<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Hi Johanna, <br>
      <br>
      I agree with Fabio, thank you very much for putting all of this
      together. <br>
      The costs seems very reasonable to me. <br>
      <br>
      How are we on the planned deliverable side? <br>
      Did we get from the project leaders a brief agenda or items they
      will be working on during the summit. <br>
      <br>
      And a little question: reading the summit participant lists, am a
      little bit confused about teams where only 1 or 2 people are
      listed as participants. Does that mean that only one person is
      planning to participate in that project meeting or are the other
      participants attending on their own budget?<br>
      <br>
      Looking forward to the final proposal and putting this to a vote
      ASAP so we can get rolling. <br>
      The board is very interested in doing everything in our power to
      strengthen our projects and I am very confident that the board
      will approve this. <br>
      <br>
      Best, Tobias<br>
      <br>
      <br>
      <br>
      On 16/02/15 21:58, Fabio Cerullo wrote:<br>
    </div>
    <blockquote
cite="mid:CAE69ks6WdYuf0RiMybxUbLe+eh47THCLg7i247q1sjua2sd+rQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">Johanna
        <div><br>
          Thanks for putting this together. </div>
        <div><br>
        </div>
        <div>I like the approach of having an agenda for each project
          and funding approval based on that.</div>
        <div><br>
        </div>
        <div>I would also set a funding cap for each participating
          member. Eg. 800 Euro x participant (approx. 1000 USD) so there
          are no last minutes surprises regarding costs. </div>
        <div><br>
        </div>
        <div>Ideally, we would like the Summit become a regular activity
          in which our active community gather together during a couple
          of days, brainstorm ideas, and make them happen.</div>
        <div><br>
        </div>
        <div>So with clear goals, agenda and activities I'm in full
          support of this activity.</div>
        <div><br>
        </div>
        <div>Are you going to be the overall Summit point of contact and
          coordinator? </div>
        <div><br>
        </div>
        <div>Thanks again,</div>
        <div><br>
        </div>
        <div>Fabio</div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Mon, Feb 16, 2015 at 12:27 PM,
          johanna curiel curiel <span dir="ltr"><<a
              moz-do-not-send="true"
              href="mailto:johanna.curiel@owasp.org" target="_blank">johanna.curiel@owasp.org</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div dir="ltr">Hi Andrew
              <div><br>
                <div>ROI is essential to any initiative we take, we need
                  to set goals and measure results.</div>
              </div>
              <span class="">
                <div><br>
                </div>
                <div><span style="font-size:12.8000001907349px">>So I
                    think we need to be a tiny bit brutal and be focused
                    on what we *specifically* need from any project
                    investments. Maybe we invest in fewer, higher value
                    projects and add more people to each project, so
                    that we get some momentum rather than spread it out
                    across all the projects.</span><br>
                </div>
                <div><br>
                </div>
              </span>
              <div>Agree and therefore one of the condition of the
                actual summit is that the project is active and has a
                positive review. Another is, that they provide a clear
                agenda.</div>
              <div><br>
              </div>
              <div>So far we have 6 participation projects
                (ZAP,OWTF,CRSF,Hackademic and Top 10 Privacy risks,
                ASVS)</div>
              <div>All of these projects have positive reviews and a
                healthy activity level</div>
              <div><br>
              </div>
              <div>I have reserved a budget for Simon's team but he
                already mentioned that his team will be paying their own
                cost. This has been reserved in case of.</div>
              <div><br>
              </div>
              <div>It is required that the leaders provide an agenda by
                next week, otherwise they will not have sponsorship.</div>
              <div><br>
              </div>
              <div>If we move fwd with the summit, my attendance and
                from Timo will depend of next week reactions on the
                agenda and off course your final approval.</div>
              <div><br>
              </div>
              <div>I think with this info you are ready to take a
                decision if you would like to finance this summit. Also
                we need to book early so the cost of tickets do not
                increase by the time we want to reserve</div>
              <div><br>
              </div>
              <div>So far, we have achieved 11,000 dollar mark. I don't
                think there will be more projects willing to attend.</div>
              <div><br>
              </div>
              <div>Please let us know asap your approval or not.</div>
              <div><br>
              </div>
              <div><a moz-do-not-send="true"
href="https://docs.google.com/spreadsheets/d/1OIUPJ-fBqsrCvphEHOU7qWuIkA-6ab4frXehZmhRpNE/edit#gid=0"
                  target="_blank">https://docs.google.com/spreadsheets/d/1OIUPJ-fBqsrCvphEHOU7qWuIkA-6ab4frXehZmhRpNE/edit#gid=0</a><br>
              </div>
              <div><br>
              </div>
              <div>Regards</div>
              <span class="HOEnZb"><font color="#888888">
                  <div><br>
                  </div>
                  <div>Johanna</div>
                  <div><br>
                  </div>
                  <div><br>
                  </div>
                  <div><br>
                  </div>
                  <div><br>
                  </div>
                  <div><br>
                  </div>
                  <div><br>
                  </div>
                  <div><br>
                  </div>
                </font></span></div>
            <div class="HOEnZb">
              <div class="h5">
                <div class="gmail_extra"><br>
                  <div class="gmail_quote">On Mon, Feb 16, 2015 at 12:27
                    AM, Andrew van der Stock <span dir="ltr"><<a
                        moz-do-not-send="true"
                        href="mailto:vanderaj@owasp.org" target="_blank">vanderaj@owasp.org</a>></span>
                    wrote:<br>
                    <blockquote class="gmail_quote" style="margin:0 0 0
                      .8ex;border-left:1px #ccc solid;padding-left:1ex">
                      <div dir="ltr">Michael, 
                        <div><br>
                        </div>
                        <div>I really think we should either aim for one
                          of several models:</div>
                        <div><br>
                        </div>
                        <div><b>There are some projects that whilst
                            vital to OWASP's mission, are just plain
                            difficult to do</b>. Things like setting out
                          an education syllabus at a tertiary level
                          requires a university level researcher who
                          understands pedagogical requirements of
                          tertiary instiutions and solid AppSec outcomes
                          can build us something. We have not to date -
                          nor I think will ever - find someone who as a
                          side project will contribute such an enormous
                          effort, and yet without this key piece of the
                          puzzle, universities will continue to churn
                          out pen testers, which at best, is a trade. I
                          see this being like a one year research
                          position, similar to how much of university
                          level research is made. We have specific
                          requirements for a deliverable, and we work
                          with say with a chosen institution to get it
                          done on the basis that the IP and materials at
                          the end comply with our open source licensing
                          guidelines. This is just one type of Extra
                          Hard Thorny Problem.</div>
                        <div><br>
                        </div>
                        <div><b>There are some flagship projects that
                            OWASP is famous for</b>. We can probably get
                          funding directly from sponsors on this one,
                          and if we could do so with sufficient funds to
                          go 24-48 months with a hire in place, we can
                          getr some immense traction. I'm thinking these
                          positions would be like Linux Foundation's
                          fellows. </div>
                        <div><br>
                        </div>
                        <div><b>There are some flagship projects that
                            just need a bit more of a boost to get over
                            the line to gain the self-sustaining
                            momentum</b>, like the Testing Guide. These
                          could be assisted by making available project
                          grants so that folks can travel and be
                          accommodated for at least a week, preferably
                          two, at an AppSec conference nearest them and
                          get the big jobs done whilst on site. I see
                          this operating like the IBM redbooks
                          residencies - you are not ever an OWASP
                          employee, but we help you co-invest in your
                          project by getting the project leads and
                          resources together to build something
                          specific. </div>
                        <div><br>
                        </div>
                        <div>The problem is that we have had for such a
                          long time that the ONLY people who cannot be
                          paid by OWASP are the people doing the writing
                          on projects. Graphic designers can be paid.
