Steve,

On Wed, Nov 3, 2010 at 3:28 PM, Steve Pinkham <[email protected]>wrote:

> Up until now we have been using the latest svn version of w3af when
> building out the web security dojo training VM. (available at
> http://dojo.mavensecurity.com if you want to link to it on the download
> section as a way to get w3af, btw ;o)
>
> I was curious if you think we should start including the release
> versions instead, if those versions get any special testing before
> release, or if we're still better off getting the latest bugfixes from svn.
>

My opinion is that the version in the SVN trunk is always going to be the
best choice for the advanced user.

The releases are good for the following reasons:
    * Reach out to new users: Some users don't know what SVN is
    * Visibility: If we never release, we never get to send emails to
everybody bothering them to test the newest version :)
    * Packaging: w3af is packaged in many linux distros, windows installer,
etc. It makes sense for them to have a new release from which they can build
instead of packaging a "randomly selected version from the trunk"

>From now on, we're going to be releasing two new w3af versions per quarter.
One of them will usually have cool features while the other one will be a
little bit more focused in bug fixes.


>
> Any thoughts are appreciated.
>
> Steve
> --
>  | Steven Pinkham, Security Consultant    |
>  | http://www.mavensecurity.com           |
>  | GPG public key ID CD31CAFB             |
>
>
>
> ------------------------------------------------------------------------------
> Achieve Improved Network Security with IP and DNS Reputation.
> Defend against bad network traffic, including botnets, malware,
> phishing sites, and compromised hosts - saving your company time,
> money, and embarrassment.   Learn More!
> http://p.sf.net/sfu/hpdev2dev-nov
> _______________________________________________
> W3af-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>


-- 
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af
------------------------------------------------------------------------------
Achieve Improved Network Security with IP and DNS Reputation.
Defend against bad network traffic, including botnets, malware, 
phishing sites, and compromised hosts - saving your company time, 
money, and embarrassment.   Learn More! 
http://p.sf.net/sfu/hpdev2dev-nov
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to