Security/Meetings/Automation/2014-09-23

Agenda

• status updates
  • certificate pining for server-side apps (find-my-device to FxA)

Status Updates

• ulfr
  • MIG progress
  • TLS Observatory
    • https://github.com/mozilla/MWoSTLSObservatory
    • correlate with mgoodwin's certificate violation database?
• jeff
  • MozDef release v1.1 (search for alerts, netflow input)
  • Demo: search + netflow
  • bsidesPDX presentation Oct 3rd.
  • Demo instance from arsenal still up: http://54.183.18.140:3000/
  • Considering making mozdef.com an active site for demos, screenshots, etc.
• psiinon
  • ZAP Attack mode - demo?
  • JavaOne talk next Tuesday
• st3fan
  • https://github.com/st3fan/moz-mockmyid-api
  • https://github.com/st3fan/moz-storageserver
  • https://github.com/st3fan/moz-tokenserver
• mgoodwin