                          The publisher can be paid. Firms can create
                          services from the materials can get paid.
                          Dinis made this really clear on OWASP-Leaders,
                          and it's pretty much hard wired into the
                          Projects handbook. This I feel is off putting
                          to those who might otherwise ask how they can
                          best contribute to OWASP. It's resulted in a
                          lot of smaller projects of one-two people that
                          don't really change the world, and inaction of
                          the big projects. Johanna is right - The
                          DevGuide and ASVS are side projects for me. I
                          can do the ASVS as it's approachable and
                          re-writeable by one person over a summer
                          break. The DevGuide isn't. The DevGuide needs
                          a leader who can work full time on it. Whilst
                          I'm a board member, this is almost certainly
                          not me. </div>
                        <div><br>
                        </div>
                        <div>We spent a lot of money in 2011 on the
                          Portugal Project Summit. I don't think we
                          invested money wisely in that project summit,
                          because we didn't get a return on investment.
                          None of the three major guides got a rev
                          during the year after it. The Top 10 didn't
                          get a rev. Look at all the tracks and working
                          groups. We didn't get a OWASP Universities
                          outcome. We didn't get an XSS outcome. As far
                          as I can tell, not one of the tracks produced
                          a deliverable within 12 months of that
                          summit. </div>
                        <div><br>
                        </div>
                        <div><a moz-do-not-send="true"
                            href="https://www.owasp.org/index.php/Summit_2011_Attendee"
                            target="_blank">https://www.owasp.org/index.php/Summit_2011_Attendee</a><br>
                        </div>
                        <div><br>
                        </div>
                        <div>So I think we need to be a tiny bit brutal
                          and be focused on what we *specifically* need
                          from any project investments. Maybe we invest
                          in fewer, higher value projects and add more
                          people to each project, so that we get some
                          momentum rather than spread it out across all
                          the projects. I don't know, and I'm a tiny bit
                          conflicted (DevGuide, ASVS). Obviously, if one
                          of my projects came to a vote, I'd step aside
                          whilst the vote is taken, but we should
                          probably decide on a budget, a model, and then
                          the projects. Projects will come and go, but
                          there should always be a budget to be used and
                          a governance model to make sure the budget
                          investment is used wisely and produces
                          specific deliverables for OWASP and it's
                          mission both inside and outside of OWASP. </div>
                        <div><br>
                        </div>
                        <div>The bigger projects - if we decide on those
                          they we think are valuable and should continue
                          - need some form of investment. We've spent
                          perilously close to zero dollars since 2011 on
                          projects. This must change, and we must shout
                          it from the rooftops once we decide on
                          strategic projects and investment models. </div>
                        <div><br>
                        </div>
                        <div>Thoughts?</div>
                        <span><font color="#888888">
                            <div><br>
                            </div>
                            <div>Andrew</div>
                            <div><br>
                            </div>
                          </font></span></div>
                      <div>
                        <div>
                          <div class="gmail_extra"><br>
                            <div class="gmail_quote">On Tue, Feb 10,
                              2015 at 10:44 PM, johanna curiel curiel <span
                                dir="ltr"><<a moz-do-not-send="true"
                                  href="mailto:johanna.curiel@owasp.org"
                                  target="_blank">johanna.curiel@owasp.org</a>></span>
                              wrote:<br>
                              <blockquote class="gmail_quote"
                                style="margin:0 0 0 .8ex;border-left:1px
                                #ccc solid;padding-left:1ex">
                                <div dir="ltr">Micheal,
                                  <div><br>
                                    <div>I think you have made a good
                                      point.</div>
                                    <div><br>
                                    </div>
                                    <div>My experience with projects is,
                                      that only the people that can
                                      dedicate a lot of time to their
                                      projects, will see them flourish</div>
                                    <div><br>
                                    </div>
                                    <div>If most :Leaders have full time
                                      jobs and try todo this on the
                                      side, they don't get as much as
                                      progress as the other ones.</div>
                                    <div><br>
                                    </div>
                                    <div>Improving the OWASP inventory
                                      has taken also a period of 2 years
                                      where we have now in place a
                                      reasonable way of reviewing and
                                      cleaning the inventory but there
                                      is still some work to do on this
                                      part</div>
                                    <div><br>
                                    </div>
                                    <div>if we are looking for
                                      innovation, then, another strategy
                                      is definitely needed from the
                                      actual one.</div>
                                    <div><br>
                                    </div>
                                    <div>regards</div>
                                    <span><font color="#888888">
                                        <div><br>
                                        </div>
                                        <div>Johanna</div>
                                      </font></span></div>
                                </div>
                                <div>
                                  <div>
                                    <div class="gmail_extra"><br>
                                      <div class="gmail_quote">On Tue,
                                        Feb 10, 2015 at 12:32 AM,
                                        Michael Coates <span dir="ltr"><<a
                                            moz-do-not-send="true"
                                            href="mailto:michael.coates@owasp.org"
                                            target="_blank">michael.coates@owasp.org</a>></span>
                                        wrote:<br>
                                        <blockquote class="gmail_quote"
                                          style="margin:0 0 0
                                          .8ex;border-left:1px #ccc
                                          solid;padding-left:1ex">
                                          <div dir="auto">
                                            <div>I think that challenge
                                              is for us to solve. How
                                              would projects spend
                                              money? We've done this
                                              exercise before and we
                                              have no bites. <span
                                                style="background-color:rgba(255,255,255,0)"><a
                                                  moz-do-not-send="true"
href="https://www.owasp.org/index.php/Funding" target="_blank">https://www.owasp.org/index.php/Funding</a></span></div>
                                            <div><br>
                                            </div>
                                            <div>So what are we missing?
