<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Yep<br><br>Eoin Keary<div>Owasp Global Board</div><div>+353 87 977 2988</div><div><br></div></div><div><br>On 28 Mar 2014, at 20:22, Josh Sokol <<a href="mailto:josh.sokol@owasp.org">josh.sokol@owasp.org</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr"><div>Michael and Eoin?  Your votes please?<br><br></div>~josh<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Mar 27, 2014 at 4:47 PM, Josh Sokol <span dir="ltr"><<a href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div>I believe that's a "YES" vote from:<br><br></div>Josh<br></div>Tom<br>
Jim<br></div>Fabio<br><br></div>Please let me know if I misinterpreted your "Aye" response Tom or your "I support the changes suggested to the bylaws" Fabio as a vote in favor.  Michael, Tobias, and Eoin?  Do you have a vote in favor or against?<span class="HOEnZb"><font color="#888888"><br>

<br></font></span></div><span class="HOEnZb"><font color="#888888">~josh<br></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Mar 27, 2014 at 7:55 AM, Tom Brennan - proactiveRISK <span dir="ltr"><<a href="mailto:tomb@proactiverisk.com" target="_blank">tomb@proactiverisk.com</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto"><div>Aye.<br><br>Tom Brennan<div><a href="tel:9732020122" value="+19732020122" target="_blank">9732020122</a></div>

</div><div><div><div><br>On Mar 27, 2014, at 7:48 AM, Josh Sokol <<a href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>> wrote:<br><br></div><blockquote type="cite"><div><p dir="ltr">
I don't believe my proposal has changed.</p>
<p dir="ltr">Proposal: Add a new section to the OWASP Bylaws.</p>
<p dir="ltr">SECTION 4.07  Participation. Participation in OWASP activities (conferences, meetings, mailings lists, projects, etc) does not require membership, but is subject to adherence to the OWASP Code of Ethics, and OWASP leaders may revoke the privilege of participation to those who choose not to abide by that code.  Notification of such a revocation must be made to the individual in writing, with the OWASP Board of Directors CC’d for inclusion in the Foundation records.  If an individual believes that this revocation is unjustified, then they have the option to appeal the decision by notifying the OWASP Board of Directors in writing within 14 days of the original notification.</p>



<div class="gmail_quote">On Mar 27, 2014 5:33 AM, "Tobias" <<a href="mailto:tobias.gondrom@owasp.org" target="_blank">tobias.gondrom@owasp.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <div>Hi Josh and Jim, <br>
      great, we have a second. <br>
      @Josh: would you mind to spell out the proposal again just in case
      any of the specific wording has changed during the previous
      discussion? <br>
      So that the board can focus the discussion and we could come to a
      vote. <br>
      Thanks, Tobias<br>
      <br>
      <br>
      <br>
      On 24/03/14 21:50, Jim Manico wrote:<br>
    </div>
    <blockquote type="cite">
      
