[Owasp-board] [GPC] FW: OWASP Top 10 at Lulu
dave.wichers at owasp.org
Wed Oct 14 19:19:56 UTC 2009
I'm OK with moving CLASP towards the bottom. Is there any way to create a
'historical' section? Note that Lulu is not the only way of downloading
things. They should be able to download CLASP from the wiki. If not, we
should fix that. Do you think people are still going to buy the hardcopy
Regarding SAMM, if we could make it even more clear, somehow, of how to
download it, that would be great. Don't' know if that is possible.
From: Pravir Chandra [mailto:chandra at owasp.org]
Sent: Wednesday, October 14, 2009 2:48 PM
To: Dave Wichers
Cc: paulo coimbra; Kate Hartmann; owasp-board at lists.owasp.org; Global
Subject: Re: [GPC] FW: OWASP Top 10 at Lulu
I would suggest we actually leave CLASP up there, just move it way down the
list. I know SAMM overtakes it in many ways, but there is still some
exclusive information in CLASP (and existing people that reference it), so
I've promised to leave it available indefinitely.
Also, the reason I don't have a download available from the Lulu site is
that I used a very different PDF to generate the book at Lulu. It's got
extra pages (to account for the cover and lead-in like a normal book) which
would be annoying in a downloadable PDF. I also made it very high-res (>80MB
if I recall correctly) so that the prints look incredibly sharp. For both
these reasons, I intentionally left the Lulu download unavailable and tried
to put instructions to visit http://www.opensamm.org prominently in the
description so that people could find the free download.
What do you guys think?
On Wed, Oct 14, 2009 at 9:15 AM, Dave Wichers <dave.wichers at owasp.org>
The Top 10 2007 download at Lulu works! Thanks for that.
When you have time, can you make copies of SAMM, the OWASP Secure Software
Contract Annex, and the OWASP Developer's Guide downloadable? They are the
only 3 still missing.
Also, the Top 10 that you can't download doesn't have the pretty cover
displayed at Lulu. Does anyone have a copy of that pretty cover they can
send to me? I'd like to use it for the update to the Top 10 I am working on.
I also notice that the Lulu list is kind of long and unorganized. Can we
order it somehow by maybe what's most important?
I think we should at least drop things that we don't need
any more like:
. The BETA version of ASVS since the release version is there
. Version 2 of the testing Guide since we have version 3 listed now
. Dropping CLASP since we now have SAMM
. Dropping the Code Review Beta book since the release version is
. Probably just drop the OWASP World and OWASP Spoc docs.
. Drop the OWASP Eval and Cert Crieria book since it was never
. Drop the Top 10 / Testing /Legal 07 book since The top 10 and
testing guide are both newer or about to become newer.
And then maybe list the Top 10, ASVS, the 3 guides and SAMM as the initial
docs and then prioritize the rest after them.
No hurry on this but a little cleanup would be useful, by whomever has time
to do this.
Much appreciated. Dave
From: paulo coimbra [mailto:paulo.coimbra at owasp.org]
Sent: Wednesday, October 14, 2009 11:19 AM
To: Kate Hartmann; dave.wichers
Cc: Global Projects Committee; owasp-board at lists.owasp.org
Subject: Re: FW: OWASP Top 10 at Lulu
Hello Kate, Dave,
I've tried to make the TOP 10 downloadble file available but I didn't test
it. So, I don't know if it's working or not.
I am having massive problems with the Windows Vista and with the internet
access and this may prevent me from going online for a while.
Dinis has also tried to solve the problem without sucess.
I apologise for this. I am also a bit stressed without knowing how to solve
I will let you know as soon as I have handled this question.
On Wed, Oct 14, 2009 at 4:01 PM, Kate Hartmann <kate.hartmann at owasp.org>
Can you change lulu for dave?
OWASP Operations Director
9175 Guilford Road
Columbia, MD 21046
kate.hartmann at owasp.org
From: Dave Wichers [mailto:dave.wichers at owasp.org]
Sent: Tuesday, October 13, 2009 9:40 PM
To: paulo.coimbra at owasp.org
Cc: Kate Hartmann
Subject: OWASP Top 10 at Lulu
Can either one of you get me a softcopy of the Top 10 that is a lulu that
has the pretty cover? I need this right away if possible.
Also, that version can only be purchased, not downloaded. Can we make it
downloadable as well? Everything we have at lulu should be downloadable as
well as printable. Can you check to make sure we can do that for all books
we have, and fix any that aren't? There's no hurry on this.
OWASP Project Manager
Global-projects-committee mailing list
Global-projects-committee at lists.owasp.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Owasp-board