                                              We've provided guidelines
                                              on acceptable expenditures
                                              and haven't had anyone
                                              raise ideas different than
                                              those. </div>
                                            <div><br>
                                            </div>
                                            <div>As a thought exercise
                                              let's allocate 100k to
                                              projects this moment (just
                                              hypothetical) where would
                                              it actually be spent? Why
                                              is our current approach
                                              not working?</div>
                                            <div><br>
                                            </div>
                                            <div>Is it time to fully
                                              switch to hired developers
                                              and further specific
                                              objectives? Or should we
                                              keep muddling around with
                                              limited gains?</div>
                                            <div><br>
                                            </div>
                                            <div>Which furthers the
                                              mission more?<br>
                                              <br>
                                              <br>
                                            </div>
                                            <div>
                                              <div>
                                                <div><br>
                                                  On Feb 9, 2015, at
                                                  1:30 PM, Andrew van
                                                  der Stock <<a
                                                    moz-do-not-send="true"
href="mailto:vanderaj@owasp.org" target="_blank">vanderaj@owasp.org</a>>
                                                  wrote:<br>
                                                  <br>
                                                </div>
                                                <blockquote type="cite">
                                                  <div>
                                                    <div dir="ltr">+1000</div>
                                                    <div
                                                      class="gmail_extra"><br>
                                                      <div
                                                        class="gmail_quote">On
                                                        Tue, Feb 10,
                                                        2015 at 4:49 AM,
                                                        Jim Manico <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:jim.manico@owasp.org"
                                                          target="_blank">jim.manico@owasp.org</a>></span>
                                                        wrote:<br>
                                                        <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div
                                                          dir="auto">
                                                          <div>I
                                                          personally
                                                          feel that
                                                          projects are
                                                          heavily
                                                          underfunded
                                                          and would
                                                          support a
                                                          large
                                                          investment if
                                                          there is a
                                                          clear path for
                                                          how those
                                                          funds will be
                                                          used.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Aloha,<span><br>
                                                          <div>--</div>
                                                          <div>Jim
                                                          Manico</div>
                                                          <div>@Manicode</div>
                                                          <div><a
                                                          moz-do-not-send="true"
href="tel:%28808%29%20652-3805" value="+18086523805" target="_blank">(808)
                                                          652-3805</a></div>
                                                          </span></div>
                                                          <div>
                                                          <div>
                                                          <div><br>
                                                          On Feb 9,
                                                          2015, at 6:13
                                                          PM, johanna
                                                          curiel curiel
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:johanna.curiel@owasp.org" target="_blank">johanna.curiel@owasp.org</a>>
                                                          wrote:<br>
                                                          <br>
                                                          </div>
                                                          <blockquote
                                                          type="cite">
                                                          <div>
                                                          <div dir="ltr">
                                                          <div>
                                                          <div>
                                                          <div>
                                                          <div>Hi Josh<br>
                                                          <br>
                                                          </div>
                                                          I think indeed
                                                          that I need to
                                                          create a break
                                                          down for the
                                                          actual
                                                          projects
                                                          leaders that
                                                          have reacted
                                                          and a
                                                          projection for
                                                          the expected
                                                          ones by
                                                          tomorrow<br>
                                                          </div>
                                                          With this
                                                          info, then we
                                                          can have a
                                                          budget that
                                                          you can vote
                                                          for, including
                                                          the main goals<br>
                                                          <br>
                                                          </div>
                                                          <div>I'm also
                                                          in favor of
                                                          spending money
                                                          wisely with a
                                                          clear expected
                                                          output, not
                                                          just to hang
                                                          around and
                                                          have fun in
                                                          Amsterdam ;-)<br>
                                                          <br>
                                                          </div>
                                                          <div>My
                                                          personal
                                                          target is to
                                                          review
                                                          projects and
                                                          communicate
                                                          regarding the
                                                          review process
                                                          and how to
                                                          improve this.
                                                          Also to
                                                          automate some
                                                          of the process
                                                          during the
                                                          summit<br>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          Regards<br>
                                                          <br>
                                                          </div>
                                                          Johanna<br>
                                                          </div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">On
                                                          Mon, Feb 9,
                                                          2015 at 12:21
                                                          PM, Josh Sokol
                                                          <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:josh.sokol@owasp.org"
                                                          target="_blank">josh.sokol@owasp.org</a>></span>
                                                          wrote:<br>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div dir="ltr">
                                                          <div>
                                                          <div>Johanna,<br>
                                                          <br>
                                                          </div>
                                                          I think that
                                                          the majority
                                                          of the Board
                                                          is in favor of
                                                          this and sees
                                                          the value in
                                                          it.  The
                                                          challenge is
                                                          that you've
                                                          come to us
                                                          with it after
                                                          money was
                                                          budgeted for
                                                          2015 so we
                                                          would have to
                                                          pillage from
                                                          elsewhere in
                                                          order to make
                                                          this happen. 
                                                          More money =
                                                          more pillaging
                                                          so we have to
                                                          be
                                                          conservative
                                                          with the
                                                          budget.  How
                                                          much do we
                                                          anticipate for
                                                          "coffee
                                                          breaks" for
                                                          the summit? 
                                                          How much do we
                                                          anticipate for
                                                          tickets,
                                                          accommodation,
                                                          and food?  How
                                                          many people
                                                          would we
                                                          actually get
                                                          off that
                                                          money?  What
                                                          are the goals
                                                          and
                                                          deliverables
                                                          that will come
                                                          out of this
                                                          summit?  It
                                                          becomes a
                                                          question of
                                                          ROI at this
                                                          point and the
                                                          Board has a
                                                          responsibility
                                                          to maximize
                                                          the reward for
                                                          the
                                                          Foundation. 
                                                          If we're
                                                          spending $10k
                                                          for four
                                                          people to get
                                                          together and
                                                          drink coffee,
                                                          that's
                                                          probably not
                                                          money well
                                                          spent, but if
                                                          we're spending
                                                          $50k for a
                                                          code-a-thon
                                                          where 20
                                                          people get
                                                          together and
                                                          drastically
                                                          improve upon
                                                          our OWASP
                                                          toolset, then
                                                          that's a huge
                                                          reward.  For
                                                          all of our
                                                          conferences,
                                                          we ask the
                                                          planners to
                                                          put together a
                                                          budget that
                                                          shows
                                                          anticipated
                                                          revenue and
                                                          expenses as
                                                          well as to
                                                          provide
                                                          conference
                                                          deliverables. 
