Today's Deep-Dive: CMS Garden
Ep. 03

Today's Deep-Dive: CMS Garden

Episode description

The discussion dives into the world of open source software, particularly content management systems (CMS), and their impact on government websites. Open source software operates like a “community garden,” where the code is accessible for anyone to use, modify, and improve, leading to benefits like transparency, flexibility, and cost-efficiency.

Governments, such as Germany, have embraced open-source systems like Typo3 for their digital infrastructure, motivated by campaigns like Public Money, Public Code, which advocate for software funded by taxpayers to be accessible to everyone. This move enhances transparency but requires constant updates and security checks to maintain safety. Alarming statistics show that nearly 30% of websites run outdated CMS versions, leaving them vulnerable to cyber threats.

CMS Garden, an open-source advocate, has been involved in advising governments and leading projects like Follow the Money, which tracks the software used by governments and its associated costs and security vulnerabilities. Their detective-like approach uses platforms like Wikidata and versionmanager.io to assess and analyze government websites. They found that 70% of government websites use open-source CMS, though many still run outdated versions.

Beyond governments, the conversation explores the importance of contributing back to open-source communities, highlighting the WordPress ecosystem’s tension between WordPress.org and companies like WP Engine that benefit from open source but don’t contribute equally. The episode concludes by emphasizing that everyone can support open-source projects, whether by contributing code, improving documentation, or simply advocating for its benefits. Open source offers a promising future of collaboration and equity across various sectors, raising questions about its potential applications in healthcare, education, and beyond.

Download transcript (.srt)
0:00

Welcome to the Deep Dive. Today, we're going deep, deep, deep into the world of open source

0:07

software.

0:08

How exciting.

0:09

Specifically, content management systems, CMS, as the cool kids call them, and their

0:16

impact on government websites, of all things.

0:18

Okay, yeah. Governments and websites.

0:20

We've got a whole bunch of articles and blog posts here from CMS Garden. They're big advocates

0:25

for open source, especially when it comes to, well, the government's digital life.

0:29

Makes sense.

0:30

So, okay, let's break this down. Open source software, what is it? What's the big deal?

0:34

It's all just like ones and zeros in the end, right?

0:38

Well, it's a bit more interesting than that, I'd say. Imagine a community garden.

0:44

Okay.

0:45

Which is actually quite fitting because it's an analogy CMS Garden offers.

0:48

I like it. A digital garden.

0:49

Yeah, exactly. So instead of keeping the recipe secret, so to speak, the code is out there,

0:57

and for anyone to use, change, even improve.

1:00

I see, I see.

1:01

And that right there, that's a game changer, especially for something as, well, crucial

1:06

as a government website.

1:07

Okay, I get it. So instead of one big company controlling everything, it's more like everyone

1:13

brings their best dish to the table, like a potluck.

1:16

Exactly. And that collaborative spirit, it's really at the heart of it all, and it brings

1:21

so many benefits. For starters, you get transparency.

1:24

Transparency, right.

1:25

If anyone can see how the software works, then there's the flexibility because you can

1:28

adapt it to your specific needs, and often it ends up being much more affordable, especially

1:35

for governments, I'd imagine.

1:36

That makes a lot of sense. But how does this open source thing actually work in the real

1:42

world? I mean, are there actual governments out there embracing this whole open source

1:46

thing?

1:47

Oh, absolutely.

1:48

Because let's be real, sometimes governments and technology, it's like they're speaking

1:51

completely different languages.

1:52

Oh, yeah, I've been there. But that's what makes this case study so interesting. CMS

1:57

Garten, they were actually involved with the German government.

2:00

No way.

2:01

Who made the decision to switch their official CMS to Taiwan P03.

2:05

Wow, really?

2:07

Which is an open source system.

2:08

The entire German government, that's huge.

2:10

It is a big deal. And it wasn't just a random decision. They had this whole public money

2:15

public code campaign.

2:16

Okay, I've heard of that.

2:18

Having this idea that, look, if taxpayer money is going towards building software.

2:23

It should be open.

2:24

It should be accessible to everyone.

2:26

Yeah.

2:27

It's a powerful statement.

2:28

It is. So CMS Garten was actually involved in advising the German government on this.

2:33

That's pretty impressive.

2:35

It shows they're not just talking the talk, they're walking the walk.

2:39

They're bringing their expertise to the table, helping governments navigate this whole world

2:44

of open source and make informed decisions.

2:47

So it sounds like this whole move to open source CMS, it's a win-win situation, right?

2:53

Potentially.

2:54

More transparency, maybe even lower costs for taxpayers.

2:57

But are there any downsides?

2:59

Because there's no such thing as a free lunch, right?

3:02

You're absolutely right.

