<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    > However, I don’t think to be fair some of the comments made
    here about past experiences.<br>
    <br>
    Well these are <i><b>my personal experiences</b></i> and you should
    not discount them. You should listen and address them. Especially
    since you are asking for 30k in budget with a sense of "rushing" and
    wanting that money cleared right away. <br>
    <br>
    The fact that you continue to respond to my (and other) concerns
    with rejection and suspicion makes me very concerned about approving
    of these funds.<br>
    <br>
    And even more concerning is that while you continue to ask for
    funds, when asked if you would do something as simple as update and
    maintain the wiki for this program you said no...  so yea. <br>
    <br>
    I suggest you address these concerns more head on and respectfully -
    and actually dive in and help make the program happen by taking on
    the wiki editing tasks. Really, when asking for (a lot of) money
    from OWASP you should also be willing to do the work and help make
    it happen. To ask for a lot of money and then reject simple tasks
    like wiki on boarding seems a bit out of balance.<br>
    <br>
    - Jim<br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 4/7/15 2:51 PM, Fabio Cerullo wrote:<br>
    </div>
    <blockquote
      cite="mid:1F6F3A5F-2084-4D5A-92AF-3EE92C29BBD7@owasp.org"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      Jim,
      <div class=""><br class="">
      </div>
      <div class="">The process could always be improved, and I think we
        are all in agreement there.</div>
      <div class=""><br class="">
      </div>
      <div class="">However, I don’t think to be fair some of the
        comments made here about past experiences.</div>
      <div class=""><br class="">
      </div>
      <div class="">Kostas is willing to help out in the process of
        drafting a proposal, setting up the wiki, etc.</div>
      <div class=""><br class="">
      </div>
      <div class="">It seems no one else is willing to take this onboard
        and it is quite a significant task.</div>
      <div class=""><br class="">
      </div>
      <div class="">I would like to have the understanding that he &
        his project will be able to participate.</div>
      <div class=""><br class="">
      </div>
      <div class="">Could you & some of my fellow Board members
        guarantee that?</div>
      <div class=""><br class="">
      </div>
      <div class="">Thanks,</div>
      <div class=""><br class="">
        <div apple-content-edited="true" class="">
          <div style="color: rgb(0, 0, 0); letter-spacing: normal;
            orphans: auto; text-align: start; text-indent: 0px;
            text-transform: none; white-space: normal; widows: auto;
            word-spacing: 0px; -webkit-text-stroke-width: 0px;
            word-wrap: break-word; -webkit-nbsp-mode: space;
            -webkit-line-break: after-white-space;" class="">
            <div class="">Fabio Cerullo</div>
            <div class="">Global Board Member</div>
            OWASP Foundation
            <div class=""><a moz-do-not-send="true"
                href="https://www.owasp.org" class="">https://www.owasp.org</a></div>
          </div>
        </div>
        <br class="">
        <div>
          <blockquote type="cite" class="">
            <div class="">On 7 Apr 2015, at 17:37, Jim Manico <<a
                moz-do-not-send="true"
                href="mailto:jim.manico@owasp.org" class="">jim.manico@owasp.org</a>>
              wrote:</div>
            <br class="Apple-interchange-newline">
            <div class="">
              <meta content="text/html; charset=windows-1252"
                http-equiv="Content-Type" class="">
              <div bgcolor="#FFFFFF" text="#000000" class=""> +1 I agree
                with Johanna. I participated and watched the entire
                email chain last year. I am again NOT saying that anyone
                was unethical, but it was confusing, there were several
                who leveraged complaints and it felt very disorganized
                and chaotic.<br class="">
                <br class="">
                This is just my opinion.<br class="">
                <br class="">
                I would love to understand (1) how the process will work
                and (2) how 'conflict of interests' will be handled
                before the board votes on this rather large budget
                request. This is nothing special to this potential
                project, it's something we do or should be doing for any
                OWASP activity.<br class="">
                <br class="">
                Aloha,<br class="">
                Jim<br class="">
                <br class="">
                <br class="">
                <div class="moz-cite-prefix">On 4/7/15 11:33 AM, johanna
                  curiel curiel wrote:<br class="">
                </div>
                <blockquote
cite="mid:CACxry_0q3z5uJ3E+ixk_rhO0d8_E4g3cxFF86zxUkN0DpMhQMQ@mail.gmail.com"
                  type="cite" class="">
                  <div dir="ltr" class=""><span
                      style="font-size:12.8000001907349px" class="">Anybody