                                                          My personal
                                                          opinion is
                                                          that a summit
                                                          is no
                                                          different than
                                                          a conference,
                                                          just with a
                                                          different
                                                          target
                                                          audience, and
                                                          that a similar
                                                          plan should be
                                                          drafted.  Can
                                                          you put
                                                          something more
                                                          formal
                                                          together that
                                                          the Board can
                                                          vote on?  It's
                                                          all very
                                                          nebulous at
                                                          this point.<span><font
color="#888888"><br>
                                                          <br>
                                                          </font></span></div>
                                                          <span><font
                                                          color="#888888">~josh<br>
                                                          </font></span></div>
                                                          <div>
                                                          <div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">On
                                                          Mon, Feb 9,
                                                          2015 at 6:53
                                                          AM, johanna
                                                          curiel curiel
                                                          <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:johanna.curiel@owasp.org"
                                                          target="_blank">johanna.curiel@owasp.org</a>></span>
                                                          wrote:<br>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div dir="ltr">Hi
                                                          Josh
                                                          <div><br>
                                                          </div>
                                                          <div>Tentatively?
                                                          Lets be more
                                                          specific ;-)</div>
                                                          <div>Does the
                                                          board agree
                                                          yes or no?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>The money
                                                          as I have
                                                          mentioned,
                                                          will be used
                                                          to pay the
                                                          tickets,
                                                          accommodation
                                                          and coffee
                                                          breaks</div>
                                                          <div>Depending
                                                          how many
                                                          leaders would
                                                          like to assist
                                                          then I create
                                                          a breakdown of
                                                          the cost per
                                                          leaders
                                                          (Ticket/Accommodation/Food)
                                                          and Coffee
                                                          breaks for in
                                                          between the
                                                          sessions. We
                                                          have 2 rooms
                                                          but if more
                                                          projects wants
                                                          to attend ,
                                                          then we need
                                                          probably 2 or
                                                          3 rooms more</div>
                                                          <div><br>
                                                          </div>
                                                          <div>
                                                          <ul>
                                                          <li>Flagship
                                                          leaders have
                                                          highest prio<br>
                                                          </li>
                                                          <li>Then LABS<br>
                                                          </li>
                                                          <li>and then
                                                          the best out
                                                          of the
                                                          incubators<br>
                                                          </li>
                                                          </ul>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>The
                                                          selection is
                                                          based on their
                                                          activity level
                                                          which we have
                                                          being
                                                          monitoring
                                                          through the
                                                          reviews.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>If
                                                          everyone would
                                                          like to come,
                                                          I know 10K
                                                          won't be
                                                          enough.
                                                          Probably it
                                                          will be around
                                                          30 to 40K if
                                                          everyone wants
                                                          to have
                                                          sessions but
                                                          we can
                                                          accommodate
                                                          more than one
                                                          session in one
                                                          room as done
                                                          during APPSEC
                                                          2013 US.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Please
                                                          let me know
                                                          what we can
                                                          expect from
                                                          the board and
                                                          if there is an
                                                          agreement for
                                                          the 10k at
                                                          least, be
                                                          aware, more
                                                          leaders, then
                                                          we have more
                                                          costs but It
                                                          will be great
                                                          if we can have
                                                          at least the
                                                          top projects
                                                          leaders
                                                          together. ZAP
                                                          and OWTF,ASVS
                                                          and Dev Guide
                                                          and  have said
                                                          yes, but
                                                          please, be
                                                          clear if we
                                                          can count on
                                                          this budget</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Regards</div>
                                                          <span><font
                                                          color="#888888">
                                                          <div><br>
                                                          </div>
                                                          <div>Johanna</div>
                                                          <div><br>
                                                          </div>
                                                          </font></span></div>
                                                          <div>
                                                          <div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">On
                                                          Sun, Feb 8,
                                                          2015 at 10:41
                                                          PM, Josh Sokol
                                                          <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:josh.sokol@owasp.org"
                                                          target="_blank">josh.sokol@owasp.org</a>></span>
                                                          wrote:<br>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div dir="ltr">
                                                          <div>Johanna,<br>
                                                          <br>
                                                          Just to be
                                                          clear, I
                                                          believe the
                                                          Board
                                                          tentatively
                                                          approved your
                                                          request for
                                                          the $10k, but
                                                          requested that
                                                          you provided a
                                                          more detailed
                                                          budget showing
                                                          what you
                                                          intended to
                                                          use the money
                                                          for.  I don't
                                                          remember you
                                                          asking if you
                                                          could solicit
                                                          sponsors
                                                          through OWASP,
                                                          but I,
                                                          personally,
                                                          don't see any
                                                          reason why we
                                                          couldn't help
                                                          with that part
                                                          of the
                                                          fundraising.<br>
                                                          <br>
                                                          </div>
                                                          ~josh<br>
                                                          </div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">
                                                          <div>
                                                          <div>On Sun,
                                                          Feb 8, 2015 at
                                                          5:06 PM,
                                                          johanna curiel
                                                          curiel <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:johanna.curiel@owasp.org"
                                                          target="_blank">johanna.curiel@owasp.org</a>></span>
                                                          wrote:<br>
                                                          </div>
                                                          </div>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div>
                                                          <div>
                                                          <div dir="ltr">Hi
                                                          Collin
                                                          <div><br>
                                                          </div>
                                                          <div>Indeed my
                                                          mistake, we
                                                          didn't set a
                                                          deadline
                                                          yet,however by
                                                          first week of
                                                          March we will
                                                          close the
                                                          participation
                                                          opportunity.
                                                          We have
                                                          publish an
                                                          invitation for
                                                          participation
                                                          through the
                                                          OWASP
                                                          connector</div>
                                                          <div><br>
                                                          </div>
                                                          <div>My
                                                          answers below</div>
                                                          <div><br>
                                                          </div>
                                                          <div><span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px">1.
                                                          The comment
                                                          about "launch
                                                          and or
                                                          promote" in
                                                          that email
                                                          confused me
                                                          because I
                                                          thought
                                                          summits were
                                                          to generate
                                                          outputs. Is it
                                                          more like a
                                                          project
                                                          showcase? If
                                                          so, are OWASP
                                                          projects not a
                                                          part of the
                                                          main
                                                          conference
                                                          program?</div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          </span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><i>A
                                                          summit is not
                                                          a showcase but
                                                          an opportunity
                                                          to have all
                                                          leaders
                                                          together to
                                                          discuss and
                                                          generate
                                                          output,
                                                          guidelines,
                                                          give direction
                                                          , take
                                                          decision
                                                          regarding the
                                                          direction of
                                                          projects in
                                                          general. But I
                                                          think we might
                                                          turn towards
                                                          Showcases
                                                          instead of
                                                          Summits</i></div>
                                                          <span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px">2.
