................................................7
Security Team...........................................................................................................................................................................7

Page 2 of 7, 23 July 2008


The TYPO3 Association
TYPO3 Association Quarterly Report 2008
Arriving the half time of 2008 we have reached a lot of milestones and made big progress in organizational issues.
TYPO3 4.2 has been released, and the Core Team steps towards the next version 4.3. The new concept of sponsoring v4
projects allows more involvement of agencies, first sponsored projects for TYPO3 v4 have been announced so the
development of TYPO3 is speeded up.
The development of FLOW3 proceeded fast and the 5.0 project management takes now advantage of more elements
from the eXtreme Programming toolkit. A Contributor License Agreement for TYPO3 v5 / FLOW3 and T3CAST, a new
podcast series about TYPO3 v5, started successfully.
Since the security awareness within the TYPO3 community seems to grow, the Security Team optimized their internal
work flows e.g. by a ticket system. As a result of the Security Team discussions on the T3DD08, the Collective Security
Bulletins were build up.
Thanks to all the people who joined the T3DD08! This year the T3DD08 as well as the T3CON08 moved to another location
and we're looking forward to meet you all at the T3CON08 in Berlin. Not only the upper mentioned Collective Security
Bulletins had its source in a TYPO3 event, the events enable teamwork in all areas. As a result of the presentation of the
Certification Team at the T3DD08, already 15 persons registered for the first exams. The planning of the first certification
exams is going on in big steps.
Also a new event, the first Bug Day took place on June 27th and is planned to be repeated once every month.
Stay tuned on TYPO3 events and don't forget to register for the T3CON08 in october 9th-11th 2008 in Berlin, Germany.
CU!

Quality Control Committee


Certification Team
In recent months the certification team concentrated
mainly on the development of the first pre-test planned
for autumn 2008. While a part of the team gathered
potential test questions the other team members planned
the event itself.
With the help of many volunteers significant number of
questions have been gathered. Each question is reviewed
by the certification team based on on teaching value,
understandability, and technical accuracy. More questions
for the exam are needed and will help improve the quality
of the certification. If you would like to suggest
certification questions please send them to
questioncollection.certification@typo3.org – the mail-
address of the question collection team.
The planning of the pre-tests and the first certification
exams continues to progress well. During the TYPO3
Developer Days in Elmshorn, Germany the team provided a
short presentation about certification and the team's planned next steps. At this event, 15 new people registered for the
first exams. This illustrates the strong interest in certification within the TYPO3 community.
Further information about the certification can be found on http://certification.typo3.org.

Page 3 of 7, 23 July 2008


The TYPO3 Association
TYPO3 Association Quarterly Report 2008

Event Committee
T3CON08
The T3CON08 will be held from october 9th-11th 2008 in Berlin, Germany. Registration is open, so hurry to get one of the
seats. You can book your tickets at http://t3con08.typo3.org. Be sure to book early, as this event usually is sold out
pretty fast. There are still some open changes for sponsoring this event, have a look at
http://t3con08.typo3.org/sponsoring/sponsor_packages.html to book your spots.

T3DD08
For the first time, this international TYPO3 developer
community event took place Elmshorn near Hamburg,
Germany. 150 TYPO3 enthusiasts from 11 countries shared
their knowledge and enjoyed the excellent weather. The
agenda included 28 presentations starting with general
topics like productivity, usability and working with Eclipse
over TYPO3 4.x specific topics like special programming
techniques for own extensions or basic rules regarding
extension programming to the special topics regarding
TYPO3 5.0 and FLOW3. Everybody enjoyed the
presentations as well as the main social event, which
resulted in all the nerds taking a dip in the swimming
pool. Also, this time 10% female attendees found their
way to the Nordakademie Elmshorn, this excellent location TYPO3 Developer Days 2008 in Elmshorn, Germany
provided an enjoyable and inspiring overall atmosphere. Responses from the event evaluation survey indicated that
attendees were pleased with the entire event.
The TYPO3 Developer Days T3DD09 will take place again in Elmshorn, Germany and will be held on May 14-17, 2009.
Watch the news on typo3.org or the newly set up mailing list for the start of the registration.

