[Owasp-board] FOSDEM 2009 interview questions

Tue Feb 3 18:24:12 UTC 2009

Dear Matteo,

Please see attached a word file with my contribution to answer the FOSDEM
2009 interview questions.

Many thanks, best regards,

Paulo Coimbra,

OWASP Project Manager

> >-----Original Message-----

> >From: Dave Wichers [mailto:dave.wichers at owasp.org]

> >Sent: quarta-feira, 28 de Janeiro de 2009 20:21

> >To: paulo.coimbra at owasp.org; 'OWASP Foundation Board List'

> >Cc: 'Matteo Meucci';

> >global_tools_and_project_committee at lists.owasp.org

> >Subject: RE: [Owasp-board] FOSDEM 2009 interview questions

> >

> >I think you should respond.

> >

> >You can describe the Season of Quality goals that we are thinking

> >about and

> >then indicate we plan on another Season later in the year that's more

> >of the

> >traditional variety, except we plan to have more directed activities

> >during

> >that season, i.e., specific requests for particular projects to be

> >worked

> >on.

> >

> >-Dave

> >

> >-----Original Message-----

> >From: owasp-board-bounces at lists.owasp.org

> >[mailto:owasp-board-bounces at lists.owasp.org] On Behalf Of Paulo

> >Coimbra

> >Sent: Wednesday, January 28, 2009 11:36 AM

> >To: 'OWASP Foundation Board List'

> >Cc: 'Matteo Meucci';

> >global_tools_and_project_committee at lists.owasp.org

> >Subject: Re: [Owasp-board] FOSDEM 2009 interview questions

> >

> >Board,

> >

> >I've received the kind challenge that you can see below.

> >

> >Should I take a stab at responding? Do you have any other directions

> >for me

> >to follow to?

> >

> >Thanks,

> >

> >Paulo Coimbra,

> >OWASP Project Manager

> >

> >> >-----Original Message-----

> >> >From: Matteo Meucci [mailto:matteo.meucci at owasp.org]

> >> >Sent: quarta-feira, 28 de Janeiro de 2009 15:15

> >> >To: Paulo Coimbra

> >> >Subject: Fwd: FOSDEM 2009 interview questions

> >> >

> >> >Hi Paulo,

> >> >next 8th February I'll be at FOSDEM to present the new OWASP

> >Testing

> >> >Guide:

> >> >http://www.fosdem.org/2009/schedule/events/643

> >> >

> >> >I received this mail from the organization.

> >> >Would you like to answer to the questions regarding SoC, telling

> >that

> >> >you answer that questions because you are the OWASP manager?

> >> >

> >> >Thanks,

> >> >Mat

> >> >

> >> >

> >> >---------- Forwarded message ----------

> >> >From:  <kvervloesem at fosdem.org>

> >> >Date: Tue, Jan 27, 2009 at 10:19 AM

> >> >Subject: FOSDEM 2009 interview questions

> >> >To: matteo.meucci at owasp.org

> >> >

> >> >

> >> >Hi Matteo,

> >> >

> >> >Since you will be speaking at the FOSDEM conference the 7th and 8th

> >of

> >> >February 2009, we would like to perform a little e-mail interview

> >with

> >> >you.

> >> >

> >> >The resulting article will be published on the FOSDEM website in

> >the

> >> >"interviews" section (http://fosdem.org/2009/interviews).

> >> >We are planning to release it under the Creative Commons

> >Attribution

> >> >2.0 license, Belgian jurisdiction. If this bothers you in any way,

> >> >please let us know.

> >> >

> >> >Here are our questions - any answers, even short ones, are

> >> >appreciated.

> >> >

> >> >1. Could you briefly introduce yourself?

> >> >

> >> >2. What will your talk be about, exactly?

> >> >

> >> >3. What do you hope to accomplish by giving this talk ? What do you

> >> >expect?

> >> >

> >> >4. What's the target audience for the OWASP Testing Guide?

> >> >

> >> >5. How would you describe the OWASP Testing Guide in a few

> >sentences?

> >> >

> >> >6. What are the biggest differences between v2 and v3 of the OWASP

> >> >Testing

> >> >Guide?

> >> >

> >> >7. How successful was the OWASP Summer of Code 2008? How many

> >> >participants

> >> >were there? What were the most important accomplishments during

> >this

> >> >period? What are the differences with the OWASP Spring Of Code 2007

> >> >and

> >> >OWASP Autumn Of Code 2006?

> >> >

> >> >8. What can we expect from the OWASP Winter of Code 2009?

> >> >

> >> >9. You have more than 8 years of experience in information

> >security.

> >> >What

> >> >have you seen changing in this period with respect to web

> >application

> >> >security? Are most types of vulnerabilities still the same or are

> >> >there

> >> >any genuinely new developments?

> >> >

> >> >10. What do you consider the most underestimated risk for web

> >> >applications

> >> >in the near future?

> >> >

> >> >Thank you for your time answering the questions above.

> >> >

> >> >Koen

> >> >

> >> >--

> >> >Koen Vervloesem

> >> >kvervloesem at fosdem.org

> >> >http://fosdem.org/2009/

> >> >

> >> >

> >> >

> >> >

> >> >--

> >> >Matteo Meucci

> >> >OWASP-Italy Chair, CISSP, CISA

> >> >http://www.owasp.org/index.php/Italy

> >> >OWASP Testing Guide lead

> >> >http://www.owasp.org/index.php/Testing_Guide

> >

> >_______________________________________________

> >Owasp-board mailing list

> >Owasp-board at lists.owasp.org

> >https://lists.owasp.org/mailman/listinfo/owasp-board

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20090203/b9959d19/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Matteo1.doc
Type: application/msword
Size: 32256 bytes
Desc: not available
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20090203/b9959d19/attachment-0002.doc>