[Owasp-washington] February 21st 6pm OWASP meeting

Thu Jan 24 13:46:22 EST 2008

<snarky response>
$ echo http://www.owasp.org/index.php/Washington_DC > owasp_location
$grep MD owasp_location

$grep maryland owasp_location

$
</snarky response>

While I understand our "Maryland contingents" view of things, they must 
remember that this chapter has always been the DC Owasp chapter and not 
the Maryland/Baltimore chapter. While it may have its roots in Columbia, 
the chapter has grown immensely in the past 3 years (look at the LiveO 
minicon for an example).   As such we have made changes to try and 
continue that growth moving forward.  One of those changes has been to 
rotate between locations to make sure that everyone has an equal 
opportunity to participate and be included in meetings.   While I know a 
bunch of you guys live and work in Baltimore area simply anchoring the 
meetings in Columbia would restrict our ability to gain new members from 
the DC area (you guys are complaining about heading into/around DC, same 
applies but in reverse to those who live and work in DC).   I know you 
guys want to participate and want to be a part of each meeting (who 
wouldnt!), but there are plenty of other people who would like to do the 
same but cant make it all the way up to Columbia every month. 

In all seriousness while I would love to find locations in DC proper, 
but I have not been able to secure a host in the district. So far we 
have only been able to find stuff in Columbia (thanks to Aspect Security 
and Sourcefire), and Arlington (SRA), and Alexandria (Grant Thorton 
LLP).  That being said we have a large and well distributed group 
membership, one which I try to do my best to meet its needs.  That means 
I wont exclude locations because it is inconvenient for myself  
(Columbia has been and always will be a long drive for me) or others. So 
simply because a host is on the outer rings of DC (near metro stops or I 
dont consider them) I wont ignore the chance to bring a new host into 
the fold.  With each new host we introduce to owasp, we have another 
chance to increase the relevance and participation in owasp as a whole. 

I have multiple goals with this chapter (yup you guessed it, im going to 
outline those right now)...

1. Have relevant, timely, and interesting topics discussed, presented, 
and debated.
2. Continue to push web application security into as many dark crevices 
as possible. (this includes host organizations, and attendee's work places)
3. Try to accommodate as many people as possible (not always going to 
happen) within our chapter membership. (which is why we went to the 
rotating of geographic locations between MD and NOVA... neither of which 
are in the District of Columbia for those who are keeping track)
4. Have fun

I have floated the idea in the past that for those folks who live/work 
in Baltimore/MD it might suit their desires and needs to start up 
Baltimore/MD chapter.  This could potentially ease the burden of 
commuting to and from DC chapter meetings for those who live in that 
area.   (just dont ask me to organize it!)  If that doesn't work out, 
the plan still stands to rotate between Columbia and the DC area 
(meaning near a metro stop).   I have absolutely no problem if someone 
chooses to startup a Baltimore or Maryland chapter, in fact id be more 
then willing to help them as much as I can to get it going.  Just be 
aware that it is a good amount of work sometimes, and it can get rather 
frustrating and stressful dealing with trying to find new hosts, 
sponsors, and especially topics of discussion.

And as one last parting shot..  NOVA chapter == Reston  which is no 
where near a metro stop, and is an absolute PITA to get to if you 
live/work in DC area (worse then going to Columbia from DC).

