@AviD I may try later on today - that comments thread offends me. atk, Lucas and others have some really well thought out sentences and explanations, but Engineer, sir, appears not to be paying any attention.
@AviD I will not offer support. I've read the answer to the "invention" and agree on brokennness, I just had to mention that square wheels can be good if you have the correct underground for them.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vestibulum in congue turpis. Mauris non pharetra mi. Donec sollicitudin eget nisl in laoreet. Curabitur nec luctus justo, in vestibulum mauris.
@AviD @TerryChia unfortunately while they have "Open" as an uncompromisable tenet they'll have real problems restricting things and raising the bar....
Actually one of the speakers at the meeting last night took the challenge of talking about the Top 10 again, to a room full of advanced professionals - and he actually managed to make it interesting.
@AviD and when you install that app and look at it, you see that it's not even complete or updated. someone installing that thinking it's an "official" OWASP app ain't going to have the best view of the org...
@AviD yeah those can be the more interesting ones sometimes. 3rd party dependencies I always think is funny 'cause there was a lot of resistence to it going on to the Top 10 2013
even though to me it's one of the biggest problems around with modern web apps.
@AviD @RоryMcCune If I was in charge of the process, I'd want a project to be established or at least have a critical mass of reputable names committed to it before lending the OWASP name to it.
OWASP shouldnt just adopt projects, it should grow them, and using OWASP resources (volunteers etc) is a great way of doing it. And if you only allow "celebrities" to do so, you leave no room for an unknown to start contributing.
SE's model of gradual reputation does have a lot going for it, though.
@RоryMcCune the other talks were interesting, but that one was really a standout. I'll post the slides here when I get them...
he also talked about the constraints orgs usually have when it comes to testing and fixing - and why so many orgs suffice with testing SQLi / XSS / CSRF (aka the Top 3).
@AviD How would you avoid the problem of having crap and/or dead projects then? Ok, maybe "reputable names" isn't the right answer but there should at least be a mass of OWASP people committed to contributing to it or else a project tends to die off.
Btw (I'm not that familiar with the OWASP process), is there anything preventing me from going in, starting a project with bad or even malicious information and using the OWASP name to trick people into believing it?
@Adnan If he is going to university now, he should be near the end of a year. Belgian universities have years starting in september/october until june.
@TerryChia there is also a mandatory crypto course
I think I'll decide after I finisjhed the crypto course first, I'm not really good at maths and if it's a pure math approach then it might be a bit over my head
Mozilla is weirdly lax into adding people into their GitHub organization. I got added to a team after a single patch. I don't get any permissions on the repo but still feels weird to have Mozilla listed under the organizations I belong to.
i just got informed by the ticket company that sold me the concert tickets for ZZTop that i should concider taking an alternative route, because there are two big concerts given in the area where ZZTop is performing...
@Adnan lolz all I've got to say about their UK figures is that's towns and cities covered by cable only
@Adnan and you'd best watch that @RoryAlsop doesn't flag that 'cause of the difference between the speed he's getting and what they reckon the UK gets...
