OWASP - User contributions [en]

User:RichardVeryard

2008-10-23T17:47:06Z

RichardVeryard: New page: I am an industry analyst with the CBDI Forum. ==Blogs== *[http://rvsoapbox.blogspot.com/search/label/security My Service-Oriented Architecture blog] *[http://rvsoftware.blogspot.com/sear...

I am an industry analyst with the CBDI Forum.

==Blogs==
*[http://rvsoapbox.blogspot.com/search/label/security My Service-Oriented Architecture blog]
*[http://rvsoftware.blogspot.com/search/label/security My general software industry blog]
*[http://rvtrustblog.blogspot.com/ Trust and Security]
*[http://posiwid.blogspot.com/search/label/security Systems thinking (POSIWID)]

Talk:Top 10 2007-Where to Go From Here

2008-10-23T17:39:50Z

RichardVeryard: Navigation to this page

== Navigation to this page ==

I think this page is the most important page in the Top Ten project, because it is the one that explains why you shouldn't take the Top Ten too seriously. But it is difficult to find, and I suspect a lot of people never get this far. See also my blog on [http://rvsoftware.blogspot.com/2008/10/owasp-top-ten.html OWASP Top Ten]. --[[User:RichardVeryard|RichardVeryard]] 13:39, 23 October 2008 (EDT)

Category talk:Principle

2008-08-12T17:55:34Z

RichardVeryard: New section: Proven principles

"Fail safely" gets redirected to a page with the heading "Fail Securely" (but
still named "Fail_safely"). It seems someone thought "Fail Securely" is a better
phrase for the principle than "Fail safely", but the change needs to be propagated
to this page (and possibly on other pages).

I'd fix it myself but there is no page named "Fail_securely" and I don't want
to make a mess of things for others -- I'm just visiting this site for the
first time and don't have a feel yet for how it's being setup and maintained -
I don't want to ruffle any feathers, but am trying to help...

Chris

Thanks Chris - I updated the main principle page to list "Fail Securely"
instead of "Fail Safely." There is a page called
http://www.owasp.org/index.php/Fail_securely. MediaWiki
leaves behind any pages that are renamed with a redirect
to the new page, so that any old links get to the right place.
[[User:Jeff Williams|Jeff Williams]] 16:09, 9 June 2008 (EDT)

== Application Security Principles ==

Why is Principles immediately limited to Application Security Principles? Aren't other kinds of principle relevant? --[[User:RichardVeryard|RichardVeryard]] 13:51, 12 August 2008 (EDT)

== Proven principles ==

This page refers to "proven" principles. What counts as a proof - a self-appointed guru wrote it somewhere, a statistician has done a detailed meta-analysis of the literature, or what? --[[User:RichardVeryard|RichardVeryard]] 13:55, 12 August 2008 (EDT)

Category talk:Principle

2008-08-12T17:51:31Z

RichardVeryard: New section: Application Security Principles