3:03

There are always challenges.

3:04

One of the big ones that CMS Garten points out is, well, the constant need for development

3:09

and security updates.

3:11

Just because the software is open source doesn't mean that it's magically immune to bugs.

3:17

Or vulnerabilities.

3:18

That's true.

3:19

And I bet not everyone is as diligent as they should be when it comes to actually keeping

3:23

things updated.

3:24

Exactly.

3:25

In fact, they actually cite a rather alarming statistic.

3:29

Nearly 30% of websites out there are running on outdated versions of their CMS.

3:35

Seriously.

3:36

Which makes them so vulnerable to attacks.

3:38

30%.

3:39

That's like leaving your front door unlocked just because you think you live in a safe neighborhood.

3:43

So how do we even begin to encourage people, especially governments, to prioritize these

3:49

updates?

3:50

Because, I mean, I'm imagining with these big institutions, it's not as simple as just

3:53

clicking the update now button.

3:57

You are absolutely right.

3:58

It's a whole lot more complex.

3:59

You have budgets, approvals, and sometimes, honestly, just a lack of awareness about the

4:05

risks involved.

4:06

That makes sense.

4:07

But this is where CMS gardens work.

4:09

It's really, really interesting.

4:11

They're involved in this fascinating project called Follow the Money.

4:15

Follow the Money.

4:16

Now that sounds intriguing.

4:17

Tell me more.

4:18

What's that all about?

4:20

Just imagine a world where you could see every single piece of software your government's

4:25

using.

4:26

How much it costs, even how secure it is.

4:28

That's what Follow the Money is all about.

4:30

Radical transparency.

4:31

Okay.

4:32

I'm getting some serious sunlight is the best disinfectant vibes here, but how do they even

4:37

keep track of all of that?

4:38

I mean, it's not like governments are posting their software receipts online, are they?

4:41

Not quite.

4:42

Although that would be interesting, wouldn't it?

4:44

What's really smart about this project is they're taking all this publicly available

4:48

information and they're combining it with some really cool tech tools, like a digital

4:52

detective.

4:53

A digital detective.

4:54

Okay.

4:55

That is a catchy job title.

4:56

I'll give you that.

4:57

So spill the tea.

4:58

What's in this detective's toolkit?

5:00

Well, they're using platforms like Wikidata for starters, just to gather basic info about

5:06

government websites.

5:08

When they use this tool, it's called VersionManager.io.

5:12

Now stay with me here.

5:13

Okay.

5:14

Okay.

5:15

This tool helps them figure out which version of what CMS, you know, each website is running.

5:20

Oh, wow.

5:21

They even check for accessibility using this thing called the Lighthouse Framework.

5:25

Wow.

5:26

That's pretty comprehensive.

5:27

It is.

5:28

And all of this, all of this gets fed into a system called Directus, which you can think

5:32

of as like the detective's evidence board.

5:34

It's where all the clues come together.

5:36

So they're like piecing together the DNA of a website.

5:40

Exactly.

5:41

And what kind of insights are they getting from all this detective work?

5:43

What's the, what's the dirt?

5:45

Some pretty interesting stuff.

5:47

For one thing, they found that a whopping 70% of the websites they looked at were using

5:52

open source CMS.

5:54

70%.

5:55

That's, that's amazing.

5:57

Go open source.

5:58

But what about the other 30%?

6:00

What's hiding in the shadows?

6:01

Well, that's where things get a little, well, a little concerning.

6:05

While they don't actually name specific proprietary systems, they did find that almost 30% of those

6:10

websites, even the ones using open source CMS, were running outdated and potentially vulnerable

6:16

versions.

6:17

Remember that statistic we talked about earlier?

6:19

Oh yeah.

6:20

This project is seeing it play out in the real world.

6:22

Yikes.

6:23

That's like having a top notch security system, but forgetting to actually, you know, set

6:27

the alarm.

6:28

Kind of makes you wonder if governments aren't even keeping their software up to date, what

6:33

else might be slipping through the cracks.

6:35

Right.

6:36

Makes you think.

6:37

It does.

6:38

It does.

6:39

So what's next for Follow the Money?

6:41

Are they going global with this whole digital detective agency?

6:45

What's the plan?

6:46

They've got big plans.

6:47

They're talking about refining the prototype, adding in even more government domains.

6:50

They even want to like collaborate internationally to make it a more global thing.

6:54

So like a global watch list.

6:56

But instead of like shady individuals, it's vulnerable websites.

7:00

That's kind of cool actually.

7:02

Okay.

7:03

So we've been talking a lot about government.

7:04

We have.

7:05

But open source obviously goes way beyond that, right?

7:08

What about like other companies, organizations that are using and importantly contributing

7:14

back to this whole open source world?

