• Time: (Weekly) Tuesday at 13:30 PM PDT / 16:30 PM EDT / 21:30 PM UTC.
• Place: Mozilla HQ, 3A-All Your Base (3rd Floor)
• Phone (US/Intl): 650 903 0800 x92 Conf: 95316#
• Phone (Toronto): 416 848 3114 x92 Conf: 95316#
• Phone (US): 800 707 2533 (pin 369) Conf: 95316#

Agenda

• Goals - Please keep status up to date - https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AthhYg2CqN25dGRDX0ZqTkJ4dTJGWFVyb2RmNTNDbmc
• Metrics
  • https://security-review-statistics.vcap.mozillalabs.com/
  • https://people.mozilla.com/~sarentz/p/dashboard
• Security Reports

Process Docs needing Review (all housed under https://wiki.mozilla.org/Security/Process)

• https://wiki.mozilla.org/Security/Process/Secreview_Bug_Process [reviewers: yvan,tinfoil]
• https://wiki.mozilla.org/Security/Process/Agile [reviewers: yvan,tinfoil]
• https://wiki.mozilla.org/Security/Process/Web_Bug_Triage [reviewers: yvan,tinfoil]
• https://wiki.mozilla.org/Security/Process/Vendor_Reviews [reviewers: yvan,tinfoil]
  • https://wiki.mozilla.org/Security/Process/Vendor_Reviews/Risk_Categories [reviewers: yvan,tinfoil]
  • https://wiki.mozilla.org/Security/Process/Vendor_Reviews/Review_Questions [reviewers: yvan,tinfoil]

Contribution paths https://wiki.mozilla.org/Security/Contributors [reviewers: yvan,tinfoil]

• level 4/5 tool - commit new feature, commit multiple features
• [gkw] There's a thread on b2g-internal that ... (confidential)
• [gkw] Valgrind builds now running per check-in and displayed on TBPL by default++
  • https://tbpl.mozilla.org/?jobname=valgrind
  • Most of the credit goes to njn for picking up where I left off
  • \o/
• I like pie
  • I prefer tau

Upcoming Speaking Engagements

(List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks )

• [freddyb] - Was invited to talk to a closed sec conference in Berlin, might talk about CSP and how that helps in browser, web and firefox os security.
• [dchan] - Heading to AppSecCali (Jan 27-28) - not speaking
• [arroway] - Security class about Firefox OS (Jan 15th)

                 - JDuchess France in Paris (Feb 5th)

Planned Blog Posts

• [new] https://mana.mozilla.org/wiki/display/SECURITY/Security+Blog+Posts
• [old]https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AlDw2hHXmVgCdHN3LWZTZ0hjMElPc1g2clRKb2lNN3c

Security Review Status (curtisk)

• Completed in Q1:64 / Q2: 72 / Q3:55

https://security-review-statistics.vcap.mozillalabs.com/weekly

Operations Security Update (Joe Stevensen)

Project Updates

Please add your name to the update so we know who to follow up with

Firefox Desktop

Firefox Mobile

Firefox OS

Firefox Core

MarketPlace

Web Apps

Services

Operation Security