Leaders Town Hall

[Andrew van der Stock]

Hi Leaders,

There have been many active discussions, including many demanding immediate answers to things I simply don't know the answer to as yet, or asking for a reversal, something that is simply outside our control.

During the Board Summit, I asked for two weeks to get you clearer answers to what we're doing. Please join us for an update on the website, the Meetup migration, and a chance to answer your questions. Feel free to send through your questions beforehand if you'd like. 

The Meeting time is Thursday, 12 February at 1400 US EST. Use this link to find out what time this is in your time zone:

https://www.timeanddate.com/worldclock/meetingdetails.html?year=2026&month=2&day=12&hour=19&min=0&sec=0&p1=179&p2=152&p3=137&p4=37&p5=110

The link to the meeting is:

https://us06web.zoom.us/j/81674959652?pwd=7UnLA2GGFVIPk4d3GIBeF2my5OaS2i.1&jst=2

thanks,

Andrew van der Stock
Distinguished Lifetime Member

Executive Director, OWASP

+1 510 697 9315

[Andrew van der Stock]

Hi Board,

I've spent today gathering status information from the staff. I have been preparing a short slide deck for Thursday's meeting, and I will share it with the Board once I've ensured it reads well and includes all the factual information that I know our community has been asking around.  

The basic agenda will be to announce:

- OWASP and the CRA - a call for volunteers

- Committees with officers at term limits - a call for volunteers and to get involved in the review of the Committee Policy

- Policy Reviews and how to get involved

- AI Policy - call for volunteers to help draft and finalize the policy

- Meetup update

- Website update

- Answers to the most common questions submitted in the leaders email group and Slack

I'm trying to get the Monday.com board visible to our community so we don't get so many duplicate items. We have about 35 unique pieces of feedback, but many duplicate issues that need triaging. Having a third, fourth, or fifth location for our leaders to log feedback is unlikely to work, so I'd rather make the existing form output visible to our community so we can focus on getting the MVP website done rather than on having many different methods of obtaining feedback. 

The form to submit website feedback is https://wkf.ms/49mTm0P

The email address to submit security vulnerabilities to the VDP is vulnerabili...@owasp.com

thanks,

Andrew

[Adrian Winckles]

HI All

Unfortunately I missed the town hall, do we know if there was a recording made and if so where an it be found?

Thanks

Adrian 

--
You received this message because you are subscribed to the Google Groups "Leaders" group.
To unsubscribe from this group and stop receiving emails from it, send an email to leaders+u...@owasp.org.
To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/leaders/CADtrMx7ow00N0zwv%3Dn3b0FBc6h58oAK1jc%3D1LyUNPMXhYkQ3zA%40mail.gmail.com.

--

Adrian Winckles BEng MSc CITP CEng Co-Lead | OWASP Web Honeypot Project Co-Lead | OWASP AppSec Curriculum Project Chair   | OWASP Education Committee Member  | OWASP European Board  Chapter | OWASP Cambridge Chapter Leader  Adrian....@owasp.org

[Andrew van der Stock]

Adrian and Leaders, 

Thank you to everyone who attended, and thank you for your questions and feedback! The Leaders Town Hall recording can be found here:

https://youtu.be/0Fo3qlxlOuc

It's currently processing up to HD, but you can watch it now. 

thanks,

Andrew

[Sam Stepanyan]

The Town Hall recording is here:

https://youtu.be/0Fo3qlxlOuc

Regards,

Sam

-- 
Sam Stepanyan
OWASP London Chapter Leader
OWASP Global Board Member
sam.st...@owasp.org
https://owasp.org/london
Follow OWASP London Chapter on Twitter/X: @owasplondon
"Like" us on Facebook: https://www.facebook.com/OWASPLondon
Watch video recordings of our events on YouTube: https://www.youtube.com/OWASPLondon

Consider giving back and supporting the open community by becoming an OWASP member today! 

To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/leaders/CA%2BVM_Tp_dCj1%2Bt_8QsC4r9knNOSo1HP7ewiV1qRpF4_7NcbcaA%40mail.gmail.com.

[Colin Watson]

Hi

Having watched the YouTube recording I am more concerned about HTTP Redirects than I was before (which I raised previously in a submission to "form to submit website feedback https://wkf.ms/49mTm0P")

I might be mistaken, but I now believe OWASP will not be continuing to redirect "old" URLs unless Cloudflare has recorded some (undefined) level of traffic. Thus I infer that "old" means primarily the previous wiki OWASP website, because the test is based on there being *recent* traffic.

1. This does not take into account the need to redirect from the *current* URLs for project and chapters pages, etc to whatever the new URLs will be. We were forced into the current URL paths by the previous website change about 5 years ago, and now presumably the URLs are going to change again? I want to be certain that current page URLs will be redirected to whatever new paths OWASP decide for the new website.

2. I also object to throwing away the "old" wiki URLs from redirects simply based on usage. This unfairly prioritises future volunteers' efforts over past volunteers' efforts. Lack of traffic doesn't mean a previous URL is irrelevant as implied. Many other websites, academic and commercial papers reference non-current URLs, and some of these other places will never ever change. For example, there are almost 10,000 academic papers (including almost 2000 since 2020) which  reference sources in the form "owasp.org/index.php", and each of these papers have from a few to hundreds of citations themselves. These academic papers are in repositories which will likely be preserved for a long time and the papers will never ever be re-edited. OWASP should not throw away the value of these references nor devalue previous volunteers' contributions to OWASP.

Colin