                      is welcome to participate and don’t like to
                      establish rules about ‘who’ should be
                      participating as the ones you are suggesting.</span><br
                      class="">
                    <div class=""><span
                        style="font-size:12.8000001907349px" class=""><br
                          class="">
                      </span></div>
                    <div class=""><span
                        style="font-size:12.8000001907349px" class="">Fabio,
                        the rules regarding 'conflict of interest'
                        should be there to avoid
                        any disagreements. Despite the fact that you
                        mentioned how well Kostas lead the Gsoc, anyone
                        who followed the last Gsoc email listing, can
                        say that there were always discussions because
                        rules where not clear. </span></div>
                    <div class=""><span
                        style="font-size:12.8000001907349px" class=""><br
                          class="">
                      </span></div>
                    <div class=""><span
                        style="font-size:12.8000001907349px" class="">Any
                        auditing will always highlight conflict of
                        interest as an issue and I hope that you
                        understand my p.o.w.</span></div>
                  </div>
                  <div class="gmail_extra"><br class="">
                    <div class="gmail_quote">On Tue, Apr 7, 2015 at
                      12:26 PM, Fabio Cerullo <span dir="ltr" class=""><<a
                          moz-do-not-send="true"
                          href="mailto:fcerullo@owasp.org"
                          target="_blank" class="">fcerullo@owasp.org</a>></span>
                      wrote:<br class="">
                      <blockquote class="gmail_quote" style="margin:0 0
                        0 .8ex;border-left:1px #ccc
                        solid;padding-left:1ex">
                        <div style="word-wrap:break-word" class="">Johanna

                          <div class=""><br class="">
                          </div>
                          <div class="">Anybody is welcome to
                            participate and don’t like to establish
                            rules about ‘who’ should be participating as
                            the ones you are suggesting.</div>
                          <div class=""><br class="">
                          </div>
                          <div class="">As mentioned earlier, I trust
                            Kostas to do a great job and you are also
                            welcome to participate in the org team /
                            project mentor teams.</div>
                          <div class=""><br class="">
                          </div>
                          <div class="">Having said that, I will
                            progress with the project proposal working
                            with him which to my view is transparent and
                            open to everyone.</div>
                          <div class=""><br class="">
                          </div>
                          <div class="">If someone from the Global Board
                            disagrees, please let me know. Otherwise I
                            will seek budget approval for this to move
                            ahead.</div>
                          <div class=""><br class="">
                          </div>
                          <div class="">Thanks,</div>
                          <div class=""><span class=""><br class="">
                              <div class="">
                                <div style="letter-spacing: normal;
                                  text-align: start; text-indent: 0px;
                                  text-transform: none; white-space:
                                  normal; word-spacing: 0px; word-wrap:
                                  break-word;" class="">
                                  <div class="">Fabio Cerullo</div>
                                  <div class="">Global Board Member</div>
                                  OWASP Foundation
                                  <div class=""><a
                                      moz-do-not-send="true"
                                      href="https://www.owasp.org/"
                                      target="_blank" class="">https://www.owasp.org</a></div>
                                </div>
                              </div>
                              <br class="">
                            </span>
                            <div class="">
                              <div class="h5">
                                <div class="">
                                  <blockquote type="cite" class="">
                                    <div class="">On 7 Apr 2015, at
                                      16:01, johanna curiel curiel <<a
                                        moz-do-not-send="true"
                                        href="mailto:johanna.curiel@owasp.org"
                                        target="_blank" class="">johanna.curiel@owasp.org</a>>

