OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mark Curphey (markcurphey.com)
Date: Wed Jun 12 2002 - 13:28:22 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Agree it is a useful resource and good for a reference. The challenge is
    that most of the descriptions need quite a bit of work both in technical
    authoring, general updating and style / grammar. Quite a few were never
    written because no volunteers came forward. There are also a number of
    additions that need to be made as well, and despite requests, we never
    found anyone prepared to take on owning the project ;-(

    If someone is out there that can devote the time to getting them in
    shape and updating them over time, please mail me and well keep them up.

    The Guide is being converted to HTML now. Until we get a site sponsor to
    help us build the portal, its always going to be slow I am afraid. When
    we get the portal done, things will both look nice and be quicker to get
    done as well as the aggregated news and alerts!

    Shameless plug for sponsorship there !

    On Wed, 2002-06-12 at 10:49, Mathieu Gervais wrote:
    > > Thanks. The ASAC is all being removed this weekend. Its now incorporated
    > > in to the Guide where it can more easily be maintained. Thanks again.
    >
    > Please, don't remove the ASAC until a replacement is ready to publish. I
    > often use it to explain vulnerabilities to developpers (in a code review for
    > example). I really appreciate the owasp site (thanks a lot!). I understand
    > I didn't pay for its content and that you are free to do like you want, but
    > please consider leaving the content there until you have the guide ready.
    > (My understanding is that the guide isn't ready. If it is, please kindly
    > ignore my ignorance :) ).
    >
    > mathieu
    >
    > PS: Off-topic: what's happening with the "requirements" document? The
    > website still says "We expect to publish a first draft around Mid April".
    > Maybe this should be updated to reflect a new schedule, since it doesn't
    > give a good impression to the reader.
    >
    > ----- Original Message -----
    > From: "Mark Curphey" <markcurphey.com>
    > To: "Kevin Spett" <kspettspidynamics.com>
    > Cc: <webappsecsecurityfocus.com>
    > Sent: Wednesday, June 12, 2002 11:19 AM
    > Subject: Re: Directory Listing
    >
    >
    > > Thanks. The ASAC is all being removed this weekend. Its now incorporated
    > > in to the Guide where it can more easily be maintained. Thanks again.
    > >
    > > On Wed, 2002-06-12 at 07:44, Kevin Spett wrote:
    > > > I just noticed Directory Listing isn't in ASAC. It should probably be
    > > > listed under "Informational".
    > > >
    > > >
    > > >
    > > >
    > > >
    > > > Kevin Spett
    > > > SPI Dynamics, Inc.
    > >