                                                          The AppsecEU
                                                          website
                                                          doesn't
                                                          mention this
                                                          summit. What
                                                          will be done
                                                          to promote it?</div>
                                                          </span>
                                                          <div><i><font
                                                          size="3"
                                                          face="Calibri,
                                                          sans-serif">Correct.
                                                          We are looking
                                                          to first
                                                          determine how
                                                          many leaders want
                                                          to assist,
                                                          apply for a
                                                          budget
                                                          and sponsoring in
                                                          order to
                                                          publish this
                                                          together </font></i></div>
                                                          <span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px">3.
                                                          Who is getting
                                                          paid/what?</div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          </span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><i>We
                                                          are looking
                                                          for sponsors
                                                          to at least
                                                          pay for
                                                          accommodation
                                                          and tickets.
                                                          The Boards has
                                                          not answer my
                                                          question if
                                                          there is
                                                          available
                                                          budget for
                                                          this and if I
                                                          can send
                                                          invitation
                                                          through OWASP
                                                          to get
                                                          sponsors. I
                                                          have proposed
                                                          to ask for
                                                          sponsors that
                                                          could help us
                                                          cover the
                                                          expenses. This
                                                          summit should
                                                          have the
                                                          leaders of the
                                                          Flagship
                                                          projects, LABS
                                                          and the best
                                                          out of the
                                                          incubators. An
                                                          invitation was
                                                          sent to the
                                                          Flagships and,
                                                          only a couple
                                                          of them
                                                          reacted that
                                                          they could
                                                          assist</i></div>
                                                          <span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px">4
                                                          . The date and
                                                          that there are
                                                          two rooms
                                                          appear to be
                                                          new
                                                          information
                                                          today. What
                                                          else can be
                                                          shared please?</div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          </span>
                                                          <div><i><font
                                                          size="3"
                                                          face="Calibri,
                                                          sans-serif">We
                                                          are looking
                                                          for budget but
                                                          important to
                                                          determine is,
                                                          how many
                                                          leaders are
                                                          willing to
                                                          assist in
                                                          order to
                                                          create a final
                                                          budget
                                                          covering accommodation/tickets
                                                          and food for
                                                          them. No
                                                          leaders, no
                                                          summit.</font></i></div>
                                                          <span>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><br>
                                                          </div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px">5.
                                                          What else will
                                                          the summit be
                                                          competing with
                                                          on the same
                                                          day?</div>
                                                          </span></div>
                                                          <div
                                                          style="font-family:Calibri,sans-serif;font-size:16px"><i>The
                                                          conference
                                                          sessions on
                                                          that day</i></div>
                                                          <div><br>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>Hope this
                                                          has clarified
                                                          your
                                                          questions. </div>
                                                          <div><br>
                                                          </div>
                                                          <div>regards</div>
                                                          <span><font
                                                          color="#888888">
                                                          <div><br>
                                                          </div>
                                                          <div>Johanna</div>
                                                          </font></span></div>
                                                          <div>
                                                          <div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">On
                                                          Sun, Feb 8,
                                                          2015 at 3:56
                                                          PM, <a
                                                          moz-do-not-send="true"
href="mailto:colin.watson@owasp.org" target="_blank">colin.watson@owasp.org</a>
                                                          <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:colin.watson@owasp.org"
                                                          target="_blank">colin.watson@owasp.org</a>></span>
                                                          wrote:<br>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div
                                                          style="font-size:12pt;font-family:Calibri,sans-serif">Joanna
                                                          <div><br>
                                                          </div>
                                                          <div>The
                                                          Amsterdam
                                                          "project
                                                          summit "
                                                          invitation I
                                                          saw was sent
                                                          on 21st
                                                          January:
                                                          <div><br>
                                                          </div>
                                                          <div><a
                                                          moz-do-not-send="true"
href="http://lists.owasp.org/pipermail/owasp-leaders/2015-January/013715.html"
target="_blank">http://lists.owasp.org/pipermail/owasp-leaders/2015-January/013715.html</a></div>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>What is
                                                          the deadline
                                                          please?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Could you
                                                          provide any
                                                          more
                                                          detrimental
                                                          than appear in
                                                          the firm's
                                                          questions? </div>
                                                          <div><br>
                                                          </div>
                                                          <div>1. The
                                                          comment about
                                                          "launch and or
                                                          promote" in
                                                          that email
                                                          confused me
                                                          because I
                                                          thought
                                                          summits were
                                                          to generate
                                                          outputs. Is it
                                                          more like a
                                                          project
                                                          showcase? If
                                                          so, are OWASP
                                                          projects not a
                                                          part of the
                                                          main
                                                          conference
                                                          program?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>2. The
                                                          AppsecEU
                                                          website
                                                          doesn't
                                                          mention this
                                                          summit. What
                                                          will be done
                                                          to promote it?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>3. Who is
                                                          getting
                                                          paid/what?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>4 . The
                                                          date and that
                                                          there are two
                                                          rooms appear
                                                          to be new
                                                          information
                                                          today. What
                                                          else can be
                                                          shared please?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>5. What
                                                          else will the
                                                          summit be
                                                          competing with
                                                          on the same
                                                          day?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>I am sure
                                                          other projects
                                                          will want to
                                                          participate.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Regards
                                                          Colin</div>
                                                          <div>
                                                          <div><br>
                                                          <div>-----
                                                          Reply message
                                                          -----<br>
                                                          From: "johanna
                                                          curiel curiel"
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:johanna.curiel@owasp.org" target="_blank">johanna.curiel@owasp.org</a>><br>
                                                          To: "<a
                                                          moz-do-not-send="true"
href="mailto:owasp-leaders@lists.owasp.org" target="_blank">owasp-leaders@lists.owasp.org</a>"
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:owasp-leaders@lists.owasp.org" target="_blank">owasp-leaders@lists.owasp.org</a>><br>
                                                          Subject:
                                                          [Owasp-leaders]
                                                          Fwd: Project
                                                          Summit
                                                          countdown<br>
                                                          Date: Sun, Feb
                                                          8, 2015 18:29</div>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          <div>
                                                          <div><br>
                                                          <div dir="ltr"><br>
                                                          <div
                                                          class="gmail_quote"><br>
                                                          <div dir="ltr"><span><span
style="font-size:13px">>Back to the Project Summit, the interesting
                                                          question is: </span><b
style="font-size:13px">should OWASP invest 50k or 100k on its projects? </b><br>
                                                          <div><b
                                                          style="font-size:13px"><br>
                                                          </b></div>
                                                          </span>
                                                          <div>Well that
                                                          is the golden
                                                          question. I
                                                          have the
                                                          impression
                                                          that key
                                                          decision
                                                          makers are
                                                          reluctant for
                                                          this part,
                                                          since it is
                                                          not clear what
                                                          will be the
                                                          output from
                                                          this.