                                      wrote:</div>
                                    <br class="">
                                    <div class="">
                                      <div dir="ltr" class=""><span
                                          style="font-size:12.8000001907349px"
                                          class="">I would definitely
                                          support Kostas as overall
                                          program admin in case he is
                                          interested. Do you agree?</span><br
                                          class="">
                                        <div class=""><span
                                            style="font-size:12.8000001907349px"
                                            class=""><br class="">
                                          </span></div>
                                        <div class=""><span
                                            style="font-size:12.8000001907349px"
                                            class="">I think this should
                                            be submitted to a
                                            vote, especially depending
                                            if Kostas wants to mentor a
                                            project or if hackademics is
                                            also participating </span></div>
                                      </div>
                                      <div class="gmail_extra"><br
                                          class="">
                                        <div class="gmail_quote">On Tue,
                                          Apr 7, 2015 at 10:56 AM, Fabio
                                          Cerullo <span dir="ltr"
                                            class=""><<a
                                              moz-do-not-send="true"
                                              href="mailto:fcerullo@owasp.org"
                                              target="_blank" class="">fcerullo@owasp.org</a>></span>
                                          wrote:<br class="">
                                          <blockquote
                                            class="gmail_quote"
                                            style="margin:0 0 0
                                            .8ex;border-left:1px #ccc
                                            solid;padding-left:1ex">
                                            <div
                                              style="word-wrap:break-word"
                                              class="">I think the 2
                                              mentors per student slot
                                              makes sense. In case one
                                              of the mentors get sick,
                                              etc.
                                              <div class=""><br class="">
                                              </div>
                                              <div class="">Based on the
                                                feedback received and
                                                the iterations so far,
                                                it seems we have a
                                                strong proposal to put
                                                up for voting.</div>
                                              <div class=""><br class="">
                                              </div>
                                              <div class="">I would
                                                definitely support
                                                Kostas as overall
                                                program admin in case he
                                                is interested. Do you
                                                agree?</div>
                                              <div class=""><br class="">
                                              </div>
                                              <div class="">Thanks,</div>
                                              <div class=""><span
                                                  class=""><br class="">
                                                  <div class="">
                                                    <div
style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"
                                                      class="">
                                                      <div class="">Fabio
                                                        Cerullo</div>
                                                      <div class="">Global
                                                        Board Member</div>
                                                      OWASP Foundation
                                                      <div class=""><a
                                                          moz-do-not-send="true"
href="https://www.owasp.org/" target="_blank" class="">https://www.owasp.org</a></div>
                                                    </div>
                                                  </div>
                                                  <br class="">
                                                </span>
                                                <div class="">
                                                  <div class="">
                                                    <div class="">
                                                      <blockquote
                                                        type="cite"
                                                        class="">
                                                        <div class="">On
                                                          7 Apr 2015, at
                                                          15:46, johanna
                                                          curiel curiel
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:johanna.curiel@owasp.org" target="_blank" class="">johanna.curiel@owasp.org</a>>

                                                          wrote:</div>
                                                        <br class="">
                                                        <div class="">
                                                          <div dir="ltr"
                                                          class=""><span
style="font-size:12.8000001907349px" class="">What do you think? I don’t
                                                          have time to
                                                          setup the
                                                          wiki, etc at
                                                          present but
                                                          would welcome
                                                          your help.</span><br
                                                          class="">
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">I think the rules based on
                                                          stages seems
                                                          quite fair to
                                                          me, however,
                                                          that is my
                                                          opinion ;-),
                                                          another
                                                          important
                                                          criteria
                                                          should be how
                                                          many mentors
                                                          are available
                                                          per project to
                                                          provide
                                                          guidance. I
                                                          think 1
                                                          project leader
                                                          per student
                                                          should be the
                                                          minimum
                                                          (Google uses 2
                                                          mentors per
                                                          project/proposal)</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">Also it should be clear ,
                                                          in case a
                                                          mentor is not
                                                          able to
                                                          followup or
                                                          continue with
                                                          mentoring what
                                                          should be done
                                                          and who should
                                                          follow up this
                                                          (the org
                                                          team),
                                                          therefore ,
                                                          when volunteers want
                                                          to be part of
                                                          the
                                                          program(whether org
                                                          team/mentor)
                                                          they must know
                                                          their responsibilities,

