OWASP Media Project

• Main
• Help
• Road Map and Getting Involved
• Project About

OWASP Media Project OWASP Media Project is an operational project that gather, consolidate and promote OWASP content in video format on a central appealing hub. The first instance of the project is a YouTube channel for publishing major conference recordings and links to other channels. The second and target main instance of the project will be a platform/channel agnostic video portal. OWASP Video Portal We're currently developing a portal tied with the new OWASP website that will serve video content to the OWASP audience. It will be an index only as the source content will stay on their respective platform. Current technical target is to be hosted on GitHub Pages. If you want to contribute or want your content to be included, come find us on GitHub (link to be added soon)! Are you a chapter or project and want access on YouTube? We suggest that leaders create their own channel and request to be linked to. Send us an email into our project Google Groups to be added. The main reason is that YouTube unfortunately doesn't scale well for access management and having your own channel will give you the control and responsiveness of action you need. Licensing OWASP Media Project is distributing content that is free to use. It is licensed under the Creative Commons Attribution 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. AppSecUSA 2018 playlist AppSecEU 2018 playlist AppSecUSA 2017 playlist AppSecEU 2017 playlist AppSecUSA 2016 playlist AppSecEU 2016 playlist AppSecUSA 2015 playlist AppSecEU 2015 playlist Live from AppSecUSA 2014 playlist Live from AppSecEU 2014 playlist

Quick Access What is OWASP Media Project? OWASP Media Project provides: OWASPGLOBAL YouTube Channel OWASP Video Portal Project Leader Jonathan Marcil See Project About for contributors. Mailing List Google Groups media-project@owasp.org News and Events [Jun 06 2019] Reached 1,000,000 views on YouTube! [Mar 24 2017] Reached 500,000 views on YouTube! [Jul 26 2015] Reached 200,000 views on YouTube! [Nov 21 2014] Reached 100,000 views on YouTube! [Apr 07 2014] Wiki page updated to new template. [Sep 14 2013] Creation of the project Partners Team San Francisco #downtown Team Denver #appsecstreaming Academic Partner Münster University of Applied Sciences IT Security Lab Related Projects Global_Chapter_Meetup (defunct) CommunityUpdates (defunct)

On this page:

• Rules for the OWASP Video Portal
• Rules for the OWASPGLOBAL YouTube Channel
• Global Conference Guidelines
• YouTube Upload Guidelines
• YouTube Access Management
• YouTube Uploading Procedure

Rules for the OWASP Video Portal

• Video content must be related to OWASP
  • Projects
  • Chapter meetings
  • OWASP branded conferences
• Any language is accepted and should be indicated
• References to content should be the correct level to respect rules
  • Full channels
  • Playlists
  • Individual videos

Rules for the OWASPGLOBAL YouTube Channel

• Uploads must be at minimum quality level equivalent to latest uploaded videos
  • See YouTube Upload Guidelines bellow
• Content limited to AppSec Global Conferences or equivalent English content
  • AppSecCali as a good example: 2 days conferences, English, professional recording
• Alternative content allowed: Videos spotlights
  • Small or mediums videos that present either another channel or a project
  • Used to link from the OWASPGLOBAL channel to another other channel

• For permanent managers
  • Need to have a clear assignment (eg. working for a specific conference)
  • Need to be registered on the mailing list
  • Must acknowledge and follow minimum security best practices
    • Use a dedicated browser session
    • Logout of OWASP account when not needed
• For owners
  • Need to sign the OWASP Social Media Agreement/Contract
• Temporary managers are allowed
  • They must be in contact directly with a permanent manager or owner
  • Typically they are contractor firms doing the recordings at conferences

Global Conference Guidelines

OWASP Media Project used to provide on site recording for talks during major OWASP conferences (20+ speakers), but this is now a thing of the past. In order to achieve a respectable results in quality of content, dealing with an experienced professional vendor is now a must.

Note that OWASP Media Project will still provide support on uploading, publishing and marketing of the video content as of 2018. Vendor could still be required to upload to YouTube, this is particularly useful if they don't deliver on physical media by the end of the event.

In order to assure painless success some hard requirements are to be followed:

• Use HDMI for screen capture
• Do not record the slides using a video camera and use that as final publishing
• Require the vendor to have experience with recording presentations

And some somewhat flexible requirements (downplaying them will jeopardize quality):

• Require the vendor to have experience with online publications
  • Have the vendor send a prior sample of their work
• Coordinate the recording vendor with the audio vendor
  • Some hotels will enforce their own audio vendor, fight them or make sure that they have a SLA in the contract
  • Most of the problems you'll have at this point will be audio, be prepared, but don't go as silly as have dual microphones, unless it's a huge keynote.
• Have the vendor do live post-production. That means that talks are ready at the end of the conference, not 2-4 weeks after
• If they do post-production with music, make sure it has been tested on YouTube to not generate copyright strikes.
• If recording of the speaker is done, make sure it's with professional grade camera
• Prioritize keynotes on budget for recording and additional marketing efforts

What to NOT do:

• Do not use your own laptop for presentations with software recording
  • We actually suggest software recording for smaller or single talk event, but in a big conference that's a guaranteed headache
• Do not publish all content at once
• Do not expect 100% quality from any vendor
  • A 5% failure rate is to be expected; you'll loose some recordings, sound will be bad on some, aspect ratio might be weird, HDCP might ruin everything.
  • Some talks will be beyond salvage. We published them in the past but with 700+ videos online now, we think it's unnecessary unless there's a direct demand from the community to see the talk anyways.
• Do not wait to publish talks more than ~3 months after the event.
  • With global events overlapping, you also don't want to publish one event over the other.
  • Statistics has shown that after 2 months traffic greatly drop.

