Talk:Projects/Project Brand Guidelines - Revision history

Dennis Groves: /* Re-guarding the Apache Foundation Example */ new section

2013-07-22T23:36:03Z

‎Re-guarding the Apache Foundation Example: new section

Dennis Groves: a couple of edits to improve readability

2013-07-22T23:32:03Z

a couple of edits to improve readability

Dennis Groves: Questions in need of Answers

2013-07-22T23:29:48Z

Questions in need of Answers

Dennis Groves: /* Questions in need of Answers */ new section

2013-07-22T23:29:10Z

‎Questions in need of Answers: new section

Dennis Groves: project brand guidelines / questions in need of answers

2013-07-22T23:28:33Z

project brand guidelines / questions in need of answers

New page

I understand that GSOC is not an OWASP project.

Take the following use-case, using OWASP AppSensor as an example:

A bunch of students from Google SOC help us with a new reference implementation; and we want to thank Google, and the students for making it happen in the 'credits'?

We are now 'branding' our project, either in the documentation, or on the project website with a commercial entity, which is strictly forbidden by the new guidelines, however the ethical maxim 'credit where credit is due' (as well as gratitude and good manners) dictates going against the new guidelines.

Additional use-cases, again using OWASP AppSensor as an example:

WhiteHat Security (for profit, Security Vendor) gives us $10k to print the OWASP AppSensor Handbook 2.0; and we gratefully acknowledge and thank WhiteHat Security within the first few pages of the handbook for making it possible to give away hundreds of books.

What if it was IBM (for profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?

What if it was the Mozilla foundation (non-profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?

What if it was Amnesty International (Human Rights NGO) instead that gave us the $10k, and made it possible to give away hundreds of books?

What if it was the Department of Homeland Security (government grant) instead that gave us the $10k, and made it possible to give away hundreds of books?

TLDNR;

The current document defines what must not be done, and I like that approach because it leaves open what can be done. And reduces what people need to know to participate - less is more. :)

However, I think it would be good to clarify and better define the word organisations. I have just demonstrated 5 different kinds of organisations, and they can not all be lumped together in the same boat. And I also think it would be useful to provide sample use cases like the above for clarity.

Over all, this is shaping up to be a great document that represents a positive and significant change for the community, that with a few modifications really nails the message on the head.

← Older revision		Revision as of 23:36, 22 July 2013
Line 28:		Line 28:

	Over all, this is shaping up to be a great document that represents a positive and significant change for the community, that with a few modifications really nails the message on the head.		Over all, this is shaping up to be a great document that represents a positive and significant change for the community, that with a few modifications really nails the message on the head.
		+
		+	[[User:Dennis Groves\|Dennis Groves]] ([[User talk:Dennis Groves\|talk]])
		+
		+	== Re-guarding the Apache Foundation Example ==
		+
		+	Pay special attention to this: [https://www.apache.org/foundation/sponsorship.html Apache Sponsorship]
		+	Apache SELLS sponsorship logo locations in exchange for supporting Apache. Are we suggesting the same? There is certain brilliance to this. Big carrot, little stick indeed!
		+
		+	Additionally, OWASP needs sponsors, and I am personally of the position that we need to define the 'sponsor relationship' better; because the reality is that no-one is an island. We all need each other (The principle of OPEN). Sponsors need OWASP, and OWASP needs sponsors. And the fact is, those sponsors are going to be commercial entities. And the other fact is, OWASP is not 'capturing that value.'

	[[User:Dennis Groves\|Dennis Groves]] ([[User talk:Dennis Groves\|talk]])		[[User:Dennis Groves\|Dennis Groves]] ([[User talk:Dennis Groves\|talk]])

@@ Line 11: / Line 11: @@
 Additional use-cases, again using OWASP AppSensor as an example:
-WhiteHat Security (for profit, Security Vendor) gives us $10k to print the OWASP AppSensor Handbook 2.0; and we gratefully acknowledge and thank WhiteHat Security within the first few pages of the handbook for making it possible to give away hundreds of books.
+* WhiteHat Security (for profit, Security Vendor) gives us $10k to print the OWASP AppSensor Handbook 2.0; and we gratefully acknowledge and thank WhiteHat Security within the first few pages of the handbook for making it possible to give away hundreds of books.
-What if it was IBM (for profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?
+* What if it was IBM (for profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?
-What if it was the Mozilla foundation (non-profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?
+* What if it was the Mozilla foundation (non-profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?
-What if it was Amnesty International (Human Rights NGO) instead that gave us the $10k, and made it possible to give away hundreds of books?
+* What if it was Amnesty International (Human Rights NGO) instead that gave us the $10k, and made it possible to give away hundreds of books?
-[[User:Dennis Groves|Dennis Groves]] ([[User talk:Dennis Groves|talk]])
+* What if it was the Department of Homeland Security (government grant) instead that gave us the $10k, and made it possible to give away hundreds of books?
 TLDNR;
@@ Line 29: / Line 28: @@
 Over all, this is shaping up to be a great document that represents a positive and significant change for the community, that with a few modifications really nails the message on the head.

@@ Line 1: / Line 1: @@
 == Questions in need of Answers ==
@@ Line 47: / Line 19: @@
 What if it was Amnesty International (Human Rights NGO) instead that gave us the $10k, and made it possible to give away hundreds of books?
 What if it was the Department of Homeland Security (government grant) instead that gave us the $10k, and made it possible to give away hundreds of books?

← Older revision		Revision as of 23:29, 22 July 2013
Line 1:		Line 1:
		+	I understand that GSOC is not an OWASP project.
		+
		+	Take the following use-case, using OWASP AppSensor as an example:
		+
		+	A bunch of students from Google SOC help us with a new reference implementation; and we want to thank Google, and the students for making it happen in the 'credits'?
		+
		+	We are now 'branding' our project, either in the documentation, or on the project website with a commercial entity, which is strictly forbidden by the new guidelines, however the ethical maxim 'credit where credit is due' (as well as gratitude and good manners) dictates going against the new guidelines.
		+
		+	Additional use-cases, again using OWASP AppSensor as an example:
		+
		+	WhiteHat Security (for profit, Security Vendor) gives us $10k to print the OWASP AppSensor Handbook 2.0; and we gratefully acknowledge and thank WhiteHat Security within the first few pages of the handbook for making it possible to give away hundreds of books.
		+
		+	What if it was IBM (for profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?
		+
		+	What if it was the Mozilla foundation (non-profit, non-security) instead that gave us the $10k, and made it possible to give away hundreds of books?
		+
		+	What if it was Amnesty International (Human Rights NGO) instead that gave us the $10k, and made it possible to give away hundreds of books?
		+
		+	What if it was the Department of Homeland Security (government grant) instead that gave us the $10k, and made it possible to give away hundreds of books?
		+
		+	TLDNR;
		+
		+	The current document defines what must not be done, and I like that approach because it leaves open what can be done. And reduces what people need to know to participate - less is more. :)
		+
		+	However, I think it would be good to clarify and better define the word organisations. I have just demonstrated 5 different kinds of organisations, and they can not all be lumped together in the same boat. And I also think it would be useful to provide sample use cases like the above for clarity.
		+
		+	Over all, this is shaping up to be a great document that represents a positive and significant change for the community, that with a few modifications really nails the message on the head.
		+
		+	== Questions in need of Answers ==
		+
	I understand that GSOC is not an OWASP project.		I understand that GSOC is not an OWASP project.