Security/B2G: Difference between revisions
< Security
Jump to navigation
Jump to search
Ptheriault (talk | contribs) |
(→Summary: rm huseby, add tedd, sort alphabetically) |
||
| (37 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
=Firefox OS Security | =Firefox OS Security Team= | ||
== Summary == | == Summary == | ||
{| class="fullwidth-table" | {| class="fullwidth-table" | ||
|- | |- | ||
| style="width:20%" | '''Lead''' | | style="width:20%" | '''Lead''' | ||
[mailto:ptheriault@mozilla.com Paul Theriault] (irc: pauljt) | | [mailto:ptheriault@mozilla.com Paul Theriault] (irc: pauljt) | ||
|- | |- | ||
| ''' | | '''Team Members''' | ||
| | | [mailto:freddyb@mozilla.com Frederik Braun] (irc: freddyb), [mailto:jhector@mozilla.com Julian Hector] (irc: tedd), [mailto:cr@mozilla.com Christiane Ruetten] (irc: cr), [mailto:arroway@mozilla.com Stéphanie Ouillon] (irc: arroway) | ||
|- | |- | ||
| '''References''' | | '''References''' | ||
| [ | |[[Security/B2G/Goals| Goals]]<br> | ||
[[Security/B2G/Team_responsibilities|Team Responsibilities]]<br> | |||
|} | |} | ||
== | == Useful Information == | ||
'''Getting assistance from the FxOS security team''' | |||
# | * Need Firefox OS security review? Flag your bug with "sec‑review?" (needinfo if urgent) | ||
* [http://www.mozilla.org/security/#For_Developers Report a FxOS security issue] | |||
''' Security reviews planning''' | |||
* [https://docs.google.com/spreadsheets/d/1vuw7_4I6o20I2n17_-3i43AmUE9TM88F2H7NBhryqwM/edit#gid=0 On-going and planned security reviews] | |||
* [ | |||
* [ | '''FxOS Security Documentation''' | ||
* [https:// | * [https://developer.mozilla.org/en-US/Firefox_OS/Security FxOS Security Documentation] | ||
* [https://developer.mozilla.org/en-US/docs/Mozilla/Firefox_OS/Security/Security_model Firefox OS Security Model Overview] | |||
* [https://developer.mozilla.org/en-US/ | * [https://developer.mozilla.org/en-US/Apps/Build/App_permissions Web App Permissions] | ||
* [https://developer.mozilla.org/en-US/ | * [https://developer.mozilla.org/en-US/Apps/Security_guidelines Security guidelines for App developers and reviewers] | ||
* [https://developer.mozilla.org/en-US/docs/Apps/Marketplace_review_criteria App review criteria on MDN] | * [https://developer.mozilla.org/en-US/docs/Apps/Marketplace_review_criteria App review criteria on MDN] | ||
'''Other Helpful Links''' | |||
* [[Marketplace/Reviewers/Apps/Guide/SecReviewTraining| Security training for App reviewers]] | |||
* [https://developer.mozilla.org/en-US/Firefox_OS/Security/Intercepting_traffic_using_a_proxy Intercepting traffic with a proxy on Firefox OS] | |||
* [[Security/B2G/GaiaTesting| Getting starting testing Gaia and Web Apps (outdated)]] | |||
== Getting involved == | |||
'''Guidelines''' | |||
* [[Security/B2G/Contribute| How to contribute]] | |||
'''Getting in touch with us''' | |||
* IRC channel #FxOSSec on irc.mozilla.org | |||
* The [https://mail.mozilla.org/listinfo/ffos-secure ffos-secure@mozilla.org] public mailing list is a good place to start discussing about security in the Firefox OS ecosystem. | |||
* The [https://guides.mozilla-community.org/c/security/firefox-os Guides forum] is here to help you find your way to make your first contributions. | |||
== Meetings == | == Meetings == | ||
| Line 42: | Line 53: | ||
'''FirefoxOS Security Weekly Meeting''' | '''FirefoxOS Security Weekly Meeting''' | ||
* Time: Tuesdays | * Time: Tuesdays 1300 PDT / 2100 CET / 0400 CST / 2000 UTC | ||
* Notes during the meeting are captured on [https://etherpad.mozilla.org/firefoxossecteammtg this etherpad]. | * Notes during the meeting are captured on [https://etherpad.mozilla.org/firefoxossecteammtg this etherpad]. | ||
== Subpages of {{FULLPAGENAME}}== | == Subpages of {{FULLPAGENAME}}== | ||
{{Special:PrefixIndex/{{FULLPAGENAME}}/}} | {{Special:PrefixIndex/{{FULLPAGENAME}}/}} | ||
Latest revision as of 09:49, 15 February 2016
Firefox OS Security Team
Summary
| Lead | Paul Theriault (irc: pauljt) |
| Team Members | Frederik Braun (irc: freddyb), Julian Hector (irc: tedd), Christiane Ruetten (irc: cr), Stéphanie Ouillon (irc: arroway) |
| References | Goals |
Useful Information
Getting assistance from the FxOS security team
- Need Firefox OS security review? Flag your bug with "sec‑review?" (needinfo if urgent)
- Report a FxOS security issue
Security reviews planning
FxOS Security Documentation
- FxOS Security Documentation
- Firefox OS Security Model Overview
- Web App Permissions
- Security guidelines for App developers and reviewers
- App review criteria on MDN
Other Helpful Links
- Security training for App reviewers
- Intercepting traffic with a proxy on Firefox OS
- Getting starting testing Gaia and Web Apps (outdated)
Getting involved
Guidelines
Getting in touch with us
- IRC channel #FxOSSec on irc.mozilla.org
- The ffos-secure@mozilla.org public mailing list is a good place to start discussing about security in the Firefox OS ecosystem.
