read more

Vulnerabilities in web applications (like Gallery) are increasingly a sweet spot for attackers. We are very aware of this, and take the security of the Gallery project very seriously. In addition to our internal guidelines, processes and audits, we?ve had external security experts perform security audits of our code for the last several releases of Gallery 2.

Recently, we retained Gotham Digital Science (GDS) to perform security audits on Gallery 1 and 2. They are experts in application security, as it's basically all they do. The relationship we have built with GDS has proven valuable based on the results of the audits and we are looking forward to partnering with them on audits of future versions of Gallery. Please read on!

read more

Gallery is pleased to participate in the 2008 Google Summer of Code. The Summer of Code is a program, funded by Google, to essentially give students a paid internship with Open Source projects.

The student application process has begun. If you would like to work on Gallery during the Summer of Code and are eligible to participate, take a look at our ideas page and talk to us, either in #gallery on irc.freenode.net or on our Summer of Code mailing list. The student application process runs from March 24-31, 2008. Be sure to apply before the 31st when the application process ends.

read more

We're excited to be included in this year's Season of Usability. This program pairs up someone from Gallery and a usability expert to guide a student (YOU!) in a usability related project for Gallery. We've come up with a pretty neat project idea: Redesigning our image upload tools, so check out the details and send in your application no later than April 17th. For your ~15 hours a week for 3 months, you'll receive a $1000 stipend and valuable experience working with usability and Open Source!

read more

Interested in trying out Gallery on the most recent version of Microsoft's Server operating system? SpikeSource has just released a free WISP (Windows, IIS, SQL Server, PHP) stack with Gallery 2. The stack works on the latest Windows Server 2008, IIS 7 (with PHP FastCGI), and SQL Server 2005. The stack comes with updates and add-on installations through a free trial of their SpikeNet update service. 4 other applications are already available as add-ons.

The only prerequisites for the stack are Windows Server 2008 Standard/Enterprise and SQL Server 2005 with mixed-mode authentication. The installer should take care of the rest! Register to download your copy here.

read more