Security/Meetings/SecurityAssurance/2014-01-07

« previous week | index | next week »

• Time: (Weekly) Tuesday at 13:30 PM PDT / 16:30 PM EDT / 21:30 PM UTC.
• Place: Mozilla HQ, 3A-All Your Base (3rd Floor)
• Phone (US/Intl): 650 903 0800 x92 Conf: 95316#
• Phone (Toronto): 416 848 3114 x92 Conf: 95316#
• Phone (US): 800 707 2533 (pin 369) Conf: 95316#

Agenda

• Goals - Please keep status up to date - https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AthhYg2CqN25dGRDX0ZqTkJ4dTJGWFVyb2RmNTNDbmc
• Metrics
  • https://security-review-statistics.vcap.mozillalabs.com/
  • https://people.mozilla.com/~sarentz/p/dashboard
• Security Reports

Process Docs needing Review (all housed under https://wiki.mozilla.org/Security/Process)

• https://wiki.mozilla.org/Security/Process/Secreview_Bug_Process [reviewers: yvan,tinfoil]
• https://wiki.mozilla.org/Security/Process/Agile [reviewers: yvan,tinfoil]
• https://wiki.mozilla.org/Security/Process/Web_Bug_Triage [reviewers: yvan,tinfoil]
• https://wiki.mozilla.org/Security/Process/Vendor_Reviews [reviewers: yvan,tinfoil]
  • https://wiki.mozilla.org/Security/Process/Vendor_Reviews/Risk_Categories [reviewers: yvan,tinfoil]
  • https://wiki.mozilla.org/Security/Process/Vendor_Reviews/Review_Questions [reviewers: yvan,tinfoil]

Contribution paths https://wiki.mozilla.org/Security/Contributors [reviewers: yvan,tinfoil]

• level 4/5 tool - commit new feature, commit multiple features
• [gkw] There's a thread on b2g-internal that ... (confidential)
• [gkw] Valgrind builds now running per check-in and displayed on TBPL by default++
  • https://tbpl.mozilla.org/?jobname=valgrind
  • Most of the credit goes to njn for picking up where I left off
  • \o/
• I like pie
  • I prefer tau

Upcoming Speaking Engagements

(List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks )

• [freddyb] - Was invited to talk to a closed sec conference in Berlin, might talk about CSP and how that helps in browser, web and firefox os security.
• [dchan] - Heading to AppSecCali (Jan 27-28) - not speaking
• [arroway] - Security class about Firefox OS (Jan 15th)

                 - JDuchess France in Paris (Feb 5th)

Planned Blog Posts

• [new] https://mana.mozilla.org/wiki/display/SECURITY/Security+Blog+Posts
• [old]https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AlDw2hHXmVgCdHN3LWZTZ0hjMElPc1g2clRKb2lNN3c

Security Review Status (curtisk)

• Completed in Q1:64 / Q2: 72 / Q3:55

https://security-review-statistics.vcap.mozillalabs.com/weekly

Project Updates

Please add your name to the update so we know who to follow up with