Identity/WeeklyMeeting/2012-07-02

Last Week's Actions

• [SLIP] everyone/LH and AK and BW interested in dev engagement, talk to Christian [JP *swears* he will talk to Christian this week :) JPfailed and WILL BURN IN HELL
• [AK] Yes, did some work on MDN around Primaries
• [in progress] JP to follow up on CEF logging with appropriate other devs. [Yvan's back today; we'll pick up now]
• [SLIP] LH to blog about bug bounty
• [DONE] AK to look at issue #1608
  • Yes, bug closed with help from lloyd and petef
• [SLIP] DM to work w/ JF, CB, and KV (Karthik) on persona.org plan
• [ONGOING] DM to look into where broader profile fits in.
• [STRIKE] BA to cordinate jen and sean in dev team
• [SLIP] BA need to go over sec review and engage next review steps
• [DONE] ST to look at https://github.com/mozilla/browserid/issues/1709 & https://github.com/mozilla/browserid/issues/1676
• [STRIKE] ST to schedule needed followup on profile proposal [name/photo is slipped from beta]
• [DONE] benadida to review action list and make sure it corresponds to priorities
• [DONE] benadida add Sawyer to project
• [SLIP - waiting for assessment by jbonacci - due EOD tomorrow] lloyd to determine by next Monday whether we launch on Thursday the 5th or later
• [DONE] benadida to bring back metrics

Main Threads

• Beta in 4 weeks (last features before Wed)
• ACTION: benadida to followup with Lloyd on slipping.
• ACTION: DM to give BW permission to identity blog

Dev

• [Fr] sec. reviews (two pull requests on private repo)
• [ST] - working with lloyd and skinny to get copy updates, reset password, loads of things done.
• [ST] - Slipping user name/photo from beta release, several UX testing quality flows started.
• [ST] - issue 1676[Can not log into beta.123done.org on older Android device] - Lloyd, Skinny and I started to come up with a reasonable plan for help text. Needs implemented.
• [ST] - issue #1709[BrowserID completely broken in MIUI ROM Android stock browser ] - This is a third party ROM on an unlocked device, what should the priority of this be? We should instrument to find out how many people this is really affecting.
• [LH] - Will write up a summary of how forgotten password / account recover will work to vet our conclusions with skinny/shane
• [SM] improving KPI reporting of orphaned dialogs
• [AK] - Not clear if BigTent fell through a Security/Legal gap, checking with curtisk
• [AK] Knocked down a BigTent blocker; node-oauth and node-openid now respect http(s) proxies
• [BW] - have plan for session-cookie expiration-on-password-change, will implement after the hotfix settles
• [NM] - finished second big KPI report, met with Crystal / Dan, defined short/medium-term goals

• ACTION: [Fr] and [BW] to discuss priorities for security improvements (based on findings from security reviews)
• ACTION: benadida to find NM help on deployment
• ACTION: francois to ping mmayo about AWS account (which apparently exists now)
• ACTION: jgrm to help DC on ephemeral deployments

FF & Platform

• JP/Ben: first patch landed

Security & Privacy

• 3rd-party security review starting soon

Ops

• [Gene] Changes in staging :
  • Zeus load balancer now also healthchecks "/__heartbeat__?deep=true" to verify health of processes behind the bid-router (Bug 764890)
  • Configured nginx to forward traffic destined for "/browserid/__heartbeat__" to port 62700 at "/__heartbeat__". This will allow us to monitor the browserid process (now sitting behind the router) directly in nagios. (Bug 764890)
  • Code deployment now also depends on succesfull checks of router, bid and verify process heartbeats (Bug 764890)
  • "public_url" has been changed to reflect persona vs browserid. "static_public_url" has been defined

• [PF] going to work more with callahad and ozten on bigtent staging this week (proxy work looks to be ready; and rolling out RSBAC updates)
  • Current train push slipping to Monday

QA

• Train 30: Bug 767708 - QA and deploy BrowserID train-2012.06.22 to production
  • https://bugzilla.mozilla.org/show_bug.cgi?id=767708
  • load tests complete, couple of more verifications and more platforms tests Monday and Tuesday
  • Seems to be concensus in IRC to delay prod ship to Mon/Tue due to holiday timing.

• Two client issues:
  • New version of Opera (12) is broken; ideas on what the issue is anyone? - https://github.com/mozilla/browserid/issues/1844
  • chrome on ios - https://github.com/mozilla/browserid/issues/1870

• ACTION: [SM] to look at Opera (12)
• ACTION: benadida to loop Francois into secreview

Metrics

good collab with NM/AK + Annie.

UR

• mini work-week week of 8/27, for "Project Hydra"

Product Marketing

• Grace Jimenez will be taking over as PMM starting Thursday.
• Remember to sign up for blogs : https://etherpad.mozilla.org/identity-blog-post-signup
  • Brian up for the 5th [maybe pushed back a week], Shane up for the 12th [maybe pushed back a week]
• ACTION: Add Brian and Shane T to Identity Wordpress

Engagement

• [Fr] introduced Persona at Gather 2012 (Auckland Barcamp)
• [Fr&DC] discussed announce list plan and requested persona-notices@mozilla.org (https://bugzilla.mozilla.org/show_bug.cgi?id=770093)
• [JP] at nodeconf portland spreading the browserid love - we have lots of fans :)
• [DC] Worked with Laura Mesa on a FAQ, feature comparison matrix, upcoming blog posts.
• [DC] requiredEmail deprecated & blogged about.
• [DC] I figured out how to explain assertions to laypeople! Anyone know of good screencasting / animating software so I can blog about it more easily?
• [CH] working on a slide deck for Barcelona in Dr.Seuss style:

   Passwords are tough, 
   it is easy to see, 
   so allow login with emails,
   using BrowserID.

ACTIONS

• DM: add Brian and Shane T to Identity Wordpress
• GL: We need Persona stickers.