Security/B2G/2013 20 5

From MozillaWiki
< Security‎ | B2G
Jump to: navigation, search

FirefoxOS Security Team Meeting

1pm PST, B2G Vidyo room Prior notes are here:


   feature list for 1.2 / 1.3

Weekly goals

Last Week: Current: [dc] - mozapp iframe 751026 [dc] - tethinerg 776502

Goal Status Updates

FirefoxOS related security reviews (pauljt)

Develop and land tests for security features (dchan)


Bug Bounty defined and ready to launch (freddyb)

Compile Firefox OS issue register (pauljt)

'hardening firefox os'

Continue to document Firefox OS Security (pauljt)

Working on updating MDN docs. (app security part mainly)

Document Update schedule & incident response procedure (pauljt)

no update

Firefox OS Sandboxing (kang)

   attempting to land still :p (waiting reviews)
   got commit (l3) access wee;)
   discussed supervisor with marta (dt), they seem to start working on it

Malware Defense (cr)

   Involved dbialer in the meta-market approach to multimarket: he likes the idea.
   We might be able to get phone-specific and cryptographically relevant key data from the SIM cards. Seifert wants to deliver info. (anthony jones has mentioned this already on b2g-dev)