Research & Development Committee


v4 Team
Only a few weeks after TYPO3 4.2 was released, the Core Team started detailed planning for TYPO3 4.3. The team
appoints release managers for every new version. Oliver Hader was chosen to lead the development of this new release.
The team has decided to change from approximately a yearly release cycle to approximately a 6-month release cycle.
This means that version 4.3 is planned for release this Fall. Oliver is publishing weekly status reports to help keep the
community informed about the progress. You can find them among other information like the roadmap at the project
page at http://forge.typo3.org/projects/show/typo3v43-projects.
TYPO3 4.x development has recently moved to a dedicated TYPO3 development server at http://svn.typo3.org/. This is
the same server that TYPO3 5.0 has been using. Having our own Subversion server will enable many special features
that are probably too technically detailed to mention here ;-). Please note that if you have been using a copy of the old
Subversion repository, you should follow the instructions for changing to the new server. More information:
http://news.typo3.org/news/article/typo3-v4-core-svn-migration.
After the introduction at this year's T3DD08, the first sponsored projects for TYPO3 v4 have been announced. Sponsored
projects are a new way that agencies/companies using TYPO3 can support TYPO3 development. Sponsored projects
result in increased funding going to developers, primarily Core Team members, to enable them to focus more of their

Page 4 of 7, 23 July 2008


The TYPO3 Association
TYPO3 Association Quarterly Report 2008
time on the TYPO3 Core. We expect this to significantly speed development.
Contrary to what may have been done before, sponsored projects aim for a very clear and precise approach:
• each project comes with a project description outlining its goals and the amount of money needed for
achieving them
• each project has a team, ready to work on it as soon as the money is raised
• a team of reviewers is already defined, so that there are no bad surprises upon integration into the Core of
TYPO3
• every completed project will go into the Core of TYPO3
For more information, please read the full announcement at http://news.typo3.org/news/article/typo3-association-
announces-sponsored-projects.
Finally, the first Bug Day took place on June 27th. This was the first of many Bug Days which are now planned to occur
on the last Friday of every month. The purpose of the Bug Day is to foster community involvement and, of course, to get
bugs fixed. The day is dedicated to:
• Bug triage
• Guiding new developers in submitting patches
Companies are kindly invited to let their developers work for TYPO3 on that day in order to get their most pressing
problems fixed once forever! For details, see http://typo3.org/development/bug-fixing/bug-day and
http://news.typo3.org/news/article/1st-typo3-bug-day-a-success.

5.0 Team
Recently a Contributor License Agreement based on the
Apache Contributor License Agreement was created for
both FLOW3 and TYPO3 v5. The agreement grants most
rights to the TYPO3 Association while ensuring that
contributors maintain full rights over their contributions.
Everyone who already contributed to the TYPO3 v5 and /
or FLOW3 project was asked to sign the CLA.
Version 5 development continues on many fronts.
Configuration mechanisms in FLOW3 have been refined and
the configuration cascade is now fully implemented. The
cache mechanism has been enhanced. The initial Validator
and Property Editor are nearly finished. The
documentation of the Model View Controller (MVC) framework has begun. Brainstorming on implementing flexible
persistent storage continued.
After meeting with experienced software engineers and additional discussions at the T3DD08, the 5.0 Team decided to
enhance its software development processes and to take advantage of more elements from the eXtreme Programming
Toolkit. The team adopted User Stories and is finding ways to adapt the SCRUM process to the special requirements of a
distributed open source project. In short, User Stories are a very efficient and meaningful way to specify the
functionality / features of software. Instead of working on the whole feature set at the same time, a few stories are
selected for a so called Sprint which lasts for about 4-6 weeks. In addition, the team decided to perform continuous
integration during development. The concept of continuous integration is simple: commit changes early (or
continuously) and immediately run automated tests to verify that all contributions work together (integrate well) and
are of a certain quality.