                                                          after all ,
                                                          we don't want
                                                          to waste money
                                                          well intended.</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">Fabio, if you have no time
                                                          to set the
                                                          wiki, someone
                                                          must take the
                                                          lead to do
                                                          this, based on
                                                          what you have
                                                          proposed, it
                                                          seems to me
                                                          that the
                                                          person responsible or in-charge of
                                                          the program
                                                          should do
                                                          this. Is it
                                                          clear who is
                                                          this person?
                                                          (will it be
                                                          Kostas? other ones?)</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">When i take an initiative,
                                                          I have always
                                                          followed these
                                                          steps
                                                          (wiki-proposal,
                                                          publish info,
                                                          get
                                                          reactions/adapt)
                                                          so it is as
                                                          much
                                                          transparent as
                                                          I can do. It
                                                          is a lot of
                                                          work but this
                                                          is part of
                                                          our responsibilities when
                                                          managing these
                                                          kind of
                                                          initiatives.</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">regards</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">Johanna</span></div>
                                                          </div>
                                                          <div
                                                          class="gmail_extra"><br
                                                          class="">
                                                          <div
                                                          class="gmail_quote">On

                                                          Tue, Apr 7,
                                                          2015 at 10:37
                                                          AM, Fabio
                                                          Cerullo <span
                                                          dir="ltr"
                                                          class=""><<a
moz-do-not-send="true" href="mailto:fcerullo@owasp.org" target="_blank"
                                                          class="">fcerullo@owasp.org</a>></span>
                                                          wrote:<br
                                                          class="">
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0
                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div
                                                          style="word-wrap:break-word"
                                                          class="">Johanna,

                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">Thanks
                                                          for asking.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">I
                                                          thought about
                                                          the slot
                                                          allocation and
                                                          maybe the
                                                          criteria is
                                                          the ‘maturity’
                                                          of the
                                                          project.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class=""><a
moz-do-not-send="true"
                                                          href="https://www.owasp.org/index.php/OWASP_Project_Stages"
target="_blank" class="">https://www.owasp.org/index.php/OWASP_Project_Stages</a></div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">So,
                                                          based on the
                                                          project
                                                          current
                                                          status:
                                                          Incubator,
                                                          Lab, Flagship
                                                          it is decided
                                                          the max amount
                                                          of slots.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">Flagship:
                                                          Max 3 slots</div>
                                                          <div class="">Lab:
                                                          Max 2 slots</div>
                                                          <div class="">Incubator:

                                                          Max 1 slot</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">What
                                                          do you think?
                                                          I don’t have
                                                          time to setup
                                                          the wiki, etc
                                                          at present but
                                                          would welcome
                                                          your help.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">Thanks,</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class=""><span
                                                          class="">
                                                          <div class="">
                                                          <div
style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"
                                                          class="">
                                                          <div class="">Fabio

                                                          Cerullo</div>
                                                          <div class="">Global

                                                          Board Member</div>
                                                          OWASP
                                                          Foundation
                                                          <div class=""><a
moz-do-not-send="true" href="https://www.owasp.org/" target="_blank"
                                                          class="">https://www.owasp.org</a></div>
                                                          </div>
                                                          </div>
                                                          <br class="">
                                                          </span>
                                                          <div class="">
                                                          <div class="">
                                                          <div class="">
                                                          <blockquote
                                                          type="cite"
                                                          class="">
                                                          <div class="">On
                                                          7 Apr 2015, at
                                                          15:24, johanna
                                                          curiel curiel
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:johanna.curiel@owasp.org" target="_blank" class="">johanna.curiel@owasp.org</a>>