      Ok I second your motion and your notion, Josh.  Sorry, been
      listening to Smokey Robinson. It could have been worse, I could
      have said something like "If you feel like loving me, if you have
      the notion, I'll second that emotion" but decided against it.<br>
      <br>
      Aloha from Mumbai.<br>
      Jim<br>
      <br>
      <br>
      <br>
      <div>On 3/24/14, 7:15 PM, Josh Sokol
        wrote:<br>
      </div>
      <blockquote type="cite">
        <div dir="ltr">
          <div>Bueller?  Bueller?<br>
            <br>
            Can I please get a second and a vote?  This was sent out 3
            weeks ago.<br>
            <br>
          </div>
          ~josh<br>
        </div>
        <div class="gmail_extra"><br>
          <br>
          <div class="gmail_quote">On Fri, Mar 21, 2014 at 10:27 PM, Jim
            Manico <span dir="ltr"><<a href="mailto:jim.manico@owasp.org" target="_blank">jim.manico@owasp.org</a>></span>
            wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
              <div bgcolor="#FFFFFF" text="#000000"> Sounds good Josh.
                Sorry for any confusion.<br>
                <br>
                Cheers,<br>
                Jim
                <div>
                  <div><br>
                    <br>
                    <div>On 3/22/14, 12:24 PM, Josh Sokol wrote:<br>
                    </div>
                    <blockquote type="cite">
                      <p dir="ltr">To be clear, what you're talking
                        about is a process and I support that.  What
                        I've proposed (per what you all asked me to put
                        together at the Board meeting) is a policy via
                        thr Bylaws that specifies the path of revocation
                        should that process fail to allow cooler heads
                        to prevail.  They are not mutually exclusive and
                        are both important along the path toward
                        resolution one way or another.</p>
                      <div class="gmail_quote">On Mar 21, 2014 7:56 PM,
                        "Jim Manico" <<a href="mailto:jim.manico@owasp.org" target="_blank">jim.manico@owasp.org</a>>
                        wrote:<br type="attribution">
                        <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                          <div bgcolor="#FFFFFF" text="#000000"> +1<br>
                            <br>
                            I like this process.<br>
                            <br>
                            1) When conflict arises, first the chapter
                            leads bring in the community manager to see
                            if the dispute can be resolved.<br>
                            2) If necessary, chapters can start a
                            process to remove someone from the chapter.
                            Community manager over-sees this to make
                            sure it's done with integrity.<br>
                            3) If the individual thinks the process is
                            being done unfairly or they were removed
                            unfairly, they can petition the board to get
                            involved.<br>
                            <br>
                            This seems reasonable to be. I want to make
                            sure that competitive interests or corporate
                            interests are not taking over a chapter and
                            decide to remove someone to remove
                            competition. <br>
                            - Jim<br>
                            <br>
                            <div>On 3/22/14, 8:52 AM, GK Southwick
                              wrote:<br>
                            </div>
                            <blockquote type="cite">
                              <div dir="ltr">Completely fair and I
                                believe that that was what Tom was
                                suggesting, only that it shouldn't go
                                straight to the BoD, unless there is no
                                other recourse. We now have a Community
                                Manager to handle mitigation, without
                                having to involve the board in every
                                little dispute. 
                                <div> <br>
                                </div>
                                <div>Don't get me wrong, I know that
                                  completely ostracizing someone from
                                  the community is not a  "little"
                                  dispute, by any means. But I also
                                  believe that there's a time and place
                                  for escalation and we can start every
                                  appeal at a lower level than the BoD.
                                  <div> <br>
                                  </div>
                                  <div>-= GK</div>
                                </div>
                              </div>
                              <div class="gmail_extra"><br clear="all">
                                <div>
                                  <div dir="ltr">
                                    <div>Community Manager<br>
                                    </div>
                                    <div>OWASP Foundation<br>
                                    </div>
                                    <div><br>
                                    </div>
                                    <div><a href="mailto:gk@owasp.org" target="_blank">gksouthwick@owasp.org</a></div>
                                    <div>+01.415.742.2342</div>
                                    <div><br>
                                    </div>
                                  </div>
                                </div>
                                <br>
                                <br>
                                <div class="gmail_quote">On Fri, Mar 21,
                                  2014 at 5:39 PM, Jim Manico <span dir="ltr"><<a href="mailto:jim.manico@owasp.org" target="_blank">jim.manico@owasp.org</a>></span>
                                  wrote:<br>
                                  <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                                    <div dir="auto">
                                      <div>Since this is about someone
                                        getting pushed out of the
                                        community in a big way,
                                        something against our DNA, I
                                        want to make sure they have the
                                        ability to appeal to the board
                                        after the community review
                                        process is complete. Fair?<br>
                                        <br>
                                        <div>--</div>
                                        <div>Jim Manico</div>
                                        <div>@Manicode</div>
                                        <div><a href="tel:%28808%29%20652-3805" value="+18086523805" target="_blank">(808)
                                            652-3805</a></div>
                                      </div>
                                      <div>
                                        <div>
                                          <div><br>
                                            On Mar 22, 2014, at 5:58 AM,
                                            GK Southwick <<a href="mailto:genevieve.southwick@owasp.org" target="_blank">genevieve.southwick@owasp.org</a>>



                                            wrote:<br>
                                            <br>
                                          </div>
                                          <blockquote type="cite">
                                            <div>
                                              <div dir="ltr">Absolutely.
                                                We don't need to
                                                escalate it to BoD
                                                review, unless we can't
                                                agree to disagree at the
                                                community level first.
                                                <div><br>
                                                </div>
                                                <div>Best,</div>
                                                <div><br>
                                                </div>
                                                <div>-= GK</div>
                                                <div class="gmail_extra">
                                                  <br clear="all">
                                                  <div>
                                                    <div dir="ltr">
                                                      <div>Community
                                                        Manager<br>
                                                      </div>
                                                      <div>OWASP
                                                        Foundation<br>
                                                      </div>
                                                      <div><br>
                                                      </div>
                                                      <div><a href="mailto:gk@owasp.org" target="_blank">gksouthwick@owasp.org</a></div>
                                                      <div>+01.415.742.2342</div>
                                                      <div><br>
                                                      </div>
                                                    </div>
                                                  </div>
                                                  <br>
                                                  <br>
                                                  <div class="gmail_quote">On

