OWASP

Start the New Year off right! Join us as we get together to help those in need at this CMG Gives Back event to distribute food at the Champion Food Pantry! We’ve created a great little community of Movie Group friends! Rather than see a movie this time, we’ll help “Create a better world” by helping serve people in need. Here are complete details and our plan for this event: CHAMPION FOOD PANTRY: The Champion Food Pantry provides needed food to neighbors experiencing food insecurity. For this event, we’ll be volunteering to help with Food Distribution during client pick up times. Our group will receive on-the-spot training from some of their seasoned regular volunteers. PLAN FOR CHAMPION FOOD PANTRY: Please arrive by 2:45pm. Our volunteer time will be from 3:00 to 6:00pm. LOCATION & PARKING: The Champion Food Pantry is located at 1460 S. Champion Ave in Columbus. Parking is located in the lot on Frebis across from the pantry. Please enter through the door marked "Volunteers enter here” on Frebis Ave. A map has been uploaded to the photos. IMPORTANT REMINDER: Our group will be providing the majority of the volunteers on this day so a firm RSVP count is essential. Please only sign up if you are certain you’ll be able to attend. If something unavoidable comes up, please update your RSVP no later than one week prior to the event. No shows or cancelations within 1 week of the event will mak you ineligible for future CMG Gives Back events. I appreciate your understanding as we try to ensure the agencies have the volunteers needed to provide the essential services they provide to the vulnerable population they serve. LINKS & INFO: Below are some links / attachments with additional info/details: • Champion Food Pantry Civil Rights Training: Attached file. • Champion Food Pantry Parking and Entrance: Attached file. • Champion Food Pantry Orientation Video: https://www.youtube.com/watch?v=_0wI-AwOYLY • Link with Additional Details / Info: https://lss.vomo.org/opportunity/foodpantrieschampion THANK YOU: This CMG Gives Back event provides an opportunity for YOU to get involved in helping others in our community! But the benefits go well beyond the help we give to others. Volunteering can provide a wide range of personal benefits, including positive effects on mental and physical health, reduced stress/depression/anxiety, increased happiness and improved purpose, life-satisfaction and personal well-being! Plus, the opportunity to get involved, connect with others and help those in need. PARTNER AGENCY: This event is hosted by Lutheran Social Services (LSS), which serves thousands of people in need each day in 27 Ohio counties by addressing the four core societal issues of food, shelter, safety and healing. LSS offers food through the LSS Food Pantries, housing and supportive services through LSS Faith Mission and LSS Faith Mission of Fairfield County homeless shelters, domestic violence services through LSS CHOICES for Victims of Domestic Violence, senior living and health care, affordable housing communities, and other services that uplift families and strengthen communities. Thanks for your help and look forward to seeing you there, Dan

Bring your Raspberry Pi, Arduino, microcontroller, or any other electronic project and join fellow electronics makers for a night of creativity and collaboration! This session is open forum to share your current projects—whether complete or in progress, it’s all interesting! Whether you’re deep into embedded systems, exploring new ideas, or just getting started, you’ll find a welcoming space to collaborate, share, and get inspired. I've been hardware hacking a See N Say to make it say whatever I want - while the project is in progress still, it should be working by this meetup! I'll bring it for demo. [See N Say Project](https://github.com/cdeever/esp32-see-n-say) While we continue to pursue a more permanent venue for this Meetup, we’ll be using public library facilities based on availability. This session will be at the Worthington Park Library in the Olentangy Meeting Room.

Our monthly PHP meetup. A virtual shindig courtesy of Zoom. Check back here for the details around 6:15 pm

Columbus Code & Coffee is an inclusive, informal co-working session. People of all skill levels attend, and we love it that way. Many people (optionally) bring projects to work on, and many other people (optionally) socialize the entire time. It's entirely up to you! **What to Expect at the Intro Circle** \~\~\~\~\~\~\~\~\~\~\~\~\~ Near the beginning of the event (1:30 pm), we do a standup: * Organizer announcements, updates, and logistics Round 1 - (7 secs max): * Your name * What you're working on * What you can help others with Round 2: * Community events you wanna plug. If none, that's cool too. Round 3: * Job opportunities you're hiring for OR announce that you are looking for one. If none, that's cool. After the introduction circle, everything is self-organized! Feel free to work alone, pair up, attend one of our workshops/presentations, or mingle!

