[OWASP-PORTAL] Re: Mirroring OWASP Guide

[Adrian Wiesmann]

Hello Jonathan

Kudos on putting together such a great guide.

Thank you for the roses. (And your interest in helping with the guide)

I noticed that there is no online mirror for people who want to browse
without downloading the whole document. I'd like to put one together
and host it. I'd also like to allow user comments (similar to the PHP
Documentation mirror on php.net). What do you think?

Actually the idea is great. But not that easy. Let me tell you what we
already discussed in one or the other way:

- The hosting is normaly done on the OWASP own server. Mark will be able
to tell you more about this. This also introduces some "limitations".
- I once had the idea, that we have a live version of the CVS on our
portal. I lost the current status of this idea.
- What I talked with Mark about around a year ago was the idea of a Wiki
like website where the authors can edit the guide directly via the www and
we still can process the guide into a pdf. I am not sure about the current
status of this.

What I currently would like to have to speed up the guide development is
something like the last idea. Something like the mixture between the PHP
documentation site and a docbook formatting wiki: Authors could edit the
text, users/visitors could add some comments (which later on can be
included in the text) and I can render the PDF from the sources when a
build is ready. But to do so, we should deal with Mark as with the portal
crew.

Thats about the situation.

Regards,
Adrian

[Mark Curphey]

We def don't want static mirrors I am afraid as documentation quickly
changes and static mirrors will not keep up.
A
actually we have almost completed the Magnolia CMS integration I think so
this can help and give you what you need. Ben, any updates on that ? Can you
send some new screenshots to the list ?

-----Original Message-----
From: owasp-portal-admin at lists.sourceforge.net
[mailto:owasp-portal-admin at lists.sourceforge.net] On Behalf Of Adrian
Wiesmann
Sent: Tuesday, May 25, 2004 4:15 PM
To: Jonathan Grier
Cc: Mark Curphey; owasp-portal at lists.sourceforge.net
Subject: [OWASP-PORTAL] Re: Mirroring OWASP Guide

Hello Jonathan

Kudos on putting together such a great guide.

Thank you for the roses. (And your interest in helping with the guide)

I noticed that there is no online mirror for people who want to browse
without downloading the whole document. I'd like to put one together
and host it. I'd also like to allow user comments (similar to the PHP
Documentation mirror on php.net). What do you think?

Actually the idea is great. But not that easy. Let me tell you what we
already discussed in one or the other way:

- The hosting is normaly done on the OWASP own server. Mark will be able to
tell you more about this. This also introduces some "limitations".
- I once had the idea, that we have a live version of the CVS on our portal.
I lost the current status of this idea.
- What I talked with Mark about around a year ago was the idea of a Wiki
like website where the authors can edit the guide directly via the www and
we still can process the guide into a pdf. I am not sure about the current
status of this.

What I currently would like to have to speed up the guide development is
something like the last idea. Something like the mixture between the PHP
documentation site and a docbook formatting wiki: Authors could edit the
text, users/visitors could add some comments (which later on can be included
in the text) and I can render the PDF from the sources when a build is
ready. But to do so, we should deal with Mark as with the portal crew.

Thats about the situation.

Regards,
Adrian


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest
thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click

[Jonathan Grier]

Post by Mark Curphey
actually we have almost completed the Magnolia CMS integration I think so
this can help and give you what you need. Ben, any updates on that ? Can you
send some new screenshots to the list ?

Hi Mark.

Where do things stand with this?

Post by Mark Curphey
We def don't want static mirrors I am afraid as documentation quickly
changes and static mirrors will not keep up.

I understand your hesitations. But, I will add that for many developers,
security is (unfortunately) an afterthought - if it's convenient, they'll
incorporate it, if not - well, there's always attrition.org. This group
(which is quite large) would be much better served by a mirror of the
guide, even of an older version, than having no exposure to the guide at
all. Let's face it - they're not going to cvs the current version, and
they're not even going to download a tarball of it - at best, they'll
Google and browse a little. And this is the group which needs the guide
the most!

We can really do a public service by making an online mirror of the guide
available to them. It is really the only way to get the guide to the
majority of developers.

Post by Mark Curphey
-----Original Message-----
From: owasp-portal-admin at lists.sourceforge.net
[mailto:owasp-portal-admin at lists.sourceforge.net] On Behalf Of Adrian
Wiesmann
Sent: Tuesday, May 25, 2004 4:15 PM
To: Jonathan Grier
Cc: Mark Curphey; owasp-portal at lists.sourceforge.net
Subject: [OWASP-PORTAL] Re: Mirroring OWASP Guide
Hello Jonathan

Kudos on putting together such a great guide.

Thank you for the roses. (And your interest in helping with the guide)

I noticed that there is no online mirror for people who want to browse
without downloading the whole document. I'd like to put one together
and host it. I'd also like to allow user comments (similar to the PHP
Documentation mirror on php.net). What do you think?

Actually the idea is great. But not that easy. Let me tell you what we
- The hosting is normaly done on the OWASP own server. Mark will be able to
tell you more about this. This also introduces some "limitations".
- I once had the idea, that we have a live version of the CVS on our portal.
I lost the current status of this idea.
- What I talked with Mark about around a year ago was the idea of a Wiki
like website where the authors can edit the guide directly via the www and
we still can process the guide into a pdf. I am not sure about the current
status of this.
What I currently would like to have to speed up the guide development is
something like the last idea. Something like the mixture between the PHP
documentation site and a docbook formatting wiki: Authors could edit the
text, users/visitors could add some comments (which later on can be included
in the text) and I can render the PDF from the sources when a build is
ready. But to do so, we should deal with Mark as with the portal crew.
Thats about the situation.
Regards,
Adrian

Jonathan Grier
Security Consultant
http://www.vesaria.com
VESARiA: Specialized Security Solutions

[Adrian Wiesmann]

Hello Jonathan

Post by Jonathan Grier
We can really do a public service by making an online mirror of the
guide available to them. It is really the only way to get the guide to
the majority of developers.

Absolutely. But the one does not hamper the other. What you mean is an
online readable copy of the guide. What Mark means is that we have to keep
our content on one domain only. I already talked with Mark (and the portal
team) about an online version of the guide (with edit capabilities). We
came to the decision, that magnolia could be the enabler for our/my
wishes.

So let's find out what brings us magnolia and then I can most probably
need some helping hand bringing the guide in the current version to the
net.

What do you think about this plan?

Regards,
Adrian

P.S: Portal Dev Team: What would we need/you have to code if we would like
to have some live/once a day docbook rendering on our site?