                                                          This has being
                                                          mentioned to
                                                          me in the
                                                          past. </div>
                                                          <div><span
                                                          style="font-size:13px"><br>
                                                          </span></div>
                                                          <div><span
                                                          style="font-size:13px">The
                                                          question is,
                                                          how effective
                                                          is to invest
                                                          50 or 100k in
                                                          a summit and
                                                          what do we get
                                                          out of it?</span></div>
                                                          <div><span
                                                          style="font-size:13px"><br>
                                                          </span></div>
                                                          <div>I think
                                                          OWASP should
                                                          at least
                                                          invest and
                                                          help promote
                                                          those flagship
                                                          projects and
                                                          LABS/Incubators
                                                          doing an
                                                          excellent work
                                                          . That is how
                                                          Project
                                                          leaders can
                                                          promote and
                                                          spread the
                                                          word out about
                                                          their projects
                                                          with OWASP
                                                          support. But,
                                                          what about new
                                                          blood and
                                                          innovative
                                                          thinking? I'm
                                                          seeing many
                                                          vulnerabilities
                                                          that are not
                                                          being handle
                                                          with new
                                                          projects or
                                                          fresh
                                                          approaches. </div>
                                                          <div><br>
                                                          </div>
                                                          <div>The key
                                                          factor is,
                                                          there is low
                                                          participation
                                                          and motivation
                                                          within the
                                                          Project
                                                          leaders. There
                                                          is not really
                                                          new blood of
                                                          ideas coming
                                                          in and some
                                                          leaders have
                                                          decided to
                                                          start their
                                                          projects
                                                          outside OWASP.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>This is
                                                          what we need
                                                          to change and
                                                          reach, more
                                                          participation,
                                                          community
                                                          bonding and
                                                          innovative
                                                          projects. </div>
                                                          <div><br>
                                                          </div>
                                                          <div><b>An
                                                          idea</b></div>
                                                          <div>All major
                                                          flagship/LABS
                                                          and the best
                                                          incubators
                                                          projects
                                                          should be
                                                          present at
                                                          Defcon/OWASP
                                                          conference
                                                           for the
                                                          "OWASP
                                                          Hackaton
                                                          Contest"</div>
                                                          <div><br>
                                                          </div>
                                                          <div>
                                                          <div>Budget:
                                                          50,000K</div>
                                                          <div>Goals: </div>
                                                          <div>
                                                          <ul>
                                                          <li>Build new
                                                          features for
                                                          OWASP
                                                          projects, <br>
                                                          </li>
                                                          <li>Promote
                                                          OWASP projects
                                                          and Chapters<br>
                                                          </li>
                                                          <li>Help
                                                          actual
                                                          projects to
                                                          move fwd with
                                                          development</li>
                                                          <li>Get new
                                                          volunteers to
                                                          work on
                                                          projects<br>
                                                          </li>
                                                          <li>Start new
                                                          innovative
                                                          projects</li>
                                                          </ul>
                                                          <div>OWASP
                                                          Hackaton
                                                          Activities:</div>
                                                          </div>
                                                          </div>
                                                          <div>
                                                          <ul>
                                                          <li>Help build
                                                          new features, <br>
                                                          </li>
                                                          <li>Start a
                                                          new innovative
                                                          project <br>
                                                          </li>
                                                          <li>Become an
                                                          owaps
                                                          member/volunteer/start
                                                          a chapter<br>
                                                          </li>
                                                          <li>Write
                                                          documentation, <br>
                                                          </li>
                                                          <li>Motivation
                                                          for
                                                          participation:
                                                          get
                                                          recognition
                                                          and a
                                                          price(plenty
                                                          small prices
                                                          can be given
                                                          away such as :
                                                          Drinks/Food
                                                          vouchers ,
                                                          T-Shirts etc).</li>
                                                          </ul>
                                                          </div>
                                                          <div>This
                                                          hackaton
                                                          should be fun,
                                                          and help
                                                          people connect
                                                          and
                                                          participate</div>
                                                          <div><br>
                                                          </div>
                                                          <div>regards</div>
                                                          <span><font
                                                          color="#888888">
                                                          <div><br>
                                                          </div>
                                                          <div>Johanna</div>
                                                          </font></span></div>
                                                          <div>
                                                          <div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">On
                                                          Sun, Feb 8,
                                                          2015 at 1:08
                                                          PM, Dinis Cruz
                                                          <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:dinis.cruz@owasp.org"
                                                          target="_blank">dinis.cruz@owasp.org</a>></span>
                                                          wrote:<br>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div dir="ltr">Hi
                                                          Johanna, as
                                                          you are
                                                          seeing, it's
                                                          really hard to
                                                          create an
                                                          OWASP Project
                                                          Summit with
                                                          the current
                                                          model (with
                                                          little
                                                          funding, with
                                                          no dedicated
                                                          team, attached
                                                          to a
                                                          conference,
                                                          etc..)
                                                          <div><br>
                                                          </div>
                                                          <div>The
                                                          formula that
                                                          worked in the
                                                          past was to
                                                          start with a
                                                          set budget
                                                          (lets say 50k
                                                          to 100k) and :</div>
                                                          <div>
                                                          <ul>
                                                          <li>use those
                                                          funds to make
                                                          sure the key
                                                          players (in
                                                          this case
                                                          project
                                                          leaders and
                                                          'new players')
                                                          are going to
                                                          attend (by
                                                          offering to
                                                          cover all
                                                          travel and
                                                          accommodation
                                                          expenses
                                                          (while asking
                                                          them if they
                                                          can get their
                                                          employee to
                                                          pay instead))</li>
                                                          <li>hire a
                                                          dedicated
                                                          summit team
                                                          (for that
                                                          period)<br>
                                                          </li>
                                                          <li>secure
                                                          dedicated
                                                          venue and
                                                          summit
                                                          resources</li>
                                                          <li>generate a
                                                          huge amount of
                                                          energy about
                                                          the summit
                                                          sessions
                                                          (starting by
                                                          inventing all
                                                          sorts of
                                                          sessions,
                                                          until the real
                                                          sessions
                                                          become solid) </li>
                                                          <li>cast a
                                                          very wide net
                                                          of
                                                          'invitations
                                                          to attend the
                                                          summit' (with
                                                          the vision
                                                          that<i> 'the
                                                          summit is THE
                                                          place to be,
                                                          where all the
                                                          key players
                                                          will be in the
                                                          same location,
                                                          and  where
                                                          REAL work can
                                                          be done'</i>)</li>
                                                          </ul>
                                                          </div>
                                                          <div>The hard
                                                          part is making
                                                          people
                                                          'believe' in
                                                          the Summit.