**Format**: Hybrid (in-person and online) event **In-person location**: **Security Compass** 325 Front Street West, Unit 103 Toronto, ON M5V 2Y1 **Note:** In-person attendance is limited to **70 people**, in a **first-come, first-serve basis**. Doors will open at **6:00 PM**, with the event will start at **6:30 PM** (ET). For those who cannot attend in person, please join us virtually via the livestream! **Presentation Title:** **Privacy Components That Should Actually Matter to Development Teams** Many teams expect that privacy is taken care of by the company’s security program or addressed by the legal and compliance teams. Fact is, privacy is often lagging behind security when it comes to software development, and there are still obligations that need to make their way into the lifecycle. And, in many cases, devs never even see the obligations that exist on paper to clients! In each business function of Governance, Design, Implementation, Verification, and Operations, there are privacy considerations that need to be made. The earlier you can get these considerations locked in, the more time it saves you later when there’s an incident, a user exercising their rights, or simply scaling up! \-\-\- **This is a hybrid event!** You're welcome to join us online or in person. Thanks again to our wonderful sponsors at **Security Compass** for hosting us!

As we step into a new year, many of us are carrying lessons, practices, and questions shaped by the year behind us. The Next Chapter: Looking Back, Leaning Forward is a warm, facilitated vision circle designed to help us pause together, reflect on what truly worked, and imagine what we want to carry forward into what comes next. This is not a talk or presentation. It’s a small, participatory gathering focused on shared reflection, sense-making, and connection. **Together, we’ll explore:** * What supported you over the past year — in your work, leadership, or life * What you’re ready to leave behind * What you want next January’s version of yourself to be saying To support reflection in different ways, we’ll also have optional art materials available for anyone who would like to create a simple artifact for their year — a visual or tactile reminder of what they’re carrying forward. We’ll provide basic art supplies such as colored pencils, markers, paint pens, and small canvases. If you enjoy working with collage or other media, you’re warmly invited to bring magazines, stickers, or your favorite creative materials to use or share. Participation in the creative portion is completely optional. You don’t need a plan, goals, or polished answers. Curiosity, honesty, and listening are more than enough. The intention is for everyone to leave feeling grounded, refreshed, and inspired — with a clearer sense of what matters to them and how we can support one another as a community. Space is intentionally limited to keep the experience intimate. ⸻ **What to Expect** * A small, welcoming circle (not a large meetup) * Structured conversation so everyone has space to speak * Reflection, listening, and lived experience — not advice-giving * Optional creative reflection using simple art materials * A calm, supportive environment ⸻ **Who This Is For** Women and underrepresented folks working in or around agile, product, technology, leadership, or organizational change — especially those looking for thoughtful conversation and community beyond frameworks and buzzwords. ⸻ **Good to Know** * No preparation required * Participation is invitational; listening is always welcome * Creative activities are optional — you can simply listen and reflect * You’re welcome to bring your own collage or craft materials if you’d like * Location details will be shared with registered attendees

**Lessons from npm's Dark Side: These Are Not the Packages You're Looking For** Malware is all about scale and time: How can I hit the most people in the shortest time? But not all ecosystems are equally vulnerable. The JavaScript ecosystem, particularly its package manager npm, is arguably the most vulnerable to supply chain malware attacks. And with JavaScript being the language of the web, this is a problem that impacts an estimated 27.4 million developers. So what are we to do? In this session learn about: * Why attackers target JavaScript/npm * A case study of 5 attacks * Whether we can trust maintainers to adopt security controls (research!) * What you can do to protect yourself and your company from malware **What to Expect** * Introductions and Updates on chapter events and engagement ideas * Primary presentation * Network with fellow professionals who care about building and securing great software. * **Food & Drink provided for in-person attendees! (please RSVP to ensure accurate head count)** (\* OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security) **Event Details** 📍 **Location:** RubinBrown, 7676 Forsyth Blvd., Suite 2100, Saint Louis, MO 63105 🗓 **Date/Time:** January 13, 2025 / 6:00pm CDT ℹ️ **Parking Directions:** * Google map to “North Lyle Avenue & Forsyth Boulevard, Clayton, MO 63105” Link: https://maps.app.goo.gl/WYqyZ3Jv9cUBBF289 * Enter the **Parking Garage #4** (from Forsyth Blvd) next to Dry Bar * **Pull a ticket at the gate** and proceed into the garage, turning right. * Up the ramp is visitor parking. **You may have to go up past the 6th floor.** * **Take elevator to \*L** (Lobby of Centene Plaza C) * Check in at the OWASP sign-in table in the lobby; you'll be escorted up * **Bring your parking ticket with you** to get validated at the meetup. **Who Should Attend** * Application & security professionals * Software engineers and developers * IT leaders and managers * Anyone with an interest in application security **About OWASP** The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation dedicated to improving the security of software. Local chapters provide opportunities to learn, network, and collaborate with others in the field. Come to learn more and participate in OWASP Saint Louis - your voice will continue to help shape what OWASP Saint Louis becomes next.

