Agenda

Goals - Please keep status up to date - https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AthhYg2CqN25dGRDX0ZqTkJ4dTJGWFVyb2RmNTNDbmc
Metrics
- https://security-review-statistics.vcap.mozillalabs.com/
- https://people.mozilla.com/~sarentz/p/dashboard
[jesse] Nothing on the agenda? Let's argue about http://krebsonsecurity.com/2013/12/the-case-for-a-compulsory-bug-bounty/ !
Conversation wandered into desktop vs mobile security
Conversation wandered into implications of firefox-for-android's web-app store on android security. User has to tell Android to 'allow installations from untrusted sources'. (called APK-Factory)
Granularity of APIs on Firefox OS.
- [Jesse] There should be a high bar for "track the user's location". Most apps really just need to "trigger a location picker" or "be triggered by a geofence".
- [Jesse] There should be a high bar for "manage the user's contact list". Most apps really just need "trigger a contact picker, possibly annotated with which contacts also use the app".
- [paul] I have some insight into how the Firefox OS team prioritizes features. I'll make a wiki page where you can add your ideas. Currently we just have a spreadsheet: https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0Ap-jgPe0UrMhdHRPbFd0dXZWaTJYby1Ta3hrRzQ5Nmc#gid=0
Security Reports

Upcoming Speaking Engagements