                                                          wrote:</div>
                                                          <br class="">
                                                          <div class="">
                                                          <div dir="ltr"
                                                          class=""><span
style="font-size:12.8000001907349px" class="">5) Finally, the org team
                                                          in conjunction
                                                          with the
                                                          project
                                                          mentors team
                                                          then decide
                                                          how many slots
                                                          each project
                                                          will get.</span><br
                                                          class="">
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">I think , in order to
                                                          avoid any
                                                          conflict of
                                                          interest, the
                                                          org team
                                                          members should
                                                          be </span><span
style="font-size:12.8000001907349px" class="">an independent member with
                                                          no ties to any
                                                          of
                                                          the participating</span><span
style="font-size:12.8000001907349px" class=""> projects</span></div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">So I would like to
                                                          formally
                                                          request a
                                                          budget of USD
                                                          30K (3K per
                                                          slot with a
                                                          max of 10
                                                          slots) to move
                                                          ahead with
                                                          this process.</span><br
                                                          class="">
                                                          </div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">A clear criteria should
                                                          exist before
                                                          any approvals
                                                          are
                                                          exercised. </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">The board should ask :</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><i class="">Do we have
                                                          clear criteria
                                                          for this
                                                          program?</i></span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">In my opinion, no, just a
                                                          bunch of
                                                          emails.</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><i class="">Has it been
                                                          openly defined
                                                          for all
                                                          potential
                                                          participating
                                                          members and
                                                          project
                                                          leaders?</i></span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">No, it should be published
                                                          on a Wiki and
                                                          send through
                                                          the community
                                                          /owasp-leaders
                                                          list for
                                                          people to
                                                          comment and
                                                          agree. At
                                                          least a clear
                                                          proposal
                                                          should be
                                                          setup and
                                                          published.</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">After this process then I
                                                          think we could
                                                          go ahead and
                                                          approve,
                                                          because its
                                                          clear what are
                                                          the rules for
                                                          participation.
                                                          There are
                                                          still some
                                                          issues that I
                                                          see as
                                                          potential
                                                          conflicts such
                                                          as </span><i
style="font-size:12.8000001907349px" class="">for example</i><span
                                                          style="font-size:12.8000001907349px"
                                                          class="">:</span></div>
                                                          <div class="">
                                                          <ul class="">
                                                          <li class=""><span
style="font-size:12.8000001907349px" class="">How many slots can a
                                                          project get?</span><br
                                                          class="">
                                                          </li>
                                                          <li class=""><span
style="font-size:12.8000001907349px" class="">Should a project get more
                                                          slots than
                                                          others?</span></li>
                                                          <li class=""><span
style="font-size:12.8000001907349px" class="">Based on what <i class="">exact</i>
                                                           criteria
                                                          should we
                                                          provide slots?</span></li>
                                                          <li class=""><span
style="font-size:12.8000001907349px" class="">Should the org team have
                                                          tights (such
                                                          as being an
                                                          active
                                                          volunteer) to
                                                          the
                                                          participating
                                                          project(this
                                                          can be
                                                          conflict of
                                                          interest)</span></li>
                                                          </ul>
                                                          </div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">regards</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class="">Johanna</span></div>
                                                          <div class=""><span
style="font-size:12.8000001907349px" class=""><br class="">
                                                          </span></div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          </div>
                                                          <div
                                                          class="gmail_extra"><br
                                                          class="">
                                                          <div
                                                          class="gmail_quote">On

