[SC-L] Code review pool

2007-11-05 Thread Paolo Perego
Hi guys, trying to improve Owasp Orizon project in a better way, I
released a poll over my blog here:
http://thesp0nge.livejournal.com/5687.html

It would be great having your feedback about your vision to code
review and safe coding as developers and security specialist.

Thanks for participating.

Regards
thesp0nge

-- 
Owasp Orizon leader
orizon.sourceforge.net
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


Re: [SC-L] Code review pool

2007-11-05 Thread ljknews
At 12:50 PM +0100 11/5/07, Paolo Perego wrote:

 Hi guys, trying to improve Owasp Orizon project in a better way, I
 released a poll over my blog here:
 http://thesp0nge.livejournal.com/5687.html
 
 It would be great having your feedback about your vision to code
 review and safe coding as developers and security specialist.

I see a bunch of links called View Answers along with a link
called Poll #1083138.

Clicking on the Poll #1083138 link takes me to a page of answers.
-- 
Larry Kilgallen
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


[SC-L] FINAL REMINDER: OWASP WASC AppSec 2007 Conference - Nov 12-15 - San Jose, CA

2007-11-05 Thread Dave Wichers
This is to remind everyone that if you plan to attend the OWASP conference
next week, you need to register by COB this Thursday the 8th, so we can let
eBay security know on Friday who is attending.

 

Thanks! And hope to see many of you there.

 

-Dave

 

From: Dave Wichers 
Sent: Friday, October 05, 2007 9:46 AM
To: '[EMAIL PROTECTED]'
Subject: OWASP  WASC AppSec 2007 Conference - Nov 12-15 - San Jose, CA

 

OWASP and WASC have agreed to join forces this year to put together an
incredible AppSec 2007 Conference for the application security community,
Nov. 12-15 in San Jose. A huge concentration of industry leading experts
will be in attendance presenting high quality web application security
content. AppSec 2007 offers a unique opportunity for security professionals,
software developers, and IT managers to get up to speed on the latest and
greatest attack techniques, defense strategies, and industry trends in an
atmosphere of peers. The conference format and venue is also perfect for
networking and sharing experiences with others that are down in the
trenches.

 

Full details on the conference are available at:
http://www.owasp.org/index.php/OWASP_
http://www.owasp.org/index.php/OWASP__WASC_AppSec_2007_Conference
_WASC_AppSec_2007_Conference 

 

There are many new firsts to this conference that I wanted to mention:

 

1)  This is the first joint OWASP and WASC AppSec Conference

2)  eBay is hosting this conference, which is the first conference being
hosted at a company facility. (Thank you eBay)

3)  Web Services Security Track: A 3rd track has been added on Day 1 for
this topic, which is an important area for OWASP to get involved with (and
it is)

Details on this track are available at:
http://www.owasp.org/index.php/7th_OWASP_AppSec_Conference_-_San_Jose_2007/A
genda#Nov_14:_Track_3:_Web_Services_Security 

4)  Tutorials: The tutorials session has been expanded to 2 full days
and we have five 2-day tutorials this time on Nov 12-13:

a.   Building and Testing Secure Web Applications

b.  Secure Coding for Java EE

c.   Secure Coding .NET Web Applications

d.  Web Services and XML Security

e.  Leveraging OWASP Tools and Documents to Secure Your Enterprise (Our
first OWASP specific tutorial!! - Taught by our Chief Evangelist - Dinis
Cruz)

f.ModSecurity Tutoral (NEW!!)

Tutorial details are available at:
http://www.owasp.org/index.php/7th_OWASP_AppSec_Conference_-_San_Jose_2007/T
raining 

5)  A Technology Expo has been introduced. Vendors of application
security products and managed services will be demonstrating their wares for
the first time at an OWASP conference on Nov 13 and Nov 14.

Tech Expo info is available at:
http://www.owasp.org/index.php/7th_OWASP_AppSec_Conference_-_San_Jose_2007/A
genda#Tech_Expo_-_Nov_13th-14th 

If you are a vendor interested in participating in the expo, more details
are here: http://www.owasp.org/index.php/OWASP_AppSec_Conference_Sponsors 

6)  New Social Events! - Breach is going to again have a cocktail party.
This time its Nov 13. OWASP has its dinner on Nov 14. The OWASP Band!! Is
also playing on Nov 14 (Check with Dinis for details). Microsoft has now
joined in and is having a closing cocktail party on Nov 15 that is being
cosponsored by Aspect Security.

 

I hope to see you there!

 

Thanks, Dave

 

Dave Wichers

OWASP Conferences Chair

[EMAIL PROTECTED]

 

 

___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


Re: [SC-L] Code review pool

2007-11-05 Thread Paolo Perego
Please apologies me. I figure out just know that livejournal.com
doesn't allow poll to be complete without a valid livejournal.com
account or openId.

So if you are not livejournal users and you don't want to became one
of them, you could answer the poll to me using email and I'll publish
results to another post to my blog.

Again sorry :(

thesp0nge

On 05/11/2007, ljknews [EMAIL PROTECTED] wrote:
 At 12:50 PM +0100 11/5/07, Paolo Perego wrote:

  Hi guys, trying to improve Owasp Orizon project in a better way, I
  released a poll over my blog here:
  http://thesp0nge.livejournal.com/5687.html
 
  It would be great having your feedback about your vision to code
  review and safe coding as developers and security specialist.

 I see a bunch of links called View Answers along with a link
 called Poll #1083138.

 Clicking on the Poll #1083138 link takes me to a page of answers.
 --
 Larry Kilgallen
 ___
 Secure Coding mailing list (SC-L) SC-L@securecoding.org
 List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
 List charter available at - http://www.securecoding.org/list/charter.php
 SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
 as a free, non-commercial service to the software security community.
 ___



-- 
Owasp Orizon leader
orizon.sourceforge.net
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___