- The Guides forum is here to help you find your way to make your first contributions.
Meetings
Connection Information
- Dial-in:
- +1 650 903 0800 x92 Conf 98500#
- +1 416 848 3114 x92 Conf 98500#
- +1 800 707 2533 (pin 369) Conf 98500# (toll free, Skype)
- Vidyo: B2G Vidyo room
FirefoxOS Security Weekly Meeting
- Time: Tuesdays 1300 PDT / 2100 CET / 0400 CST / 2000 UTC
- Notes during the meeting are captured on this etherpad.
Subpages of Security/B2G
- Security/B2G/2013 10 07
- Security/B2G/2013 10 22
- Security/B2G/2013 10 29
- Security/B2G/2013 11 19
- Security/B2G/2013 11 26
- Security/B2G/2013 12 17
- Security/B2G/2013 12 20
- Security/B2G/2013 13 5
- Security/B2G/2013 20 5
- Security/B2G/2013 20 6
- Security/B2G/2013 27 5
- Security/B2G/2013 2 13
- Security/B2G/2013 2 20
- Security/B2G/2013 2 27
- Security/B2G/2013 2 6
- Security/B2G/2013 3 13
- Security/B2G/2013 3 20
- Security/B2G/2013 4 10
- Security/B2G/2013 4 17
- Security/B2G/2013 4 23
- Security/B2G/2013 4 29
- Security/B2G/2013 5 5
- Security/B2G/2013 6 21
- Security/B2G/2013 6 5
- Security/B2G/2013 8 27
- Security/B2G/2013 9 14
- Security/B2G/2013 9 21
- Security/B2G/2014 01 07
- Security/B2G/2014 01 4
- Security/B2G/2014 02 11
- Security/B2G/2014 02 17
- Security/B2G/2014 02 24
- Security/B2G/2014 02 4
- Security/B2G/2014 03 4
- Security/B2G/2014 04 16
- Security/B2G/2014 04 22
- Security/B2G/2014 04 9
- Security/B2G/2014 1 29
- Security/B2G/April 10 2012
- Security/B2G/April 16 2012
- Security/B2G/April 4 2012
- Security/B2G/Bluetooth
- Security/B2G/Bluetooth-april-2012
- Security/B2G/Browser API
- Security/B2G/Carrier Billing API
- Security/B2G/Contribute
- Security/B2G/Documentation
- Security/B2G/Engagement
- Security/B2G/FirefoxOSCommsHardening
- Security/B2G/GaiaTesting
- Security/B2G/Gaia Apps
- Security/B2G/Goals
- Security/B2G/Guidance
- Security/B2G/Hardware
- Security/B2G/Jan 29 2013
- Security/B2G/JavaScript code analysis
- Security/B2G/KULHITB2014
- Security/B2G/PermissionReview
- Security/B2G/PermissionReview/Hostedrisks
- Security/B2G/PermissionReview/New permission model
- Security/B2G/PermissionReview/PrivilegedPackages
- Security/B2G/PermissionReview/SystemXHR
- Security/B2G/PermissionReview/TCPUDPSocket
- Security/B2G/Permissions API
- Security/B2G/Permissions Model & Management
- Security/B2G/Permissions list
- Security/B2G/Persona API
- Security/B2G/RIL
- Security/B2G/Reviews
- Security/B2G/Reviews old
- Security/B2G/Reviews planning
- Security/B2G/RootingTools
- Security/B2G/SecurityModelv3/Origins and cookie jars
- Security/B2G/TCP UDP Socket
- Security/B2G/Team responsibilities
- Security/B2G/USB file-reading API
- Security/B2G/VulnerabilityManagement
- Security/B2G/navigator.pay