Security/Meetings/SecurityAssurance/2013-01-22

From MozillaWiki
Jump to: navigation, search


« previous week | index | next week »
  • Time: (Weekly) Tuesday at 13:30 PM PDT / 16:30 PM EDT / 21:30 PM UTC.
  • Place: Mozilla HQ, 3A-All Your Base (3rd Floor)
  • Phone (US/Intl): 650 903 0800 x92 Conf: 95316#
  • Phone (Toronto): 416 848 3114 x92 Conf: 95316#
  • Phone (US): 800 707 2533 (pin 369) Conf: 95316#

Agenda

  • [mcoates] Goals - Please keep status up to date - google doc
    • First time using Google Docs
      • \o/\o/
      • Please don't add/delete/rearrange columns, because that might push the limits of the reporting mcoates set up
  • [jesse]

Exploitable crashes in crash-stats

Planned Blog Posts

Speaking Engagements

  • (Who) : Date: Name of Event : Talk Title: Link
  • Simon Bennetts : Feb 2-3 : FOSDEM : Talking about ZAP :)
  • Raymond Forbes : Feb 27 - March 2 : Nullcon

Security Review Status (curtisk)

Operations Security Update (Joe Stevensen)

Project Updates

Please don't leave blank. Add "No Update" if nothing has changed

Silent updates (rforbes / dveditz)

B2G (Paul Theriault, David Chan)

Thunderbird (Adam Muntner)

Rust (Jesse Ruderman)

Mobile (Mark Goodwin)

  • Work ongoing in providing missing fonts to users - anyone know about fonts on android?

Sync (Simon Bennetts)

No update

Services (Simon Bennetts & Adam Muntner)

No Update

Jetpack, Add-on SDK, Add-on Builder (Dan Veditz)

JS (Christian Holler)

  • [decoder] 290 jit-tests landed and bugs marked in-testsuite+
  • [gkw, decoder] Fuzzed for bug 828466 and bug 830943

DOM, XPConnect (Jesse Ruderman)

Layout, Style (Jesse Ruderman)

Automation Tools (Gary Kwong)

  • No update

Web Developer Tools (Mark Goodwin)

  • Work starting on taint project; have an undertaking from devtools to assist with frontend work (Ivan, our new contributor, will be leading the engineering work on this).
  • Ameya (the contributor who was previously working on Security Report) is back and getting set up (we'll see where this goes)

Networking (Christoph Diehl)

  • Bug 824919 landed and fixed a lot of WebRTC security bugs.

Media / Graphics (Christoph Diehl) =

Peach (Christoph Diehl / Raymond Forbes) =

  • Added JAR/ZIP fuzzer

Market (Raymond Forbes)

Firefox APIs (Raymond Forbes)

Payment Flow (Raymond Forbes)

Dynamic API Security Model (Raymond Forbes)

WebRT (Raymond Forbes)

BrowserID

Identity Services (David Chan)

Addons.M.O (Raymond Forbes)

Bugzilla.M.O (Mark Goodwin & Eric Parker)

  • No update

Mozillians (Raymond Forbes)

MDN (Raymond Forbes)

SUMO (Kitsune) ()

AddressSanitizer (Christian Holler)