<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
span.EmailStyle18
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext="edit">
  <o:idmap v:ext="edit" data="1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple>

<div class=WordSection1>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Please take a look at Michael’s comments.<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Kate Hartmann<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>OWASP Operations Director<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>9175 Guilford Road<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Suite 300<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Columbia, MD  21046<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>301-275-9403 <o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>kate.hartmann@owasp.org<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Skype:  kate.hartmann1 <o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>

<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>

<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Michael Coates
[mailto:michael.coates@owasp.org] <br>
<b>Sent:</b> Monday, July 12, 2010 11:17 AM<br>
<b>To:</b> owasp-board@lists.owasp.org<br>
<b>Cc:</b> Kate Hartmann<br>
<b>Subject:</b> Remove "leaders-list" from Google Hacking Discussion<o:p></o:p></span></p>

</div>

<p class=MsoNormal><o:p> </o:p></p>

<p>[cc'ing kate for approval to moderated board list]<o:p></o:p></p>

<p><o:p> </o:p></p>

<p>Board,<o:p></o:p></p>

<p>I encourage you to quickly resolve this issue at today's meeting.  At
the current moment the OWASP leaders list has very little activity (which is
another issue in itself) as a result, the back and forth squabbling over the
google hacking project is dominating the list.  While I think it is
important to include the necessary parties to resolve the issue - the leaders
list should not be one of those groups.  If an additional audience is
needed then consider involving the global committees.<o:p></o:p></p>

<p>The leaders list represents both the "leaders" of OWASP, but also
about 85% (just a guess) of the active owasp population. When the leaders list
is copied on a negative thread that contains confusion and a back and forth
bickering it can result in an overall negative view of OWASP as a whole. When
in reality, this is just a small issue that needs to be handled.<o:p></o:p></p>

<p>It sounds like there is a process in place to review this issue. Let's move
through that process with the necessary parties and then announce the results
to the leaders list when complete. Until then I would encourage an email to the
involved parties asking them to discuss the issue in the appropriate forum and
not the leaders list.<o:p></o:p></p>

<p><o:p> </o:p></p>

<p>Thanks!<o:p></o:p></p>

<p>Michael<o:p></o:p></p>

<p><o:p> </o:p></p>

<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'>

<p class=MsoNormal>---------- Forwarded message ----------<br>
From: "Tom Brennan - OWASP" <<a href="mailto:tomb@owasp.org"
target="_blank">tomb@owasp.org</a>><br>
Date: Jul 12, 2010 5:01 AM<br>
Subject: Re: [Owasp-leaders] [GPC] Update Needed<br>
To: "Christian Heinrich" <<a
href="mailto:christian.heinrich@owasp.org" target="_blank">christian.heinrich@owasp.org</a>>,
<<a href="mailto:global-projects-committee-bounces@lists.owasp.org"
target="_blank">global-projects-committee-bounces@lists.owasp.org</a>>,
"Jason Li" <<a href="http://jason.li" target="_blank">jason.li</a>@<a
href="http://owasp.org" target="_blank">owasp.org</a>><br>
<br>
<br>
Christian,  There was never a complaint from anyone @ Google to me
personally.<br>
<br>
Today is the July board call at noon est 1-866-534-4754 Code: "OWASP"
(69277). and we will discuss this issue as old business join us, listen in and
speak up, very transparent.<br>
<br>
<br>
<br>
<br>
<br>
<br>
Semper Fi,<br>
<br>
Tom Brennan<br>
OWASP Foundation Inc.<br>
Tel: (973)506-9303<br>
<br>
-----Original Message-----<br>
From: Christian Heinrich <<a href="mailto:christian.heinrich@owasp.org"
target="_blank">christian.heinrich@owasp.org</a>><br>
Sender: <a href="mailto:global-projects-committee-bounces@lists.owasp.org"
target="_blank">global-projects-committee-bounces@lists.owasp.org</a><br>
Date: Mon, 12 Jul 2010 14:33:49<br>
To: Jason Li<<a href="http://jason.li" target="_blank">jason.li</a>@<a
href="http://owasp.org" target="_blank">owasp.org</a>><br>
Cc: OWASP Foundation Board List<<a href="mailto:owasp-board@lists.owasp.org"
target="_blank">owasp-board@lists.owasp.org</a>>; <<a
href="mailto:owasp-google-hacking@lists.owasp.org" target="_blank">owasp-google-hacking@lists.owasp.org</a>>;
<<a href="mailto:owasp-leaders@lists.owasp.org" target="_blank">owasp-leaders@lists.owasp.org</a>>;
Global Projects Committee<<a
href="mailto:global-projects-committee@lists.owasp.org" target="_blank">global-projects-committee@lists.owasp.org</a>><br>
Subject: Re: [GPC] Update Needed<br>
<br>
Jason,<o:p></o:p></p>