Last but not least, be ready to pay the price. We suggest that you look for sponsors in order to cover the costs. Be aware that you might break YouTube EULA by adding ads inside the videos, especially when using permanent logos. You can however add a comment bellow in text, or do sponsored content in a stand alone video or inside the content.

If you are lucky, you might find a local enthusiast that will do it for free. In this case, we suggest to have professional recording of the keynotes, and make sure you handle the risk you are taking by having exceptional communication between them and the conference team.

YouTube Upload Guidelines

In order to achieve an acceptable level of quality and consistency trough the videos upload on the channel, each uploaded videos must meet theses requirements :

• Comply with YouTube Copyright regulations http://youtube.com/yt/copyright/what-is-copyright.html
  • Fun introduction https://www.youtube.com/copyright_school
  • Basically, do not upload any content or partial content that are from another source, that includes music, TV show captures, clips from movies/TV.
  • If we get Copyright strikes, after 3 we are out and will be ban from YouTube.
  • Deleting an infringement strike videos won't help removing the strike.
• Respect basic quality standards for uploaded videos.
  • 720p minimum, upload in 1080p Full HD if available (YouTube will create lesser resolutions versions automatically)
    • Use recommended YouTube mp4/aac/H.264 encoding if possible (no conversion will be done, upload will be faster) https://support.google.com/youtube/answer/1722171?hl=en&ref_topic=2888648
    • Use recommended 16:9 ratio if possible
  • Slides must be readable in 480p (for mobile usage and default web view).
  • Sound must be clear and with no electronic noise or with minimal white noise.
    • Mono can be used, if stereo make sure both channels are being used
  • Editing must be professional level or very minimal with YouTube tools or absent.
• For meta data information:
  • Put the subject and the speaker name in the title
    • If the subject is too long, the speaker name can be omitted
  • Put the abstract if available and speaker BIO in the description
  • Leave the OWASP Media Project signature
  • Use the default tags (currently #owasp and #appsec) and optionally add some if desired
• If videos are from a logical batch, associate it with a playlist (Example: AppSecEU2013 playlist)

YouTube Access Management

Access management is currently given to OWASP Media Project leaders and OWASP Global Staff. As owner, make sure you:

• Send an email to the project mailing list when adding or removing access
• Move back to communication manager any manager that are not posting video content actively
• Periodically audit and clean up the accesses given to people
• You can access the manage permissions page while logged in with the correct Google account on Brand Account details

YouTube Uploading Procedure

Prerequisites

• Have a Google account, preferably an @owasp.org one, that is added as a manager of OWASPGLOBAL YouTube channel
• If you plan to upload content more than one conference a year, you must be subscribed to our OWASP Media Project mailing list
• Read the "Guidelines and standards for YouTube" especially about copyright

Warnings

• Use another browser or profile than your normal browser in order to upload to YouTube. If you browse YouTube as "OWASP", all history, likes and favorites will be shared with the channel.
• Take special security care of your account because it is now having all access to a front-facing OWASP asset

Procedure

• Login as OWASP on YouTube with the top right account change widget
• As OWASP, Create a playlist with the name of your contribution
  • For a conference, use the full name and the year
  • Examples: AppSecUSA 2018, OWASP AppSec California 2019, https://www.youtube.com/view_all_playlists
• Upload the video using https://www.youtube.com/upload
  • In Privacy settings, make it "Unlisted" or "Private" if you don't want it to be shown right away
  • As it upload and process, set the correct title and description (please leave the Media Project signature)
  • Add tags related to the subject or the contribution. These are like keywords.
  • You can use the Video Manager in order to tag many videos at once
  • Save and wait until it is completely uploaded
• When ready to publish, view the video and add it to your playlist
  • Change the Privacy settings to Public if it was Private or Unlisted
  • Review title and description
• Share the video as you wish on Twitter, LinkedIn, Facebook, etc.
  • Use embed code to share it in HTML
  • Use wiki code #ev:youtube|VIDEO-ID or #ev:youtubeplaylist|PLAYLIST-ID between {{}} for owasp.org wiki

Next goal

Create the OWASP Video Portal.

Plan

1. ✓ Create and setup an official YouTube channel: OWASPGLOBAL
2. Create the OWASP Video Portal
   1. Find a good subdomain name such as videos.owasp.org
   2. Release the video portal on the subdomain
3. Engage the future marketing committee to invest in promoting video content
4. Find contributors for video spotlights on YouTube OWASPGLOBAL (links to other channels)

Getting Involved

Reach us on Slack https://owasp.slack.com/messages/C0FGJPFM3 or on the Google Group https://groups.google.com/a/owasp.org/forum/#!topic/media-project to be involved!

Soon we'll also be on GitHub and you can contribute there with PRs and Issues.

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Media Project Purpose: The OWASP Media Project is an operational project that gather, consolidate and promote OWASP content in video format on a central appealing hub. The first instance of the project was a YouTube channel. The second and current target main instance will be a platform/channel agnostic video portal. License: Creative Commons Attribution 3.0 License who is working on this project? Project Leader(s): Jonathan Marcil @ Project Contributor(s): Harold Blankenship (OWASP Foundation Staff) Tom Wirschell (Europe) Past contributors: Amelia Graycen (leader), Yvan Boily, Nirmal Lama Titung, Ahmed Neil, Kristian Erik Hermansen, Neil Matatall, Christian Dresen, Julian Held, Rene Boeing, Maik Dankel, Tom Joy, Niko, Zach Lummis, Kyle Archer, Katherine Carpenter, Neal Mueller, Ian Gorrie. how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Key Contacts Contact Jonathan Marcil @ to contribute to this project Contact Jonathan Marcil @ to review or sponsor this project

current release last reviewed release Not Yet Reviewed other releases