Come out to Improving for our monthly iOS and Mac meetings. This Month's Presentation: **Use AI to convert an old game into an iOS App** **John Endres** How I decided to learn AI tools in Xcode (Claude and ChatGPT) John is a long time iOS Developer. What is Cocoaheads (http://cocoaheads.org/)? CocoaHeads is a group devoted to discussion of Apple Computer's Cocoa Framework for programming on MacOS X and iOS (including the iPhone, iPad and Apple Watch). During monthly meetings, members present on their projects and offer tutorials on various programming topics. What is BuckeyeCocoa (http://buckeyecocoa.org/)? BuckeyeCocoa is a group of Objective-C/Swift developers/enthusiasts. We host monthly Cocoaheads and near-weekly NSCoder meetings in Columbus, Ohio. The meetings are free to attend. Presentations! Presenters welcome! We are always in need of people willing to present material. Any Swift and/or Objective-C related topic is welcome. Times can be 5 minutes (i.e. lightning talks) to a maximum of 2 hours. Interested? Contact info is on the BuckeyeCocoa website. To volunteer for a presentation contact us at @BuckeyeCocoa on Twitter. Follow us on Twitter! @BuckeyeCocoa (https://twitter.com/#!/Buckeyecocoa/) For more information: http://buckeyecocoa.org/

**Important time note:** Please plan on arriving between 5:30 and 6:00 as the elevators lock after 6 and you'll need to message us and we'll need to come get you. The building address is 4450 Bridge Park The entrance is 6620 Mooney St, Suite 400 **Abstract** GitHub Copilot is rapidly changing how developers write, understand, and maintain code. Powered by generative AI and deeply integrated into modern development environments, Copilot acts as an intelligent coding assistant, helping developers move faster while maintaining quality and focus. In this session, we’ll explore what GitHub Copilot is, how it works, and where it fits into a real-world developer workflow. We’ll break down what Copilot can (and cannot) do, where it can be used, and how licensing differs for individuals and organizations. Most importantly, this talk goes beyond theory with a live, hands-on demo showcasing Copilot inside the IDE and on GitHub, demonstrating how it can assist with code generation, refactoring, learning new APIs, and accelerating day-to-day development tasks. Designed for developers, technical leads, and engineering managers, this session provides a practical introduction to AI-assisted development, highlights best practices for getting value from Copilot, and closes with guidance on how to continue learning and evolving alongside this rapidly advancing tool. Attendees will leave with a clear understanding of how GitHub Copilot can enhance productivity, improve developer experience, and fit into modern software teams today, not someday. **YouTube Link** TBA

**NEW LOCATION: Improving Office in Franklinton** Physical location: Improving Office 330 Rush Alley Suite #150 Columbus, OH 43215 Schedule: * 6:00 p.m.: Socialize, eat, and drink. Improving will be providing pizza and beverages. * 6:30 to 8:00 pm. Main meeting and presentation(s). For this first meeting of the year, we will be reviewing submissions for the Your Program is Hideous and Obfuscated Challenge (YPHOC). Submissions for this challenge are due by January 12th, 2026. The details can be found here: https://docs.google.com/document/d/13zbxwElpJqPMuAN4Ele2hUgsqtFKzH3OCTL5NEeiLKQ or on our website http://www.cohpy.org We meet on the last Monday of each Month. Presentations are given by members and friends of this group. If you would like to do a presentation (small or large) on a python topic, please contact centralohpython@gmail.com

