[Owasp-guide] [GPC] Participating in the project

Paulo Coimbra paulo.coimbra at owasp.org
Fri Jul 16 07:49:36 EDT 2010

Anurag, Vishal, Ken, Andrew, GPC, Board et al,


After we have concluded Mike won't return and knowing Anurag and Vishal have
volunteered to lead the project, I have made a couple of changes to the
OWASP Development Guide and I am checking whether or not they deserve your


Firstly, I have installed the last version of the new 'Project About'


Secondly, I've pointed out both Anurag and Vishal as project leaders (and
gave them control over the project's mailing list) and both Andrew and Ken
as Project Contributors.


Being so and supposing all the people involved agree with the action I've
taken, I thank Anurag and Vishal for volunteering to lead this important
OWASP Project. I also thank Ken for volunteering to contribute and Andrew
for continually contributing to and supporting this project. 


Second, regarding the new leadership of this project, the actions that
Anurag below proposes to be taken seemed to me perfectly adequate. Please
keep us updated on the progresses made. 


To get this project's phase started, here are a couple of references for
your review:

 - The Guidelines for OWASP Projects provide a quick overview of items key
to a projects success -

 - OWASP's Assessment Criteria is the metric by which projects are
evaluated.  There are three categories for projects: Alpha, Beta, and
Release.  The Assessment Criteria allows project leaders to know what
aspects of projects OWASP values -


 - OWASP's GPC blog - http://globalprojectscommittee.wordpress.com/,

As your project reaches a point that you'd like OWASP to assist in its
promotion, the GPC will need the following to help spread the word about
your project:

 * Conference style presentation describing the project in at least 3 slides

 * Project Flyer/Pamphlet (PDF file) -

As work on your project progresses and you are ready to create a new
release, please let the GPC know of the change in status.  The GPC can work
with you to get your new release assessed and moved up the OWASP quality
ladder from Alpha to Beta to Stable.  Every release does not require an
assessment - feel free to email the GPC if you are unsure about your
project's requirements.  For examples of projects at various quality levels,
please see the OWASP Project page -

That is all for now - I wish you and your project great success.  Thank you
for supporting OWASP's mission.

Should you have any questions or require any further information, please do
not hesitate to contact me. 

Many thanks, best regards,


Paulo Coimbra,

 <https://www.owasp.org/index.php/Main_Page> OWASP Project Manager


From: global-projects-committee-bounces at lists.owasp.org
[mailto:global-projects-committee-bounces at lists.owasp.org] On Behalf Of
Anurag Agarwal
Sent: quinta-feira, 15 de Julho de 2010 15:11
To: 'Paulo Coimbra'; 'Andrew van der Stock'; 'Vishal Garg'
Cc: owasp-guide at lists.owasp.org; kenowen at eowen.com; 'Global Projects
Committee'; 'OWASP Foundation Board List'
Subject: Re: [GPC] [Owasp-guide] Participating in the project


Paulo - Andrew already sent out an email to Mike yesterday. He also
mentioned in an earlier mail about him having a private conversation with
Mike and his intention of not continuing with the project. Andrew did
announce to the OWASP guide mailing list about new project leader and it was
agreed yesterday about me leading the project and taking Vishal's help as a


Please let me know if this works with you too as Andrew has asked Mike to do
a quick handoff. Even if he can't, myself and Vishal will go through the
archives, and 

1.       Take a snapshot of where we stand

2.       Reach out to individual stakeholders and get their current status

3.       Update the project status

4.       Make a roadmap of how we want to go forward.


Thoughts / suggestions






From: global-projects-committee-bounces at lists.owasp.org
[mailto:global-projects-committee-bounces at lists.owasp.org] On Behalf Of
Paulo Coimbra
Sent: Thursday, July 15, 2010 9:57 AM
To: 'Andrew van der Stock'; 'Vishal Garg'
Cc: owasp-guide at lists.owasp.org; 'OWASP Foundation Board List'; 'Global
Projects Committee'; kenowen at eowen.com
Subject: Re: [GPC] [Owasp-guide] Participating in the project


Vishal, Andrew et al,


I've consulted Owasp-guide Archives and it seems to me that even if Michael
Boberski isn't being pointed out as project leader on the Project Details
page, he has been acting at least as its project manager.