<p><span style='color:#500050'><br>
On Mon, Jul 12, 2010 at 12:22 PM, Jason Li <<a href="http://jason.li"
target="_blank">jason.li</a>@<a href="http://owasp.org" target="_blank">owasp.org</a>>
wrote:<br>
> I never said that you lied...</span><o:p></o:p></p>

<p class=MsoNormal>The correct course of action would have been that Dinis
realized they<br>
bypassed me with their complaint and subsequently forwarded it to be<br>
so it could be handled with discretion.<br>
<br>
Furthermore, there are similarities to their complaint to what was put<br>
out on twitter by others i.e.<br>
<a href="http://twitter.com/TownyRoberto/status/17235012717" target="_blank">http://twitter.com/TownyRoberto/status/17235012717</a>
and that they have<br>
stolen the identities of real people i.e.<br>
<a href="https://lists.owasp.org/pipermail/owasp-leaders/2010-July/003293.html"
target="_blank">https://lists.owasp.org/pipermail/owasp-leaders/2010-July/003293.html</a><br>
<br>
Two high profile people had nominated themselves to review this OWASP<br>
Project i.e. Chris Gates (metasploit) and PDP (GNUCITIZEN) i.e. this<br>
isn't a single evaluator.<o:p></o:p></p>

<p><span style='color:#500050'><br>
> As I said, the message was not about the Google Hacking project, but<br>
> about shortcomings of the ...</span><o:p></o:p></p>

<p class=MsoNormal>In light of the assumptions of the complaint from Tom
Brennan that he<br>
received from Google (i.e. August 2008) I won't release the source<br>
code to the GPC repository either until their complaint was clarified<br>
as it would appear that I was encouraging people to violate Google's<br>
Terms of Service and therefore OWASP would lost its standing with<br>
Google.<br>
<br>
<a
href="https://lists.owasp.org/pipermail/owasp-australia/2010-June/000285.html"
target="_blank">https://lists.owasp.org/pipermail/owasp-australia/2010-June/000285.html</a><br>
was correct i.e. I was busy as I was considering exploring both the<br>
AJAX Search API (again) and porting to the Bing SOAP service or<br>
officially closing the project down which I intended to present at the<br>
recent OWASP NL Meeting.<br>
<br>
Due to <a
href="https://lists.owasp.org/pipermail/owasp-australia/2010-June/thread.html"
target="_blank">https://lists.owasp.org/pipermail/owasp-australia/2010-June/thread.html</a>,<br>
the agreement that I had reached with Kate and Matt prior to departing<br>
Australia (i.e. 24 June) was that this incident would be resolved when<br>
I returned to Australia (i.e. 9 July)<br>
<br>
The firestorm has ensured because rather then follow the agreement<br>
with Kate, particular senior members of the OWASP community (excluding<br>
Andrew van der Stock) have tried to assist and when I have declined<br>
their offer that have in turn insisted resulting in it backfiring as I<br>
expected resulting in more effort for everyone..<o:p></o:p></p>

<p><span style='color:#500050'><br>
>> 2. Create additional metadata which communicates that unique projects
with a limited shelf life,...</span><o:p></o:p></p>

<p class=MsoNormal>Unless the GPC put the roadmap on the same page as<br>
<a
href="http://www.owasp.org/index.php?title=Category:OWASP_Google_Hacking_Project"
target="_blank">http://www.owasp.org/index.php?title=Category:OWASP_Google_Hacking_Project</a><br>
then people won't see this at a glance.<o:p></o:p></p>

<p><span style='color:#500050'><br>
>> 4. Reconsider Andrew van der Stock's proposal to become a full time
employee<br>
><br>
> I can't really ...</span><o:p></o:p></p>

<p class=MsoNormal>I believe he wanted USD$60K<br>
<br>
--<o:p></o:p></p>

<p><span style='color:#500050'>Regards,<br>
Christian Heinrich - <a href="http://www.owasp.org/index.php/user:cmlh"
target="_blank">http://www.owasp.org/index.php/user:cmlh</a><br>
OWASP "Google Hacking" Projec...</span><o:p></o:p></p>

<p><span style='color:#500050'>Global-projects-committee mailing list</span><o:p></o:p></p>

<p class=MsoNormal><a href="mailto:Global-projects-committee@lists.owasp.org"
target="_blank">Global-projects-committee@lists.owasp.org</a><br>
<a href="https://lists.owasp.org/mailman/listinfo/global-projects-committee"
target="_blank">https://lists.owasp.org/mailman/listinfo/global-projects-committee</a><o:p></o:p></p>

<p><span style='color:#500050'>_______________________________________________<br>
OWASP-Leaders mailing list<br>
OWASP-Leaders@lists.owasp...</span><o:p></o:p></p>

</blockquote>

</div>

</body>

</html>