                                                    Fri, Mar 21, 2014 at
                                                    2:53 PM, Tom Brennan
                                                    <span dir="ltr"><<a href="mailto:tomb@owasp.org" target="_blank">tomb@owasp.org</a>></span>
                                                    wrote:<br>
                                                    <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                                                      <div>" notifying
                                                        the OWASP Board
                                                        of Directors in
                                                        writing within
                                                        14 days of<br>
                                                        the original
                                                        notification"<br>
                                                        <br>
                                                      </div>
                                                      notifying the
                                                      OWASP Community
                                                      Manager in writing
                                                      within 14 days of
                                                      the<br>
                                                      original
                                                      notification<br>
                                                      <br>
                                                      What that does is
                                                      allow the staff to
                                                      look at the issue.
                                                       If<br>
                                                      satisfaction
                                                      resolution to
                                                      either party is
                                                      not made then it
                                                      can be go<br>
                                                      on the agenda for
                                                      a board meeting
                                                      discussion.<br>
                                                      <br>
                                                      <br>
                                                      Semper Fi,<br>
                                                      <br>
                                                      Tom Brennan |
                                                      OWASP Foundation<br>
                                                      Vice Chairman<br>
                                                      Main: <a href="tel:%2B1%20973%20202%200122" value="+19732020122" target="_blank">+1

                                                        973 202 0122</a><br>
                                                      Skype:
                                                      proactiverisk<br>
                                                      Web: <a href="http://www.owasp.org" target="_blank">http://www.owasp.org</a><br>
                                                      <br>
                                                      NYC CyberSocial 26
                                                      March<br>
                                                      <a href="http://www.meetup.com/OWASP-NYC/events/169653782/" target="_blank">http://www.meetup.com/OWASP-NYC/events/169653782/</a><br>
                                                      <br>
                                                      NJ CyberSocial 27
                                                      March<br>
                                                      <a href="http://www.meetup.com/OWASP-New-Jersey/events/169975572/" target="_blank">http://www.meetup.com/OWASP-New-Jersey/events/169975572/</a><br>
                                                      <div>
                                                        <div><br>
                                                          <br>
                                                          <br>
                                                          On Fri, Mar
                                                          21, 2014 at
                                                          3:56 PM, Josh
                                                          Sokol <<a href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>>



                                                          wrote:<br>
                                                          > Does
                                                          anyone else
                                                          have any
                                                          comments on
                                                          this?  Tobias
                                                          asked if "in
                                                          writing"<br>
                                                          > includes
                                                          e-mail, but
                                                          otherwise
                                                          that's the
                                                          only comment I
                                                          received.  Can
                                                          I<br>
                                                          > have a
                                                          second please
                                                          so that we can
                                                          proceed with a
                                                          vote?<br>
                                                          ><br>
                                                          ><br>
                                                          > Proposal:
                                                          Add a new
                                                          section to the
                                                          OWASP Bylaws.<br>
                                                          ><br>
                                                          > SECTION
                                                          4.07
                                                           Participation.
                                                          Participation
                                                          in OWASP
                                                          activities
                                                          (conferences,<br>
                                                          > meetings,
                                                          mailings
                                                          lists,
                                                          projects, etc)
                                                          does not
                                                          require
                                                          membership,
                                                          but is<br>
                                                          > subject
                                                          to adherence
                                                          to the OWASP
                                                          Code of
                                                          Ethics, and
                                                          OWASP leaders
                                                          may<br>
                                                          > revoke
                                                          the privilege
                                                          of
                                                          participation
                                                          to those who
                                                          choose not to
                                                          abide by<br>
                                                          > that
                                                          code.
                                                           Notification
                                                          of such a
                                                          revocation
                                                          must be made
                                                          to the
                                                          individual<br>
                                                          > in
                                                          writing, with
                                                          the OWASP
                                                          Board of
                                                          Directors CC'd
                                                          for inclusion
                                                          in the<br>
                                                          >
                                                          Foundation
                                                          records.  If
                                                          an individual
                                                          believes that
                                                          this
                                                          revocation is<br>
                                                          >
                                                          unjustified,
                                                          then they have
                                                          the option to
                                                          appeal the
                                                          decision by
                                                          notifying<br>
                                                          > the OWASP
                                                          Board of
                                                          Directors in
                                                          writing within
                                                          14 days of the
                                                          original<br>
                                                          >
                                                          notification.<br>
                                                          ><br>
                                                          > ~josh<br>
                                                          ><br>
                                                          ><br>
                                                          > On Tue,
                                                          Mar 4, 2014 at
                                                          3:14 AM,
                                                          Tobias <<a href="mailto:tobias.gondrom@owasp.org" target="_blank">tobias.gondrom@owasp.org</a>>



