[Owasp-board] Fwd: OWASP .net email addresses and domain

Thu Nov 19 21:33:21 UTC 2015

Sorry. Meant to capture the data including aliases. You can see both the
Contact Information (marked "Secondary") and the alias show owasp.net
addresses.

Noreen Whysel
Community Manager
OWASP Foundation

On Thu, Nov 19, 2015 at 4:31 PM, Noreen Whysel <noreen.whysel at owasp.org>
wrote:

> I've never used owasp.net so I am not sure how it is showing up that way
> in your google contacts. I only know from creating new email addresses that
> Google assigns an alias at owasp.net any time you create a new account.
> It seems to do this even if you try to set a different secondary email.
>
>
> 
>
> Noreen Whysel
> Community Manager
> OWASP Foundation
>
> On Thu, Nov 19, 2015 at 4:20 PM, Martin Knobloch <
> martin.knobloch at owasp.org> wrote:
>
>> Hi Tobias, et all,
>>
>> Cleaning up my old computer, I came across the "OWASP.net" case. I am
>> still finding a lot of "@owasp.net"  email addresses for owasp members.
>> See screen print attached, when looking for owasp.net in the OWASP
>> mailing.
>>
>> So...? How comes staff does use @owasp.net email addresses?
>>
>> Cheers,
>> -martin
>>
>>
>>
>> On Sun, Aug 30, 2015 at 11:33 PM, Tobias <tobias.gondrom at owasp.org>
>> wrote:
>>
>>> Hi Matt,
>>>
>>> thank you for the clarification.
>>> I was a bit confused by the comment that some of our configuration would
>>> refer to owasp.net.
>>>
>>> In that case we should obviously remove all owasp.net aliases in Google
>>> admin.
>>>
>>> Whether we want to go after owasp.net, I leave to the community and
>>> board.
>>> So far we have not misses it and I don't know the amount of legal fees
>>> we would have to pay to get this resolved.
>>>
>>> Best regards, Tobias
>>>
>>>
>>> Ps.: however, please note, that if anyone uses owasp.net in a way that
>>> it would infringe our trademark, in that case we must enforce our
>>> trademark. At the moment, I assume that is not the case as it points to an
>>> empty non-related page.
>>>
>>>
>>>
>>>
>>> On 30/08/15 19:41, Matt Tesauro wrote:
>>>
>>> Tobias,
>>>
>>> As far as I know (and can tell) the Foundation never owned that domain
>>> so it wasn't able to be lost.  Kate or maybe Jeff Williams and/or Dave
>>> Wichers may have info that pre-dates my time with OWASP.
>>>
>>> The board can decide whether owning it is worth the time and effort.  I
>>> don't have a strong opinion one way or the other.
>>>
>>> Cheers!
>>>
>>> --
>>> -- Matt Tesauro
>>> OWASP WTE Project Lead
>>> http://www.owasp.org/index.php/Category:OWASP_Live_CD_Project
>>> http://AppSecLive.org - Community and Download site
>>> OWASP OpenStack Security Project Lead
>>> https://www.owasp.org/index.php/OWASP_OpenStack_Security_Project
>>>
>>> On Sun, Aug 30, 2015 at 12:32 PM, Tobias <tobias.gondrom at owasp.org>
>>> wrote:
>>>
>>>> Hi Matt and Paul,
>>>>
>>>> could you please clarify whether we lost that domain or what happened
>>>> and make a proposal what you think we should do about it?
>>>>
>>>> Best regards, Tobias
>>>>
>>>>
>>>>
>>>> On 19/08/15 23:43, Noreen Whysel wrote:
>>>>
>>>> I have noticed on the Google Admin site that a lot of emails are set up
>>>> to have the owasp.net address as an alias, FYI.
>>>>
>>>> Noreen Whysel
>>>> Community Manager
>>>> OWASP Foundation
>>>>
>>>> On Wed, Aug 19, 2015 at 5:05 PM, Martin Knobloch <
>>>> martin.knobloch at owasp.org> wrote:
>>>>
>>>>> Thanks for taking this up!
>>>>>
>>>>> Cheers,
>>>>> -martin
>>>>>
>>>>> On Wed, Aug 19, 2015 at 10:37 PM, Matt Tesauro <matt.tesauro at owasp.org
>>>>> > wrote:
>>>>>
>>>>>> Yeah, I replied to Martin's first email which regrettably had a bad
>>>>>> address.  Here's what didn't make it to the Board list:
>>>>>>
>>>>>> [snip]
>>>>>> Martin,