Andre Ludwig

Tracy, Edward [USA] wrote:
> * PGP Signed by an unverified key: 01/24/08 at 12:34:40
> No offense taken.
>  
> Arlington = Northern Virginia = they have their own chapter, i just 
> thought the MD chapter meetings would be in MD.
>
> ------------------------------------------------------------------------
> *From:* Patrick Harrison [mailto:patrick.harrison at revolutionhealth.com]
> *Sent:* Tuesday, January 22, 2008 11:41 PM
> *To:* Andre Ludwig; Tracy, Edward [USA]
> *Cc:* owasp-washington at lists.owasp.org
> *Subject:* RE: [Owasp-washington] February 21st 6pm OWASP meeting
>
>
>
> Arlington/ Alexandria = Metro!   Columbia - book a flight into BWI and 
> than maybe a cab?
>
> Sorry, I just could not resist!  ;)
>
> BTW, if you guys want to make the trip, I can host at my new office :)
>
> http://www.aware.co.th/contact_map.htm
>
> -Patrick
>
> -----Original Message-----
> From: owasp-washington-bounces at lists.owasp.org on behalf of Andre Ludwig
> Sent: Tue 1/22/2008 4:04 PM
> To: Tracy, Edward [USA]
> Cc: owasp-washington at lists.owasp.org
> Subject: Re: [Owasp-washington] February 21st 6pm OWASP meeting
>
> Yeah the classic tug of war for location...
>
> *sigh*
>
> I will never win that one will I?  ;)
>
> I will see about changing for the 5th as it seems that the presenters
> will at least be available.  Seeing how the presentations are pretty
> much done, its not like you guys need the time to slave over power point
> for a week or two.
>
> That being said I will give the new host a chance, if for what ever
> reason they cant host it we can move it to Columbia. (that is the fair
> thing to do at this point) That being said if it is in the DC region
> this month, I will look to have the next month in Columbia (and vice
> versa).   If for what ever reason this is an issue for the presenters,
> let me know so we can plan around those issues.
>
> Andre Ludwig
>
> Tracy, Edward [USA] wrote:
> > > Old Signed by an unverified key: 01/22/08 at 15:44:14
> > What about Tuesday, Feb 5 or that Thurs? I want a meeting sooner
> > rather than later.
> > 
> > Also, I'd rather go to Columbia. Jason at SourceFire told me he'd like
> > to bring a few of his guys. Columbia = close. Arlington = far.
> > 
> > -ed
> > 
> >
> > ------------------------------------------------------------------------
> > *From:* owasp-washington-bounces at lists.owasp.org
> > [mailto:owasp-washington-bounces at lists.owasp.org] *On Behalf Of
> > *Arshan Dabirsiaghi
> > *Sent:* Tuesday, January 22, 2008 3:40 PM
> > *To:* Andre Ludwig; owasp-washington at lists.owasp.org
> > *Subject:* Re: [Owasp-washington] February 21st 6pm OWASP meeting
> >
> > Jeff and I will be in NYC that day.
> >
> > ------------------------------------------------------------------------
> > *From:* owasp-washington-bounces at lists.owasp.org on behalf of Andre 
> Ludwig
> > *Sent:* Tue 1/22/2008 3:31 PM
> > *To:* owasp-washington at lists.owasp.org
> > *Subject:* [Owasp-washington] February 21st 6pm OWASP meeting
> >
> > Tentative schedule is as follows.
> >
> > Feburary 21st 6pm
> > Location: TBD (hearing back from a potential new host tonight, if they
> > can host it will be located somewhere in Alexandria {1 block from the
> > metro})
> >
> > Presentations
> >
> > Jeff Williams - ESAPI Framwork (BRING YOUR DEVELOPERS!)
> > Tracy Edwards - DISA STIG on application security
> >
> > Backup Presentations (in case Tracy or Jeff cant make it)
> > Arshan Dabirsiaghi - Content restrictions
> > Andre Ludwig - Some nonsensical ranting on some topic or other.  (most
> > likely how web applications suck ;) , and the current shift towards http
> > based botnet C&C mechanisms)
> >
> > As this will be a new host, I do not know how many they can handle. As
> > such I would like to ask everyone to respond either to the list or
> > myself privately so I can keep a tab on how many we should expect.  I
> > will keep the list posted on the location as it may still change at this
> > point.
> >
> > For those listed, if you can send me presentations or outlines asap that
> > would be awesome.  If for what ever reason you want to change your
> > presentation to something else, cancel, or vanish into a cloud of smoke
> > let me know ahead of time so I can do the same.
> >
> > Andre Ludwig
> >
> >
> > _______________________________________________
> > Owasp-washington mailing list
> > Owasp-washington at lists.owasp.org
> > https://lists.owasp.org/mailman/listinfo/owasp-washington
> >
> > * Tracy Edward <tracy_edward at bah.com>
> > * Issuer: BAH - Unverified
> > 
>
> _______________________________________________
> Owasp-washington mailing list
> Owasp-washington at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-washington
>
> * Tracy Edward <tracy_edward at bah.com>
> * Issuer: BAH - Unverified
>  