• Time: (Weekly) Tuesday at 13:30 PM PDT / 16:30 PM EDT / 21:30 PM UTC.
• Place: Mozilla HQ, 3A-All Your Base (3rd Floor)
• Phone (US/Intl): 650 903 0800 x92 Conf: 95316#
• Phone (Toronto): 416 848 3114 x92 Conf: 95316#
• Phone (US): 800 707 2533 (pin 369) Conf: 95316#

Agenda

• Goals - Please keep status up to date - https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AthhYg2CqN25dGRDX0ZqTkJ4dTJGWFVyb2RmNTNDbmc
• Metrics
  • https://security-review-statistics.vcap.mozillalabs.com/
  • https://people.mozilla.com/~sarentz/p/dashboard
    • we've got a lot of old bugs based on the stale report (40 age > 365 days)
• We have the Security room (9510) on vidyo, pin 7632, working to get Security council folks added.
• Security Reports

Upcoming Speaking Engagements

(List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks )

Planned Blog Posts

• [new] https://mana.mozilla.org/wiki/display/SECURITY/Security+Blog+Posts
• [old]https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AlDw2hHXmVgCdHN3LWZTZ0hjMElPc1g2clRKb2lNN3c

Security Review Status (curtisk)

• Completed in Q1:64 / Q2: 72 / Q3:55

https://security-review-statistics.vcap.mozillalabs.com/weekly (Q4:27)

Sprint 2 (Ends Fri 22-Nov)

• http://scrumbu.gs/t/security-assurance/sa-sprint-2/
• 19 bugs total [1]
  • 2 hidden bugs
• 6 of 20 completed
  • 2 of those bugs will not complete (tasks that will carry to next or future sprint) [886679,936725]
    • [bug|936725] - Review occured too early, team not ready
    • [bug|886679] - risk rating completed (task for this sprint)

FxOS Week 47-48 (Ends Fri 29-Nov)

• http://scrumbu.gs/t/security-assurance/fxos-week-47-48/
• 1 of 8 completed

Sprint 3

• Planning meeting Wed 20-Nov during triage (likely a smaller sprint due to US holidays)
• mark bugs u= c= p=1 s=ready, if accepted ready will change to 'sprint 3'
  • https://wiki.mozilla.org/Security_Severity_Ratings#Whiteboard_Tags

Operations Security Update (Joe Stevensen)

• SecReview Template

https://mana.mozilla.org/wiki/display/SECURITY/DuoSecurity+2FA+Review (from template https://mana.mozilla.org/wiki/pages/templates2/viewpagetemplate.action?entityId=39157766&key=SECURITY )

Project Updates

Please add your name to the update so we know who to follow up with

Firefox Desktop

Firefox Mobile

Firefox OS

Firefox Core

MarketPlace

Web Apps

Services

Operation Security