                                                          wrote:<br>
                                                          >><br>
                                                          >> Hi
                                                          Josh,<br>
                                                          >>
                                                          sounds good.<br>
                                                          >> One
                                                          question to
                                                          the lawyers
                                                          among us: does
                                                          "in writing"
                                                          include per
                                                          email?<br>
                                                          >>
                                                          Thanks, Tobias<br>
                                                          >><br>
                                                          >><br>
                                                          >><br>
                                                          >> On
                                                          03/03/14
                                                          16:12, Josh
                                                          Sokol wrote:<br>
                                                          >><br>
                                                          >> As
                                                          requested, I
                                                          have re-worded
                                                          the proposed
                                                          addition to
                                                          the Bylaws to<br>
                                                          >>
                                                          include
                                                          information
                                                          about
                                                          notification
                                                          and an appeals
                                                          process.
                                                           Also, since<br>
                                                          >> the
                                                          most logical
                                                          place to put
                                                          this is in the
                                                          membership
                                                          section of the<br>
                                                          >>
                                                          bylaws, I
                                                          modified to
                                                          say that
                                                          participation
                                                          does not
                                                          require
                                                          membership.<br>
                                                          >>
                                                          Please
                                                          discuss.<br>
                                                          >><br>
                                                          >>
                                                          Proposal: Add
                                                          a new section
                                                          to the OWASP
                                                          Bylaws.<br>
                                                          >><br>
                                                          >>
                                                          SECTION 4.07
                                                           Participation.
                                                          Participation
                                                          in OWASP
                                                          activities<br>
                                                          >>
                                                          (conferences,
                                                          meetings,
                                                          mailings
                                                          lists,
                                                          projects, etc)
                                                          does not
                                                          require<br>
                                                          >>
                                                          membership,
                                                          but is subject
                                                          to adherence
                                                          to the OWASP
                                                          Code of
                                                          Ethics, and<br>
                                                          >> OWASP
                                                          leaders may
                                                          revoke the
                                                          privilege of
                                                          participation
                                                          to those who
                                                          choose<br>
                                                          >> not
                                                          to abide by
                                                          that code.
                                                           Notification
                                                          of such a
                                                          revocation
                                                          must be made<br>
                                                          >> to
                                                          the individual
                                                          in writing,
                                                          with the OWASP
                                                          Board of
                                                          Directors CC'd
                                                          for<br>
                                                          >>
                                                          inclusion in
                                                          the Foundation
                                                          records.  If
                                                          an individual
                                                          believes that
                                                          this<br>
                                                          >>
                                                          revocation is
                                                          unjustified,
                                                          then they have
                                                          the option to
                                                          appeal the
                                                          decision<br>
                                                          >> by
                                                          notifying the
                                                          OWASP Board of
                                                          Directors in
                                                          writing within
                                                          14 days of the<br>
                                                          >>
                                                          original
                                                          notification.<br>
                                                          >><br>
                                                          >>
                                                          Thanks!<br>
                                                          >><br>
                                                          >> ~josh<br>
                                                          >><br>
                                                          >><br>
                                                          >>
                                                          _______________________________________________<br>
                                                          >>
                                                          Owasp-board
                                                          mailing list<br>
                                                          >> <a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
                                                          >> <a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                                                          >><br>
                                                          >><br>
                                                          ><br>
                                                          ><br>
                                                          >
                                                          _______________________________________________<br>
                                                          >
                                                          Owasp-board
                                                          mailing list<br>
                                                          > <a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
                                                          > <a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                                                          ><br>
_______________________________________________<br>
                                                          Owasp-board
                                                          mailing list<br>
                                                          <a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
                                                          <a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                                                        </div>
                                                      </div>
                                                    </blockquote>
                                                  </div>
                                                  <br>
                                                </div>
                                              </div>
                                            </div>
                                          </blockquote>
                                          <blockquote type="cite">
                                            <div><span>_______________________________________________</span><br>
                                              <span>Owasp-board mailing
                                                list</span><br>
                                              <span><a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a></span><br>
                                              <span><a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a></span><br>
                                            </div>
                                          </blockquote>
                                        </div>
                                      </div>
                                    </div>
                                  </blockquote>
                                </div>
                                <br>
                              </div>
                            </blockquote>
                            <br>
                          </div>
                          <br>
_______________________________________________<br>
                          Owasp-board mailing list<br>
                          <a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
                          <a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                          <br>
                        </blockquote>
                      </div>
                    </blockquote>
                    <br>
                  </div>
                </div>
              </div>
            </blockquote>
          </div>
          <br>
        </div>
      </blockquote>
      <br>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
Owasp-board mailing list
<a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a>
<a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a>
</pre>
    </blockquote>
    <br>
  </div>

<br>_______________________________________________<br>
Owasp-board mailing list<br>
<a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
<a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
<br></blockquote></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Owasp-board mailing list</span><br><span><a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a></span><br>

<span><a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a></span><br></div></blockquote></div></div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Owasp-board mailing list</span><br><span><a href="mailto:Owasp-board@lists.owasp.org">Owasp-board@lists.owasp.org</a></span><br><span><a href="https://lists.owasp.org/mailman/listinfo/owasp-board">https://lists.owasp.org/mailman/listinfo/owasp-board</a></span><br></div></blockquote></body></html>