                                                          Tue, Apr 7,
                                                          2015 at 9:28
                                                          AM, Fabio
                                                          Cerullo <span
                                                          dir="ltr"
                                                          class=""><<a
moz-do-not-send="true" href="mailto:fcerullo@owasp.org" target="_blank"
                                                          class="">fcerullo@owasp.org</a>></span>
                                                          wrote:<br
                                                          class="">
                                                          <blockquote
                                                          class="gmail_quote"
                                                          style="margin:0

                                                          0 0
                                                          .8ex;border-left:1px
                                                          #ccc
                                                          solid;padding-left:1ex">
                                                          <div
                                                          style="word-wrap:break-word"
                                                          class="">
                                                          <div class="">Tobias,</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">Thanks

                                                          for your
                                                          comments.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">I
                                                          think an
                                                          escalation
                                                          procedure on
                                                          step #5 is in
                                                          order in case
                                                          there is a
                                                          disagreement
                                                          between the
                                                          org team and
                                                          the project
                                                          mentors team
                                                          about slots.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">So
                                                          I would like
                                                          to formally
                                                          request a
                                                          budget of USD
                                                          30K (3K per
                                                          slot with a
                                                          max of 10
                                                          slots) to move
                                                          ahead with
                                                          this process.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">I
                                                          will
                                                          appreciate the
                                                          support from
                                                          fellow Board
                                                          members to
                                                          make this
                                                          happen.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">Thanks,</div>
                                                          <span class=""><br
                                                          class="">
                                                          <div class="">
                                                          <div
style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"
                                                          class="">
                                                          <div class="">Fabio

                                                          Cerullo</div>
                                                          <div class="">Global

                                                          Board Member</div>
                                                          OWASP
                                                          Foundation
                                                          <div class=""><a
moz-do-not-send="true" href="https://www.owasp.org/" target="_blank"
                                                          class="">https://www.owasp.org</a></div>
                                                          </div>
                                                          </div>
                                                          <br class="">
                                                          </span>
                                                          <div class="">
                                                          <div class="">
                                                          <div class="">
                                                          <blockquote
                                                          type="cite"
                                                          class="">
                                                          <div class="">On
                                                          7 Apr 2015, at
                                                          13:49, Tobias
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:tobias.gondrom@owasp.org" target="_blank" class="">tobias.gondrom@owasp.org</a>>

                                                          wrote:</div>
                                                          <br class="">
                                                          <div class="">
                                                          <div
                                                          bgcolor="#FFFFFF"
                                                          text="#000000"
                                                          class="">
                                                          <div class="">Sounds

                                                          fair to me. <br
                                                          class="">
                                                          <br class="">
                                                          With one
                                                          suggested
                                                          addition: if
                                                          there is
                                                          disagreement
                                                          in step #5, I
                                                          like to see
                                                          this reported
                                                          to the org
                                                          team / board /
                                                          community for
                                                          resolution
                                                          without
                                                          conflict of
                                                          interest. <br
                                                          class="">
                                                          If the teams
                                                          agree with the
                                                          resolution of
                                                          step #5, I am
                                                          happy and
                                                          favour to go
                                                          ahead. If
                                                          there is
                                                          serious
                                                          disagreement,
                                                          I like to hear
                                                          about it. <br
                                                          class="">
                                                          <br class="">
                                                          Best, Tobias<br
                                                          class="">
                                                          <br class="">
                                                          <br class="">
                                                          On 07/04/15
                                                          05:33, Fabio
                                                          Cerullo wrote:<br
                                                          class="">
                                                          </div>
                                                          <blockquote
                                                          type="cite"
                                                          class="">
                                                          <div class="">Jim,

                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">Please

                                                          allow me to
                                                          explain a
                                                          submission
                                                          process might
                                                          work for
                                                          everyone:</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          <div class="">1)

