OWASP Newsletter 3 - Revision history

Dinis.cruz: Protected "OWASP Newsletter 3": Newsletter released, this is static content now [edit=sysop:move=sysop]

2007-01-23T16:20:14Z

Protected "OWASP Newsletter 3": Newsletter released, this is static content now [edit=sysop:move=sysop]

Dinis.cruz at 00:07, 23 January 2007

2007-01-23T00:07:51Z

Dinis.cruz at 00:07, 23 January 2007

2007-01-23T00:07:07Z

Dinis.cruz: /* OWASP references in the Media */

2007-01-23T00:04:49Z

‎OWASP references in the Media

Dinis.cruz: /* Featured Project: OWASP Live CD */

2007-01-23T00:04:00Z

‎Featured Project: OWASP Live CD

Dinis.cruz: /* OWASP projects that need your help */

2007-01-23T00:03:11Z

‎OWASP projects that need your help

Dinis.cruz: /* OWASP projects that need your help */

2007-01-23T00:02:56Z

‎OWASP projects that need your help

Dinis.cruz: /* '''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007''' */

2007-01-23T00:01:42Z

‎'''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007'''

Dinis.cruz: /* '''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007''' */

2007-01-23T00:01:05Z

‎'''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007'''

Dinis.cruz: /* '''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007''' */

2007-01-23T00:00:45Z

‎'''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007'''

← Older revision		Revision as of 00:07, 23 January 2007
Line 1:		Line 1:
−	~~will be~~ ''Sent to owasp-all mailing list on 22th Jan 2007''	+	''Sent to owasp-all mailing list on 22th Jan 2007''

	== '''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007''' ==		== '''OWASP Newsletter #3 – January 16th 2006 to January 22th 2007''' ==

@@ Line 9: / Line 9: @@
 The [[OWASP student projects]] page was updated with more project ideas and I added a new section to this newsletter called 'OWASP projects that need your help' in order to give you a heads up on projects that need help (if you are a project leader, please feel free to add your requests to the next version of the newsletter). Remember that OWASP is a Open Community that is made by its members (and the more you contribute the more you and your company will benefit).
-I would like to give a big welcome to our new [[Portuguese|chapter from my home country Portugal]], say that the latest Beta version of [[:Category:OWASP Live CD Project|OWASP Live CD]] is now released and ready for your tests, and that projects like the [[OWASP Java Project]] (featured below) are producing amazing material but need more colaboration (and let's not even talk about the [[OWASP .NET Project]] which I am supposed to managing and is currently going nowhere (with some noble exceptions (Mike and Boris thx)).
+I would like to give a big welcome to our new [[Portuguese|chapter from my home country Portugal]], say that the latest Beta version of [[:Category:OWASP Live CD Project|OWASP Live CD]] is now released and ready for your tests, and that projects like the [[OWASP Java Project]] (featured below) are producing amazing material but need more collaboration (and let's not even talk about the [[OWASP .NET Project]] which I am supposed to managing and is currently going nowhere (with some noble exceptions (Mike and Boris thx)).
 We also updated the [[How OWASP Works]] page to reflect the current structure of the Owasp Board and to show what we are thinking of doing in the future.
@@ Line 15: / Line 15: @@
 If all goes as planned, next week we will be releasing the 'Release Candidate 1' version of the OWASP Top 10 2007 document which we want you all to take a good look at (the plan is to have a wide peer review and only release the final version when it is ready)
-As normal you can find below the links to the latest WIKI changes (with a new section for 'Interresting Discussion Threads' on our mailing lists)
+As normal you can find below the links to the latest WIKI changes (with a new section for 'Interesting Discussion Threads' on our mailing lists)
 And don't forget, if you want something to appear in the next version, please add it to [[OWASP Newsletter 4]]
@@ Line 27: / Line 27: @@
 == OWASP projects that need your help ==
-* [[:Category:OWASP Java Project|Java Project]]: Convert Mark Petrovic's article [http://www.onjava.com/pub/a/onjava/2007/01/03/discovering-java-security-requirements.html Discovering a Java Application's Security Requirements] into the WIKI (contact Stephen de Vries if you are interrested)
+* [[:Category:OWASP Java Project|Java Project]]: Convert Mark Petrovic's article [http://www.onjava.com/pub/a/onjava/2007/01/03/discovering-java-security-requirements.html Discovering a Java Application's Security Requirements] into the WIKI (contact Stephen de Vries if you are interested)
 * [[:Category:OWASP .NET Project|.NET Project]]: Add PDP GnuCitizen [http://www.gnucitizen.org/projects/attackapi AttackAPI] to [[OWASP Site Generator]] and convert the php files into ASP.NET
 * [[OWASP Testing Project v2.0 - Review Guidelines| OWASP Testing Project v2.0]] - Now that the The OWASP Testing Guide v2.0 has reached the 'Release Candidate 1 milestone, the time has come to make sure that everything is 100% and that there is nothing major missing (review process ends on the 10th of Feb).
@@ Line 75: / Line 75: @@
 ** [http://blogs.owasp.org/orizon/2007/01/22/parsing-freedom/| Parsing freedom]
-==== Interresting Discussion Threads ====
+==== Interesting Discussion Threads ====
 * in [http://lists.owasp.org/mailman/listinfo/owasp-testing Owasp-testing]
 **[http://lists.owasp.org/pipermail/owasp-testing/2007-January/001324.html|Code Review project and Code-Scanning-Tool(s)]
@@ Line 93: / Line 93: @@
 ==== Application Security News  ====
-* [http://jeremiahgrossman.blogspot.com/2007/01/web-application-security-professionals.html  Web Application Security Professionals Survey (Jan. 2007)] -  Jeremiah Grossman just released his survey with lots of very interresting data. Make sure you check out section '11) Top 3 web application security resources' which is a nice database of the most popular vulnerability assessment tools and knowledge resources (#1 was RSnake's Blog, and #2 was OWASP :) )
+* [http://jeremiahgrossman.blogspot.com/2007/01/web-application-security-professionals.html  Web Application Security Professionals Survey (Jan. 2007)] -  Jeremiah Grossman just released his survey with lots of very interesting data. Make sure you check out section '11) Top 3 web application security resources' which is a nice database of the most popular vulnerability assessment tools and knowledge resources (#1 was RSnake's Blog, and #2 was OWASP :) )
 * [http://www.securityfocus.com/news/11436?ref=rss Don't take security advice from the devil you know!] - He lies. Especially about security flaws. This article notes an increase in vulnerabilities found in open source packages and concludes that... "For the personal sites and the mom-and-pop stores that rely on the software, it certainly affects them," Martin said. "But larger companies likely aren't affected."  Right.