## Learn Infrastructure-as-Code (the FUN Way) — Through Minecraft 🎮☁️ **Joint Meetup: Azure CBUS × Columbus HashiCorp User Group** What if learning Terraform and Infrastructure-as-Code didn’t feel like a whitepaper… but more like a game? Join us for a joint Azure CBUS and Columbus HashiCorp User Group meetup where **Mark Tinderholt** \(Principal Architect\, Microsoft Azure \| HashiCorp Ambassador \| “The Azure Terraformer”\) shows how **Minecraft** can be used as a surprisingly powerful way to understand real-world Infrastructure-as-Code concepts. In this session, Mark will demonstrate how Terraform and Azure can be used to provision, configure, and manage Minecraft servers—while teaching the same patterns you’d use for production cloud infrastructure. ### What we’ll cover * Infrastructure-as-Code fundamentals using **Terraform** * Provisioning real infrastructure on **Azure** * Applying **IaC best practices** (immutability, repeatability, versioning) * How playful environments like Minecraft make complex concepts *click* * Why learning through experimentation beats click-ops every time ### Who should attend * Developers, platform engineers, and cloud engineers * Terraform users (new or experienced) * Anyone curious about Infrastructure-as-Code but tired of boring examples * Minecraft fans who want to see it used in a totally unexpected way No prior Minecraft experience required—just curiosity and a willingness to learn infrastructure the fun way. Come for the blocks, stay for the Terraform. 🧱➡️📐 Want to be a speaker? submit your talk to our Call for Presenters!!! https://sessionize.com/cbus-hug-2026/

2026 may be the last year many developers write code by hand. We need coding agents to solve complex problems in production codebases, but vibe coding alone won’t get us there. Vibe coding is all gas, no brakes. It burns up the context window until the agent slips on its own slop. You can go fast at first, but the more you stuff into the context window, the more tangled its outputs get. While the industry is rapidly increasing code generation speed, we still have to understand, review, merge, and maintain what gets shipped. This talk will outline how coding agents (Claude Code + Gas Town) work and a framework for orchestrating them to solve complicated problems in complex codebases. It’s about steering the model: doing the research to align intent, planning the approach up front, implementing in parallel steps, and breaking early. Human judgment still matters, but it should be spent on high-leverage decisions: what to build, what to forbid, and “what is quality?”, not cleaning up slop. Attendees will leave with a checklist to identify workflow and environment gaps that hold agents back, so you and your team can ship higher-quality software starting tomorrow.

Bring your work or your hobby, hang out, and code with us. Follow @buckeyecocoa for more information.

**\*\*\* We've Moved! Bold Penguin - 6555 Longshore St, Dublin, OH 43017 \*\*\*** (Ignore the pinned map on meetup) **AGENDA:** * Doors open at 5:30, feel free to come and hang out before! * Official start of the meeting is at 6:30pm * After the meeting is done, we will go hang out at a nearby space in Bridge Park! If you can, please sign up via meetup by noon the day of the meeting so we can have an estimate headcount for food :) We always order extra, so feel free to join us even if you don't get signed up! Thank you to Bold Penguin for providing the location! **Parking & Arrival:** **Parking:** Parking in Bridge Park is free. The closest lots are the Mooney Garage and the Hotel/Endres Garage. **Entry:** The doors to the office are to the right of PINS. The street level door and elevators lock at 6pm. If you arrive after that, someone should be there to let you in, else call the number posted. Take the elevator to the 2nd floor. Once you exit the elevator, turn right. \*\*\* We are a bunch of professionals, students, and geeks who are excited about Ruby programming language ([http://ruby-lang.org/](http://ruby-lang.org/)) and Rails framework ([http://rubyonrails.com/](http://rubyonrails.com/)) and the joy they have brought back to web development. Our main goal is to share the love of the Ruby and Rails ecosystems with anyone that is interested. We cater to everyone, whether a non-programmer through advanced Rubyists. We give lectures on programming topics We freely provide decades worth of experience For full details of this month's meeting please visit [http://columbusrb.com](http://columbusrb.com)

Private Group. Closed to the Public Knowing ourselves and understanding our abilities is the first step toward wielding our gifts with control and accuracy. In subsequent classes we will verify and hone our talents with activities and discussion. These are hands-on workshops and participation is expected. The goal of our series will be to develop expertise in areas of particular interest such as mediumship, channeling, divination, healing and, etc.. Our ultimate directions will be determined by class members as we evolve. I look forward to sharing and discovering with you. - Cynthia