                                                          Student review
                                                          the ideas
                                                          suggested by
                                                          mentors. For
                                                          example, GSOC
                                                          2015 Ideas: <a
moz-do-not-send="true"
                                                          href="https://www.owasp.org/index.php/GSoC2015_Ideas"
target="_blank" class="">https://www.owasp.org/index.php/GSoC2015_Ideas</a></div>
                                                          <div class="">2)
                                                          Based on those
                                                          ideas, the
                                                          students
                                                          submit their
                                                          own
                                                          ideas/projects.
                                                          Usually there
                                                          are dozens of
                                                          ideas
                                                          submitted by
                                                          students, some
                                                          are good, some
                                                          are poor, and
                                                          some are
                                                          completely
                                                          new. The
                                                          mentors are
                                                          not involved
                                                          at this stage
                                                          other than
                                                          answering
                                                          questions to
                                                          the students.
                                                          There is a
                                                          deadline for
                                                          the students
                                                          submission.</div>
                                                          <div class="">3)
                                                          The 'project
                                                          leaders/mentors
                                                          team' are the
                                                          ones who
                                                          evaluate and
                                                          pick the best
                                                          students
                                                          proposals
                                                          because they
                                                          know about
                                                          their
                                                          projects. In
                                                          the past, we
                                                          allowed all
                                                          mentors to
                                                          score all
                                                          proposals and
                                                          that is what
                                                          caused an
                                                          issue because
                                                          some people
                                                          ‘down voted’
                                                          other
                                                          proposals to
                                                          let their own
                                                          proposals to
                                                          score higher. </div>
                                                          <div class="">4)
                                                          The 'org team'
                                                          makes sure
                                                          that there is
                                                          no wrong doing
                                                          by reviewing
                                                          scores/etc.
                                                          Last year, the
                                                          issue above
                                                          was identified
                                                          by
                                                          Kostas/staff
                                                          and it was
                                                          promptly
                                                          addressed. An
                                                          additional
                                                          control that
                                                          could be
                                                          implemented,
                                                          and we were
                                                          hoping to
                                                          implement this
                                                          year at GSOC,
                                                          is that no
                                                          mentor could
                                                          vote on other
                                                          project
                                                          proposals
                                                          (e.g. ZAP
                                                          mentors cannot
                                                          down vote on
                                                          OWTF proposals
                                                          and
                                                          viceversa). So
                                                          that will
                                                          bubble up
                                                          naturally all
                                                          the best
                                                          proposals for
                                                          each
                                                          corresponding
                                                          project based
                                                          on scores from
                                                          the project
                                                          leaders/mentors. </div>
                                                          <div class="">5)

                                                          Finally, the
                                                          org team in
                                                          conjunction
                                                          with the
                                                          project
                                                          mentors team
                                                          then decide
                                                          how many slots
                                                          each project
                                                          will get.</div>
                                                          <div class=""><br
                                                          class="">
                                                          </div>
                                                          </div>
                                                          <div class="">Does
                                                          it sound fair?</div>
                                                          <br class="">
                                                          <div class="">
                                                          <div
style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"
                                                          class="">
                                                          <div class="">Fabio

                                                          Cerullo</div>
                                                          <div class="">Global

                                                          Board Member</div>
                                                          OWASP
                                                          Foundation
                                                          <div class=""><a
moz-do-not-send="true" href="https://www.owasp.org/" target="_blank"
                                                          class="">https://www.owasp.org</a></div>
                                                          </div>
                                                          </div>
                                                          <br class="">
                                                          <div class="">
                                                          <blockquote
                                                          type="cite"
                                                          class="">
                                                          <div class="">On
                                                          6 Apr 2015, at
                                                          20:07, Jim
                                                          Manico <<a
moz-do-not-send="true" href="mailto:jim.manico@owasp.org"
                                                          target="_blank"
                                                          class="">jim.manico@owasp.org</a>>