>>>>>>
>>>>>> From what I can tell, we never owned it or it expired before Mark
>>>>>> Bristow consolidated all the domains the Foundation owned years ago.
>>>>>>
>>>>>> I say that based on the fact that Mark setup a bunch of conference
>>>>>> domains with GoDaddy back around 2009-ish when he was part of the
>>>>>> conference committee.  Either at that time, or when the Foundation migrated
>>>>>> off hardware at Aspect's headquarters, the Foundation owned domain names
>>>>>> were consolidated at GoDaddy.
>>>>>>
>>>>>> I just logged in to that account and no owasp.net is present and all
>>>>>> the domains are set to auto-renew so I doubt we let ownership slip.
>>>>>>
>>>>>> Whois for the current owner is at:
>>>>>> http://www.networksolutions.com/whois/results.jsp?domain=owasp.net
>>>>>>
>>>>>> HTH
>>>>>> [snip]
>>>>>>
>>>>>> --
>>>>>> -- Matt Tesauro
>>>>>> OWASP WTE Project Lead
>>>>>> http://www.owasp.org/index.php/Category:OWASP_Live_CD_Project
>>>>>> http://AppSecLive.org - Community and Download site
>>>>>> OWASP OpenStack Security Project Lead
>>>>>> https://www.owasp.org/index.php/OWASP_OpenStack_Security_Project
>>>>>>
>>>>>> On Wed, Aug 19, 2015 at 3:35 PM, Josh Sokol <josh.sokol at owasp.org>
>>>>>> wrote:
>>>>>>
>>>>>>> This sounds like something for Matt to look into so I'm adding him.
>>>>>>> Looks like there was a wordpress site there that has gotten taken over by a
>>>>>>> domain spammer.  Not good if we actually own owasp.net.
>>>>>>>
>>>>>>> ~josh
>>>>>>>
>>>>>>> On Wed, Aug 19, 2015 at 3:17 PM, Martin Knobloch <
>>>>>>> martin.knobloch at owasp.org> wrote:
>>>>>>>
>>>>>>>>
>>>>>>>> Hi all,
>>>>>>>>
>>>>>>>> I noticed quite a few are using @owasp.net email addresses. Just
>>>>>>>> had a look on http://owasp.net, but that has nothing to do with
>>>>>>>> OWASP.
>>>>>>>> How comes?
>>>>>>>>
>>>>>>>> Cheers,
>>>>>>>> -martin
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> Owasp-board mailing list
>>>>>>>> Owasp-board at lists.owasp.org
>>>>>>>> https://lists.owasp.org/mailman/listinfo/owasp-board
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Met vriendelijke groet,
>>>>> -martin
>>>>>
>>>>> ___________________
>>>>> Martin Knobloch
>>>>> OWASP AppSec-Eu/Research 2015 Conference Chair
>>>>> OWASP Netherlands Chapter Leader
>>>>>
>>>>> Email: martin.knobloch at owasp.org
>>>>> Mobile: +31623226933
>>>>> Twitter:  @AppsScE
>>>>>             @owasp_NL
>>>>> Web:    http://owasp.nl
>>>>>             http://appsec.eu
>>>>>
>>>>> _______________________________________________
>>>>> Owasp-board mailing list
>>>>> Owasp-board at lists.owasp.org
>>>>> https://lists.owasp.org/mailman/listinfo/owasp-board
>>>>>
>>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Owasp-board mailing listOwasp-board at lists.owasp.orghttps://lists.owasp.org/mailman/listinfo/owasp-board
>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>> --
>> Met vriendelijke groet,
>> -martin
>>
>> ___________________
>> Martin Knobloch
>> OWASP AppSec-Eu/Research 2015 Conference Chair
>> OWASP Netherlands Chapter Leader
>>
>> Email: martin.knobloch at owasp.org
>> Mobile: +31623226933
>> Twitter:  @AppsScE
>>             @owasp_NL
>> Web:    http://owasp.nl
>>             http://appsec.eu
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20151119/120cf07e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screen Shot 2015-11-19 at 4.30.26 PM.png
Type: image/png
Size: 32904 bytes
Desc: not available
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20151119/120cf07e/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screen Shot 2015-11-19 at 4.31.59 PM.png
Type: image/png
Size: 51677 bytes
Desc: not available
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20151119/120cf07e/attachment-0003.png>