Security/Meetings/SecurityAssurance/2014-02-11

« previous week | index | next week »

• Time: (Weekly) Tuesday at 13:30 PM PDT / 16:30 PM EDT / 21:30 PM UTC.
• Place: Mozilla HQ, 3A-All Your Base (3rd Floor)
• Phone (US/Intl): 650 903 0800 x92 Conf: 95316#
• Phone (Toronto): 416 848 3114 x92 Conf: 95316#
• Phone (US): 800 707 2533 (pin 369) Conf: 95316#

Agenda

• Security Reports
• [curtis] Let's meet to discuss upcoming blog posts
  • Wednesday 1pm California time
  • May be rescheduled due to invite issues
  • See links below in #Planned_Blog_Posts
• [psinnon] GSOC

https://www.owasp.org/index.php/GSoC2014_Ideas [yvan] Suggestion for ulfr's raccoon problem - http://www.youtube.com/watch?v=hHN-f6xTzsY wiki changes

• intranet.mozilla.org will be phased out (in the future, this isnt happening anytime soon)
• everybody loves wiki.m.o and it's staying, as well as mana

Upcoming events

• March 24 - 28 JavaScript work week in Toronto
  • gkw is attending < cool, they're going to talk about JS tainting
  • Let gkw know about whatever sessions you'd like to attend and i'll try to connect both sides JS tainting ;p (arroway) +freddy maybe
• March 12 - 14 CanSecWest
  • Jeff Bryner, Curtis Koenig, Yvan Boily, and Raymond Forbes attending CanSecWest
  • Michael Henry (tinfoil) attending bsides but not CanSecWest
• Big french OSS conf CFP, if interested: https://2014.rmll.info/Appel-a-conferences?lang=en
• [pt] conf sponsorship in general

Upcoming Speaking Engagements

(List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks )

• [jeff] bSides Vancouver-machine learning for web logs
• [curtis] bSides Vancouver - I am the cavalry

[pt] speaking at web directions code in melbourne in may (dev conf)

Planned Blog Posts

• [new] https://mana.mozilla.org/wiki/display/SECURITY/Security+Blog+Posts
• [old]https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AlDw2hHXmVgCdHN3LWZTZ0hjMElPc1g2clRKb2lNN3c
• Curtis will move both of these into the etherpad for the meeting (?)
• [Blog ideas for 2014] https://security.etherpad.mozilla.org/sec-blog-brainstorm

Security Review Status (curtisk)

• Completed in Q1:

https://security-review-statistics.vcap.mozillalabs.com/weekly

Metrics

• • https://security-review-statistics.vcap.mozillalabs.com/
  • https://people.mozilla.com/~sarentz/p/dashboard

Project Updates

Please add your name to the update so we know who to follow up with