Page 5 of 7, 23 July 2008


The TYPO3 Association
TYPO3 Association Quarterly Report 2008
At the T3DD08, the most important session was the "Hitchhiker's Guide to FLOW3" in which the new features which had
been developed since the T3CON07 and the T3BOARD08 are outlined. The slides from FLOW3-related presentations at
T3DD08 are available for download. The recording of the Hitchhiker's session is also an episode of T3CAST. T3CAST is a
new podcast series designed to share behind-the-scenes details throughout the development process of TYPO3 v5.

Security Team
The spring of 2008 presented the Security Team with big
challenges: The increasing number of reports of TYPO3
extensions vulnerabilities indicates that security
awareness within the TYPO3 community is growing. During
the first half of 2008, the team issued security bulletins for
38 extensions. In comparison, only 20 security bulletins
were issued for extensions throughout all of 2007. As a
result, the internal work flows to react to reports more
quickly was optimized and a new ticketing system using
the Open Ticket Request System (OTRS) was implemented.
T3DD08 provided an excellent opportunity to discuss and
identify new strategies to address the growing number of
vulnerabilities found in extensions. One result of the
discussions is the new Collective Security Bulletins, which Security Team (ltr): Michael Stucki, Helmut Hummel, Marcus Krause, Henning
enables to summarize multiple warnings for multiple Pingel (Vice Team Lead), Ekkehard Gümbel, Jochen Weiland. Absent: Lars
Houmark (Team Lead), Lars E. D.Jensen, Michael Hirdes
extensions in a single bulletin. From now on, Collective
Security Bulletins will be used for extensions with relatively low download numbers from the TYPO3 Extension
Repository (TER) or low importance to the community.
The team also successfully fixed a security vulnerability within the TYPO3 core related to uploading files. They partnered
with the Core Team and provided them with the security patches.
In addition, the team is developing a policy that describes how the Security Team operates. This document will help
formalize the processes and will be publicly available to enable the community to understand exactly how the Security
Team functions.

Related Links:
Association website: http://association.typo3.org
TYPO3 News page: http://news.typo3.org

Certification Team
Website: http://certification.typo3.org

T3CON08
Website: http://t3con08.typo3.org
Sponsoring: http://t3con08.typo3.org/sponsoring/sponsor_packages.html

T3DD08
Website: http://t3dd08.typo3.org
Mailing list: http://lists.netfielders.de/cgi-bin/mailman/listinfo/t3dd

Page 6 of 7, 23 July 2008


The TYPO3 Association
TYPO3 Association Quarterly Report 2008

v4 Team
Website: http://typo3.org/teams/core
Mailing list (4.3 discussion): http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-project-4-3
Mailing list (core): http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-team-core
4.3 project gantt diagram: http://forge.typo3.org/projects/gantt/typo3v43-projects
Forge: http://forge.typo3.org/projects/show/typo3v4-core
Subversion: http://svn.typo3.org
SVN migration: http://news.typo3.org/news/article/typo3-v4-core-svn-migration
Sponsor projects: http://news.typo3.org/news/article/typo3-association-announces-sponsored-projects
Bug Day: http://typo3.org/development/bug-fixing/bug-day
Bug Day news: http://news.typo3.org/news/article/1st-typo3-bug-day-a-success
5.0 Team
Website: http://typo3.org/teams/50-development
Mailing list (discussion): http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-project-5_0-general
Mailing list (core): http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-team-core-v5
Forge: http://forge.typo3.org/projects/show/typo3v5-development
Podcast: http://typo3.org/podcasts/robert
Security Team
Website: http://typo3.org/teams/security
TYPO3 Announcement list: http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-announce

Page 7 of 7, 23 July 2008


The TYPO3 Association