Security/B2G/2013 12 17

FirefoxOS Security Team Meeting

1pm PST, B2G Vidyo room Prior notes are here: https://wiki.mozilla.org/Security/B2G/2013_11_26

Agenda Items

• [cr] FxOS malware incidence response

 * draft in progress here: https://docs.google.com/a/mozilla.com/document/d/13V4si7tlAI5KMfYEzum1of9UizRgyqItDYdiVhXhvsM/edit#
 * jeff bryner is our incidence response manager, cr will involve him.

• NFC work week in jan 20th
• Bug bounty
• sandbox / desktop roadmap being defined (will help with B2G remoting) (e10s guys do a lot of remoting)
  • jld landing stack traces

seccomp 1.4 tracking https://bugzilla.mozilla.org/show_bug.cgi?id=929277

• env variable to disable sandbox at runtime https://bugzilla.mozilla.org/show_bug.cgi?id=928042 => B2G bug https://bugzilla.mozilla.org/show_bug.cgi?id=948620 <paul
• https://wiki.mozilla.org/Sandbox
• sprint wrapup

https://etherpad.mozilla.org/fxossprintsummary

• Goals

Add your goals here: https://docs.google.com/a/mozilla.com/document/d/149yh9-_TPaKJosMKQXY8tKBkswlzNIc4bV3yAQix7GY/edit

Previous Action Items

- post in standups WOOOT

New Action Items

- [PT] to talk to mvines to check on status of sandbox flags - [PT] talk to QA on getting patch from QA to OEMs - [GD] Testing sandboxing guide, updating wiki etc.

Other stuff

• xss bookmarklet, http://mozfreddyb.github.io/escape-artist/xss_blookmarklet.html