---
title: "“One Weird Trick” for Drupal Security... or Something"
url: "/podcasts/drupalizeme-podcast/one-weird-trick-for-drupal-security-or-something"
type: episode
date: 2016-04-21
updated: 2016-04-21
---

# “One Weird Trick” for Drupal Security... or Something

#  “One Weird Trick” for Drupal Security... or Something 

  

*Podcast episode player*

Matt & Mike talk with Drupal Security Team Lead Michael Hess, along with the former lead Greg Knaddison. We talk about the current state of Drupal security, along with their Drupalcon session, [*Watch the Hacker Hack*](https://events.drupal.org/neworleans2016/sessions/watch-hacker-hack).

   

   

 ![Drupal Security Hat](/sites/default/files/styles/wide_xs/public/assets/2016-04/security-hat.jpg.webp?itok=8M2NR8YC "security-hat.jpg")

##  Episode Guests 

###  Michael Hess 

 ![Thumbnail](/sites/default/files/styles/square_120x120/public/hess_michael_web.jpg?itok=SSIfebOm "hess_michael_web.jpg") 

 Current lead of the Drupal Security Team, and works with the University of Michigan School of Information and Medical Center, teaching three courses on content management platforms. 

###  Greg Knaddison 

 ![Thumbnail](/sites/default/files/styles/square_120x120/public/greg_knaddison.jpg?itok=JMFVJHy2 "greg_knaddison.jpg") 

 Former Drupal Security Team Lead, author of "Cracking Drupal", and he currently works at CARD.com with development, analytics, and infrastructure. 

 

##  Mentioned in this Episode 

- [  Drupalcon Session: Watch the Hacker Hack   ](https://events.drupal.org/neworleans2016/sessions/watch-hacker-hack)
- [  Greg's book, "Cracking Drupal"   ](http://crackingdrupal.com/)
- [  Security Review module   ](https://www.drupal.org/project/security_review)
- [  Two-Factor Authentication module   ](https://www.drupal.org/project/tfa)
- [  Paranoia module   ](https://www.drupal.org/project/paranoia)
- [  Drupal Security Report Whitepaper   ](http://drupalsecurityreport.org/)
- [  Drupal PCI Compliance Whitepaper   ](http://drupalpcicompliance.org/)

 Published in:

- [  Drupal Development   ](/topics/drupal-development)
- [  Security   ](/topics/security)