← Older revision		Revision as of 00:04, 23 January 2007
Line 104:		Line 104:

	* [http://builder.com.com/5100-6374_14-6151493.html?part=rss&subj=bldr Lock it down: Use the OWASP Top Ten to secure your Web applications -- Part 1], Builder.com, Jan 19, 2007		* [http://builder.com.com/5100-6374_14-6151493.html?part=rss&subj=bldr Lock it down: Use the OWASP Top Ten to secure your Web applications -- Part 1], Builder.com, Jan 19, 2007
		+
		+	__NOEDITSECTION__

@@ Line 53: / Line 53: @@
 This distro is Beta Version 0.8 named "LabRat" and is part of the OWASP Autumn of Code sponsorship. The distro is focused on providing all of OWASP tools and documents on a bootable CD. The goal is to have a portable distro that can be used by professional penetration testers,security admins, Students, or anyone interested in computer security to perform work,training, or research. All you have to do is burn the .ISO to DVD or start under Vmware/Virtual PC and you will have a full Linux desktop environment loaded with OWASP tools and documents.
-The distro can be downloaded from the PacketFocus website (http://packetfocus.com/hackos/AOC_Labrat-ALPHA-0008.iso) ((800mb)).
+The distro can be downloaded from the [http://packetfocus.com/hackos/AOC_Labrat-ALPHA-0008.iso PacketFocus website] (800mb).
 == Latest additions to the WIKI ==

@@ Line 31: / Line 31: @@
 * [[OWASP Testing Project v2.0 - Review Guidelines| OWASP Testing Project v2.0]] - Now that the The OWASP Testing Guide v2.0 has reached the 'Release Candidate 1 milestone, the time has come to make sure that everything is 100% and that there is nothing major missing (review process ends on the 10th of Feb).
 * [[OWASP WebScarab NG Project]] - New version is already very usable and we need your feedback
-* '''Online Questionaires''': I (Dinis) want to do a OWASP wide survey, what solution should I use to create, deploy and manage it?
+* Online Questionaires: I (Dinis) want to do a OWASP wide survey, what solution should I use to create, deploy and manage it?
-* '''WordPress guru needed''': Our blogs (http://blogs.owasp.org/) still looks miserable. We need somebody to help Mide de Libero to sort it out (and while you're there get a feed to put on owasp.org and the next version of the OWASP newsletter)
+* WordPress guru needed: Our blogs (http://blogs.owasp.org/) still looks miserable. We need somebody to help Mide de Libero to sort it out (and while you're there get a feed to put on owasp.org and the next version of the OWASP newsletter)
 == Featured Project: OWASP Java Project ==

← Older revision	Revision as of 16:20, 23 January 2007
(No difference)

@@ Line 9: / Line 9: @@
 The [[OWASP student projects]] page was updated with more project ideas and I added a new section to this newsletter called 'OWASP projects that need your help' in order to give you a heads up on projects that need help (if you are a project leader, please feel free to add your requests to the next version of the newsletter). Remember that OWASP is a Open Community that is made by its members (and the more you contribute the more you and your company will benefit).
-I would like to give a big welcome to our new [[Portuguese|chapter from my home country Portugal]], say that the latest Beta version of OWASP Live CD is now released and ready for your tests, and that projects like the [[OWASP Java Project]] (featured below) are producing amazing material but need more colaboration (and let's not even talk about the [[OWASP .NET Project]] which I am supposed to managing and is currently going nowhere (with some noble exceptions (Mike and Boris thx)).
+I would like to give a big welcome to our new [[Portuguese|chapter from my home country Portugal]], say that the latest Beta version of [[OWASP Live CD Project|OWASP Live CD]] is now released and ready for your tests, and that projects like the [[OWASP Java Project]] (featured below) are producing amazing material but need more colaboration (and let's not even talk about the [[OWASP .NET Project]] which I am supposed to managing and is currently going nowhere (with some noble exceptions (Mike and Boris thx)).
 We also updated the [[How_OWASP_Works]] page to reflect the current structure of the Owasp Board and to show what we are thinking of doing in the future.