                                                          The objective
                                                          is for our
                                                          leaders (and
                                                          attendees) to
                                                          create the
                                                          sessions that
                                                          THEY want to
                                                          attend (on top
                                                          of the
                                                          infrastructure
                                                          provided by
                                                          the Summit).
                                                          By definition
                                                          those sessions
                                                          will be
                                                          interested to
                                                          others, and
                                                          eventually a
                                                          virtuous cycle
                                                          will start to
                                                          occur.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Back to
                                                          the Project
                                                          Summit, the
                                                          interesting
                                                          question is: <b>should
                                                          OWASP invest
                                                          50k or 100k on
                                                          its projects? </b></div>
                                                          <div><b><br>
                                                          </b></div>
                                                          <div>I think
                                                          the answer is
                                                          <b>YES </b>since
                                                          Owasp's
                                                          projects are
                                                          critical part
                                                          of OWASP
                                                          (which
                                                          deserves solid
                                                          investment)</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Here are
                                                          some of my
                                                          blog posts
                                                          about my views
                                                          on OWASP
                                                          Summits and
                                                          OWASP Projects</div>
                                                          <div>
                                                          <ul>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/04/summits-must-be-part-of-owasps-dna.html"
target="_blank">Summits must be part of OWASP's DNA</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/04/great-description-of-why-owasp-summits.html"
target="_blank">Great description of why OWASP Summits are special</a> </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/12/owasp-revenue-splits-and-non-profits.html"
target="_blank">OWASP Revenue Splits and the "Non-profits have a charter
                                                          to be
                                                          innovators"</a> </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/04/i-want-to-vote-for-summit-teamvision.html"
target="_blank">I want to vote for a Summit Team+Vision , NOT for a
                                                          venue</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/04/some-proposed-visions-for-next-owasp.html"
target="_blank">Some proposed Visions for next OWASP Summit</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/04/why-large-owasp-projects-start-to-stale.html"
target="_blank">Why large OWASP projects start to stale (and who should
                                                          pay for the
                                                          work)</a> </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2009/06/owasp-proposed-change-for-soc-use.html"
target="_blank">OWASP: Proposed change for SoC: Use budget to pay for
                                                          project
                                                          related
                                                          expenses</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/10/sometimes-best-response-is-just-say-yes.html"
target="_blank">Sometimes the best response is just say 'YES'</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/11/i-wish-that-owasp-in-2014.html"
target="_blank">I wish that OWASP in 2014 ....</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2013/01/owasp-principles-based-on-nhs.html"
target="_blank">OWASP Principles based on NHS?</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2013/01/on-how-to-get-paid-to-work-on-owasp.html"
target="_blank">On how to get paid to work on OWASP projects</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/04/roi-on-owasp-investment-on-projects-ie.html"
target="_blank">ROI on OWASP investment on Projects (ie paying leaders)</a> <br>
                                                          </li>
                                                          <li><a
                                                          moz-do-not-send="true"
href="http://blog.diniscruz.com/2012/11/improved-wikipedia-funding-page-why.html"
target="_blank">Improved Wikipedia funding page, why OWASP needs
                                                          something
                                                          similar, and
                                                          who buys OWASP
                                                          Corporate
                                                          Memberships</a> <br>
                                                          </li>
                                                          </ul>
                                                          </div>
                                                          <div>Thanks<br>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>Dinis</div>
                                                          <div
                                                          class="gmail_extra"><br>
                                                          <div
                                                          class="gmail_quote">
                                                          <div>
                                                          <div>On 7
                                                          February 2015
                                                          at 19:47,
                                                          johanna curiel
                                                          curiel <span
                                                          dir="ltr"><<a
moz-do-not-send="true" href="mailto:johanna.curiel@owasp.org"
                                                          target="_blank">johanna.curiel@owasp.org</a>></span>
                                                          wrote:<br>
                                                          </div>
                                                          </div>
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div>
                                                          <div>
                                                          <div dir="ltr">Board
                                                          and Project
                                                          Leaders
                                                          <div><br>
                                                          </div>
                                                          <div>After a
                                                          first call to
                                                          get people to
                                                          assist and
                                                          participate
                                                          into the
                                                          Project Summit
                                                          NL, only 2
                                                          major
                                                          projects(Flagship)
                                                          have reacted
                                                          and would like
                                                          to
                                                          participate.</div>
                                                          <div>
                                                          <ul>
                                                          <li>OWASP ZAP<br>
                                                          </li>
                                                          <li>OWTF<br>
                                                          </li>
                                                          </ul>
                                                          <div>Right now
                                                          we have 2
                                                          rooms
                                                          available for
                                                          this day-20th
                                                          May (Martin
                                                          please confirm
                                                          if this is
                                                          still the
                                                          case) </div>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>For the
                                                          rest I think
                                                          we definitely
                                                          need to breed
                                                          in new life
                                                          into projects
                                                          participation.