                                                          wrote:</div>
                                                          <br class="">
                                                          <div class="">I
                                                          suggest the
                                                          mentors work
                                                          with students
                                                          to make great
                                                          proposals and<br
                                                          class="">
                                                          have a
                                                          •different
                                                          group vote on
                                                          who wins•. The
                                                          whole issue
                                                          was mentors<br
                                                          class="">
                                                          voting on
                                                          projects and
                                                          we should
                                                          consider
                                                          avoiding that
                                                          if we<br
                                                          class="">
                                                          replicate a
                                                          similar
                                                          program at
                                                          OWASP.<br
                                                          class="">
                                                          <br class="">
                                                          --<br class="">
                                                          Jim Manico<br
                                                          class="">
                                                          @Manicode<br
                                                          class="">
                                                          <a
                                                          moz-do-not-send="true"
href="tel:%28808%29%20652-3805" value="+18086523805" target="_blank"
                                                          class="">(808)
                                                          652-3805</a><br
                                                          class="">
                                                          <br class="">
                                                          <blockquote
                                                          type="cite"
                                                          class="">On
                                                          Apr 6, 2015,
                                                          at 10:04 AM,
                                                          Fabio Cerullo
                                                          <<a
                                                          moz-do-not-send="true"
href="mailto:fcerullo@owasp.org" target="_blank" class="">fcerullo@owasp.org</a>>


                                                          wrote:<br
                                                          class="">
                                                          <br class="">
                                                          The ‘Mentors
                                                          team’ will
                                                          review/score
                                                          the proposals
                                                          and select the
                                                          best ones with
                                                          an oversight
                                                          from the
                                                          ‘Organisation
                                                          Team’.<br
                                                          class="">
                                                          </blockquote>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br class="">
                                                          <br class="">
                                                          <fieldset
                                                          class=""></fieldset>
                                                          <br class="">
                                                          <pre class="">_______________________________________________
Owasp-board mailing list
<a moz-do-not-send="true" href="mailto:Owasp-board@lists.owasp.org" target="_blank" class="">Owasp-board@lists.owasp.org</a>
<a moz-do-not-send="true" href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank" class="">https://lists.owasp.org/mailman/listinfo/owasp-board</a>
</pre>
                                                          </blockquote>
                                                          <br class="">
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br class="">
                                                          </div>
                                                          </div>
                                                          </div>
                                                          <br class="">
_______________________________________________<br class="">
                                                          Owasp-board
                                                          mailing list<br
                                                          class="">
                                                          <a
                                                          moz-do-not-send="true"
href="mailto:Owasp-board@lists.owasp.org" target="_blank" class="">Owasp-board@lists.owasp.org</a><br
                                                          class="">
                                                          <a
                                                          moz-do-not-send="true"
href="https://lists.owasp.org/mailman/listinfo/owasp-board"
                                                          target="_blank"
                                                          class="">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br
                                                          class="">
                                                          <br class="">
                                                          </blockquote>
                                                          </div>
                                                          <br class="">
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br class="">
                                                          </div>
                                                          </div>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br class="">
                                                          </div>
                                                        </div>
                                                      </blockquote>
                                                    </div>
                                                    <br class="">
                                                  </div>
                                                </div>
                                              </div>
                                            </div>
                                          </blockquote>
                                        </div>
                                        <br class="">
                                      </div>
                                    </div>
                                  </blockquote>
                                </div>
                                <br class="">
                              </div>
                            </div>
                          </div>
                        </div>
                      </blockquote>
                    </div>
                    <br class="">
                  </div>
                  <br class="">
                  <fieldset class="mimeAttachmentHeader"></fieldset>
                  <br class="">
                  <pre class="" wrap="">_______________________________________________
Owasp-board mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Owasp-board@lists.owasp.org">Owasp-board@lists.owasp.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://lists.owasp.org/mailman/listinfo/owasp-board">https://lists.owasp.org/mailman/listinfo/owasp-board</a>
</pre>
                </blockquote>
                <br class="">
              </div>
            </div>
          </blockquote>
        </div>
        <br class="">
      </div>
    </blockquote>
    <br>
  </body>
</html>