[Owasp-leaders] Thomas Ryan - OWASP - OccupyWallStreet - Gawker

Mark Bristow mark.bristow at owasp.org
Sun Oct 16 20:19:56 EDT 2011

 At least one person on the rasping list expressed concern, believing he was
a board member.  I think we should make a statement that he's not a board
never and reach out to gawker for a correction.

Misconceptions in the press can get out of hand quickly.

Mark Bristow
Global Conferences Committee, Chair
mark.bristow at owasp.org
(703) 596-5175

Sent concisely from my wireless device

----- Reply message -----
From: "Rex Booth" <rex.booth at owasp.org>
To: "Chris Schmidt" <chris.schmidt at owasp.org>
Cc: "owasp-leaders at lists.owasp.org" <owasp-leaders at lists.owasp.org>
Subject: [Owasp-leaders] Thomas Ryan - OWASP - OccupyWallStreet - Gawker
Date: Sun, Oct 16, 2011 8:15 pm


Well, my concerns are stated below about the "board" title.  The article
isn't exactly Pulitzer material, and I don't think it infers any involvement
on behalf of OWASP.

Our members (and sometimes leaders) do stupid crap all the time - same as
any other organization.  I don't see the need to put out a press release
each time that happens unless they're explicitly doing so under in the name
of OWASP.  Just my opinion, though - reasonable minds can differ.


On 10/16/2011 8:08 PM, Chris Schmidt wrote:

 "Ryan said he knows Loyd through their mutual involvement in the Open Web
Application Security Project, a non-profit computer security group of which
Ryan is a board member."

On 10/16/2011 6:07 PM, Rex Booth wrote:
> Yeah, I get that - thus my reply.
> But are we reading the same article? I don't see anything about OWASP in
> On 10/16/2011 7:58 PM, Chris Schmidt wrote:

The intent is not to judge his opinions on OWS - to each their own, and what
he does professionally or personally is none of my business. The point is
that he is identified as a board member of OWASP which implies alignment of
the organization and in fact the way it reads, sounds as if the actions
taken were done so as an OWASP initiative.

On 10/16/2011 5:53 PM, Rex Booth wrote:
> I know Tom Ryan, but I'm not going to weigh in on his activities regarding
occupy wall street, though I will say he's no stranger to controversy.

> However, I do agree that there are numerous people who say they're on the
board of OWASP when the truth is that they're on the board of a local
chapter. I think the use of a board structure at the local chapter level is
typically excessive and, at best, leads to confusion about the scope of
individual roles within OWASP or, at worst, provides cover for disingenuous
statements and innuendo.

> In this case, to my knowledge, Tom is on the board of the NYC chapter.

> Rex

> On 10/16/2011 7:42 PM, Chris Schmidt wrote:
> I don't know who the hell Thomas Ryan is, but I am pretty sure he is not
> a board member for OWASP as he claims in this article on Gawker. I think
> we need to issue a statement from the organization expressing this.


> Jeff Walton (ESAPI-C++) brought this to my attention. Regardless of how
> *anyone* in this organization feels about OccupyWallStreet - aligning
> the organization with either side is a really bad idea for numerous
> obvious reasons.

> This article has gotten a *ton* of publicity - can we draft a response
> to Gawker ASAP?

>> _______________________________________________
>> OWASP-Leaders mailing list
>> OWASP-Leaders at lists.owasp.org
>> https://lists.owasp.org/mailman/listinfo/owasp-leaders

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-leaders/attachments/20111016/9e6f9d72/attachment-0001.html 

More information about the OWASP-Leaders mailing list