                                                          It can be that
                                                          for projects
                                                          with leaders
                                                          located in
                                                          USA, it will
                                                          be more
                                                          convenient to
                                                          have a small
                                                          summit there
                                                          specially for
                                                          them or, we
                                                          can try to
                                                          promote
                                                          participation
                                                          to projects
                                                          (looking for
                                                          volunteers,
                                                          starting a
                                                          project etc).</div>
                                                          <div><br>
                                                          </div>
                                                          <div>So far ,
                                                          I don't think
                                                          we can call
                                                          this a Project
                                                          Summit , and
                                                          it might get
                                                          down to
                                                          ZAP/OWTF
                                                          summit</div>
                                                          <div><br>
                                                          </div>
                                                          <div>In that
                                                          case is
                                                          essential to
                                                          know:</div>
                                                          <div>
                                                          <ul>
                                                          <li>Identify
                                                          how many
                                                          people will be
                                                          assisting to
                                                          the ZAP and
                                                          OWTF session<br>
                                                          </li>
                                                          <li>IF
                                                          Traveling
                                                          tickets and
                                                          accommodation
                                                          could be paid
                                                          for ZAP/OWTF
                                                          leaders<br>
                                                          </li>
                                                          <li>Coffee
                                                          break
                                                          sponsorship
                                                          for the
                                                          attendees of
                                                          this summit<br>
                                                          </li>
                                                          </ul>
                                                          <div>That will
                                                          basically
                                                          resume the
                                                          costs. based
                                                          on this low
                                                          attendance I
                                                          don't think
                                                          I'll be
                                                          present in
                                                          Amsterdam.</div>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>I think
                                                          we need to
                                                          think of
                                                          another
                                                          strategy to
                                                          promote Owasp
                                                          projects
                                                          through
                                                          summits if we
                                                          want to
                                                          continue with
                                                          this. What do
                                                          we want to
                                                          achieve
                                                          indeed?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>My
                                                          impression is
                                                          that no new
                                                          innovative
                                                          projects are
                                                          being started
                                                          at OWASP.</div>
                                                          <div>We
                                                          definitely
                                                          need new
                                                          'blood' and
                                                          innovative
                                                          thinkers</div>
                                                          <div><br>
                                                          </div>
                                                          <div><br>
                                                          </div>
                                                          <div>Regards</div>
                                                          <span><font
                                                          color="#888888">
                                                          <div><br>
                                                          </div>
                                                          <div>Johanna</div>
                                                          <div><br>
                                                          </div>
                                                          </font></span></div>
                                                          </div>
                                                          </div>
                                                          <span><font
                                                          color="#888888"><span><font
color="#888888">
                                                          -- <br>
                                                          You received
                                                          this message
                                                          because you
                                                          are subscribed
                                                          to the Google
                                                          Groups "OWASP
                                                          Projects Task
                                                          Force" group.<br>
                                                          To unsubscribe
                                                          from this
                                                          group and stop
                                                          receiving
                                                          emails from
                                                          it, send an
                                                          email to <a
                                                          moz-do-not-send="true"
href="mailto:projects-task-force+unsubscribe@owasp.org" target="_blank">projects-task-force+unsubscribe@owasp.org</a>.<br>
                                                          To post to
                                                          this group,
                                                          send email to
                                                          <a
                                                          moz-do-not-send="true"
href="mailto:projects-task-force@owasp.org" target="_blank">projects-task-force@owasp.org</a>.<br>
                                                          To view this
                                                          discussion on
                                                          the web visit
                                                          <a
                                                          moz-do-not-send="true"
href="https://groups.google.com/a/owasp.org/d/msgid/projects-task-force/CACxry_0OwMS2fHm8v2DuK7a2h8oXuo4WpPmiz3cKF2A%3DqXYJRg%40mail.gmail.com?utm_medium=email&utm_source=footer"
target="_blank">https://groups.google.com/a/owasp.org/d/msgid/projects-task-force/CACxry_0OwMS2fHm8v2DuK7a2h8oXuo4WpPmiz3cKF2A%3DqXYJRg%40mail.gmail.com</a>.<br>
                                                          </font></span></font></span></blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
_______________________________________________<br>
                                                          OWASP-Leaders
                                                          mailing list<br>
                                                          <a
                                                          moz-do-not-send="true"
href="mailto:OWASP-Leaders@lists.owasp.org" target="_blank">OWASP-Leaders@lists.owasp.org</a><br>
                                                          <a
                                                          moz-do-not-send="true"
href="https://lists.owasp.org/mailman/listinfo/owasp-leaders"
                                                          target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-leaders</a><br>
                                                          <br>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          </div>
                                                          <span>
                                                          <blockquote
                                                          type="cite">
                                                          <div><span>_______________________________________________</span><br>
                                                          <span>Owasp-board
                                                          mailing list</span><br>
                                                          <span><a
                                                          moz-do-not-send="true"
href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a></span><br>
                                                          <span><a
                                                          moz-do-not-send="true"
href="https://lists.owasp.org/mailman/listinfo/owasp-board"
                                                          target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a></span><br>
                                                          </div>
                                                          </blockquote>
                                                          </span></div>
                                                          <br>
_______________________________________________<br>
                                                          Owasp-board
                                                          mailing list<br>
                                                          <a
                                                          moz-do-not-send="true"
href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
                                                          <a
                                                          moz-do-not-send="true"
href="https://lists.owasp.org/mailman/listinfo/owasp-board"
                                                          target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                                                          <br>
                                                        </blockquote>
                                                      </div>
                                                      <br>
                                                    </div>
                                                  </div>
                                                </blockquote>
                                                <blockquote type="cite">
                                                  <div><span>_______________________________________________</span><br>
                                                    <span>Owasp-board
                                                      mailing list</span><br>
                                                    <span><a
                                                        moz-do-not-send="true"
href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a></span><br>
                                                    <span><a
                                                        moz-do-not-send="true"
href="https://lists.owasp.org/mailman/listinfo/owasp-board"
                                                        target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a></span><br>
                                                  </div>
                                                </blockquote>
                                              </div>
                                            </div>
                                          </div>
                                          <br>
_______________________________________________<br>
                                          Owasp-board mailing list<br>
                                          <a moz-do-not-send="true"
                                            href="mailto:Owasp-board@lists.owasp.org"
                                            target="_blank">Owasp-board@lists.owasp.org</a><br>
                                          <a moz-do-not-send="true"
                                            href="https://lists.owasp.org/mailman/listinfo/owasp-board"
                                            target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                                          <br>
                                        </blockquote>
                                      </div>
                                      <br>
                                    </div>
                                  </div>
                                </div>
                                <br>
_______________________________________________<br>
                                Owasp-board mailing list<br>
                                <a moz-do-not-send="true"
                                  href="mailto:Owasp-board@lists.owasp.org"
                                  target="_blank">Owasp-board@lists.owasp.org</a><br>
                                <a moz-do-not-send="true"
                                  href="https://lists.owasp.org/mailman/listinfo/owasp-board"
                                  target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                                <br>
                              </blockquote>
                            </div>
                            <br>
                          </div>
                        </div>
                      </div>
                    </blockquote>
                  </div>
                  <br>
                </div>
              </div>
            </div>
            <br>
            _______________________________________________<br>
            Owasp-board mailing list<br>
            <a moz-do-not-send="true"
              href="mailto:Owasp-board@lists.owasp.org">Owasp-board@lists.owasp.org</a><br>
            <a moz-do-not-send="true"
              href="https://lists.owasp.org/mailman/listinfo/owasp-board"
              target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Owasp-board mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Owasp-board@lists.owasp.org">Owasp-board@lists.owasp.org</a>
<a class="moz-txt-link-freetext" href="https://lists.owasp.org/mailman/listinfo/owasp-board">https://lists.owasp.org/mailman/listinfo/owasp-board</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>