7:15

I mean, it's a two way street, right?

7:17

100%.

7:18

Yeah.

7:19

And there's been this fascinating debate going on in the WordPress community.

7:21

Ooh, WordPress.

7:22

That kind of highlights this very issue.

7:24

Okay.

7:25

Yeah.

7:26

WordPress, they're like the Beyonce of content management systems, right?

7:29

Pretty much.

7:30

Everybody knows them.

7:31

They're everywhere.

7:32

What a drama.

7:33

Well, there's been some tension, right, between WordPress.org, which is the nonprofit behind

7:37

the software, and WP Engine, which is this big hosting provider.

7:42

And it really all comes down to contributions, giving back to the open source community.

7:49

And a difference in philosophy, I'd say, WordPress.org, they want everyone to do their part, to keep

7:55

the ecosystem healthy and thriving.

7:58

While WP Engine, like many hosting providers, they benefit a lot from this open source model.

8:05

But they're not necessarily contributing back at the same level.

8:09

And things really came to a head when WordPress.org decided to actually block automatic updates

8:14

for WP Engine customers.

8:15

Wait, they blocked updates?

8:17

That seems, I don't know, kind of a drastic move, isn't it?

8:20

Don't we want all websites, especially government ones, to be as secure as possible?

8:23

You think so, right.

8:25

With this move by WordPress.org, it was strategic.

8:29

It was about shining a spotlight on a much bigger issue, this idea that if you benefit

8:33

from open source, you have to contribute back in a meaningful way.

8:36

It's about making sure the whole ecosystem is sustainable for long haul.

8:40

It's kind of like a wake up call, isn't it?

8:42

We get so used to all the great things about open source, the flexibility, how affordable

8:46

it is.

8:47

It's easy to forget that it's the community effort that really makes it all happen.

8:51

You're so right.

8:52

It really is.

8:53

It's like anything else we value, it needs care, it needs attention, and yeah, it needs

8:59

a little bit of financial support too to really thrive.

9:03

This isn't just about the big companies like WP Engine.

9:07

This applies to everyone who uses and benefits from open source software, which is, let's

9:11

be honest, most of us.

9:13

What can we do?

9:14

I mean, I'm just one person listening to this.

9:16

I'm not a coding whiz, and I definitely don't have millions of dollars just lying around

9:21

to donate.

9:22

What kind of impact can I actually make?

9:24

That's the amazing thing about it.

9:25

There are so many ways to contribute, no matter your skills, even your financial situation.

9:31

You can start by simply spreading the word.

9:33

Tell your friends, tell your family, tell your coworkers about why open source is important.

9:38

Support the companies that give back to the community.

9:41

Seriously, every little bit makes a difference.

9:44

It's like that community garden analogy, right?

9:46

Whether you're planting seeds, watering the plants, or even just enjoying how beautiful

9:52

it is, your participation matters.

9:55

100%.

9:56

Hey, if you do happen to be tech savvy, even if you're just starting out, there are tons

10:00

of projects out there that would love your help.

10:02

You can improve documentation, report bugs, stuff like that.

10:05

These things might seem small, but they're actually super valuable to the community.

10:10

As we wrap up this deep dive, what's the main takeaway here?

10:14

It seems like open source software, especially when it comes to government, has this incredible

10:19

potential to bring more transparency, more security, even more efficiency.

10:24

It's a movement worth paying attention to, wouldn't you say?

10:27

Absolutely.

10:28

And it's bigger than just government or technology even.

10:31

It's really about changing how we think about knowledge, about collaboration, about doing

10:36

good for everyone.

10:37

Open source at its heart is about empowering people by sharing and creating a future that's

10:42

more equitable and accessible for everyone.

10:46

That's a powerful thought.

10:47

It's like a breath of fresh air, especially in today's digital world.

10:50

It really is.

10:52

So the next time you're on a website or downloading an app, even just liking a post online, take

10:57

a second to think about the software behind it all.

11:00

Is it open source?

11:01

Is there a whole community driving it?

11:03

And if so, how can you, in your own way, contribute to its growth?

11:08

We've seen how open source CMS can bring more transparency to those government websites.

11:13

But what about other sectors?

11:14

Could we use this model for healthcare, education, maybe even private companies?

11:19

What would that look like?

11:20

And what new challenges might come up?

11:22

Wow, that's a fantastic question.

11:23

And honestly, that deserves its own deep dive.

11:26

Maybe another time.

11:27

Something to think about.

11:28

Well, that's all the time we have for this deep dive.

11:31

We've gone deep, deep, deep into this world of open source, unpacked all the potential

11:35

Until next time, keep those minds open and those digital gardens growing.

11:35

Until next time, keep those minds open and those digital gardens growing.