Being so, I propose we contact him to ask whether or not he still wants to
keep this pivotal position. 


Also, in the event of a negative answer from Mike, I propose we address both
this project mailing list and the leaders' one to announce the project is
seeking a new leader.


I've also tried to find the project's roadmap out and what I found seemed
not up-to-date.






Thus, I also propose that after having clarified the leadership question, we
trigger the efforts to write down an ambitious but feasible roadmap. 


Please drop me a line and let me know your thoughts. Please also let me know
if I should contact Mike or if any of you want to do so.


Many thanks,


Paulo Coimbra,

OWASP <https://www.owasp.org/index.php/Main_Page>  Project Manager


From: Andrew van der Stock [mailto:vanderaj at owasp.org] 
Sent: segunda-feira, 12 de Julho de 2010 01:18
To: Vishal Garg
Cc: owasp-guide at lists.owasp.org; kenowen at eowen.com; Paulo Coimbra
Subject: Re: [Owasp-guide] Participating in the project


I'm sure Mike will be back soon. 


I used to lead the project, but I am not currently in a position to do that.
I could provide direction and peer review, but I'm no PM and have little
time due to personal reasons. 





On 11/07/2010, at 5:16 AM, Vishal Garg wrote:


Hi Ken,

I have not been able to spend much time on the project lately, and will be
able to do so from next month. But I have not seen much activity from other
members as well and was thus wondering what is happening with the project at
the moment.

As you said, not heard back from Mike, so not sure which direction the
project is going. Do you or anyone else working on the project has any idea
who is going to lead and provide directions to the project.

Our other bet may be to get in touch with the projects committee and seek
advice from them.

I have cc'ed this e-mail to Paulo as well, in case he has any information on


On Sat, Jul 10, 2010 at 7:15 PM, Geoff Choo <geoff.choo at gmail.com> wrote:

Could someone please let me know how I could get involved in contributing to
the project? I wrote to Mike but I have not heard from him since.



On Sat, Jul 10, 2010 at 6:00 PM, <owasp-guide-request at lists.owasp.org>

Send Owasp-guide mailing list submissions to
       owasp-guide at lists.owasp.org

To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to
       owasp-guide-request at lists.owasp.org

You can reach the person managing the list at
       owasp-guide-owner at lists.owasp.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Owasp-guide digest..."

Today's Topics:

  1. Guide progress (Ken Owen)


Message: 1
Date: Fri, 09 Jul 2010 13:47:27 -0400
From: Ken Owen <kenowen at eowen.com>
Subject: [Owasp-guide] Guide progress
To: owasp mailng list <owasp-guide at lists.owasp.org>
Message-ID: <4C3760AF.3040602 at eowen.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

It appears that little has happened recently on the project. On my last
contact with Mike, he said "My priorities have changed. Someone else
will be picking up the mantle at some point for this effort." We'll see.
I'm continuing to work on my pages. I just posted finished pages for the
 'Approach' page and 'Adding Security Controls Into Your Solution
Stack' and the first two sub-pages after it. Any comments would be


Ken Owen
Edward Owen Company
Box 407
Granby, CT 06035-0407
Phone: 860.653.6258 x12
Fax: 860.653.6349
email: kenowen at eowen.com


Owasp-guide mailing list
Owasp-guide at lists.owasp.org

End of Owasp-guide Digest, Vol 26, Issue 2


Owasp-guide mailing list
Owasp-guide at lists.owasp.org

Vishal Garg
Web Security Specialist

Blog: http://www.ethicalhack.co.uk <http://www.ethicalhack.co.uk/> 
Twitter: http://www.twitter.com/vishalgrg
Linkedin: http://www.linkedin.com/in/vishalgrg
Owasp-guide mailing list
Owasp-guide at lists.owasp.org


No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 9.0.830 / Virus Database: 271.1.1/3005 - Release Date: 07/15/10

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-guide/attachments/20100716/3fa5a5d7/attachment-0001.html 

More information about the Owasp-guide mailing list