Security/Meetings/SecurityAssurance/2013-02-26: Difference between revisions
< Security | Meetings | SecurityAssurance
Jump to navigation
Jump to search
No edit summary |
(→Agenda) |
||
| Line 3: | Line 3: | ||
=Agenda= | =Agenda= | ||
* [curtis] Django stuff https://bugzilla.mozilla.org/show_bug.cgi?id=843345 | * [curtis] Django stuff https://bugzilla.mozilla.org/show_bug.cgi?id=843345 | ||
* | * [https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AmLct3lOMM6ZdEI4SlE0eGRWdkN5bXBpbV8wcjNzNUE Goals] - Please keep status up to date - | ||
* Metrics | * Metrics | ||
** | ** [https://docs.google.com/a/mozilla.com/spreadsheet/ccc?key=0AmLct3lOMM6ZdEI4SlE0eGRWdkN5bXBpbV8wcjNzNUE Review Security Radar Page] | ||
* | * [https://mana.mozilla.org/wiki/display/SECURITY/Data+Protection Data Protection Program] | ||
* Preparing for pwn2own | * Preparing for pwn2own | ||
==PTO/Travel== | ==PTO/Travel== | ||
| Line 12: | Line 12: | ||
* RSA is this week. | * RSA is this week. | ||
* PT off friday 1st/monday 4th | * PT off friday 1st/monday 4th | ||
=Upcoming Speaking Engagements= | =Upcoming Speaking Engagements= | ||
(List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks ) | (List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks ) | ||
Latest revision as of 16:15, 27 February 2013
- Time: (Weekly) Tuesday at 13:30 PM PDT / 16:30 PM EDT / 21:30 PM UTC.
- Place: Mozilla HQ, 3A-All Your Base (3rd Floor)
- Phone (US/Intl): 650 903 0800 x92 Conf: 95316#
- Phone (Toronto): 416 848 3114 x92 Conf: 95316#
- Phone (US): 800 707 2533 (pin 369) Conf: 95316#
Agenda
- [curtis] Django stuff https://bugzilla.mozilla.org/show_bug.cgi?id=843345
- Goals - Please keep status up to date -
- Metrics
- Data Protection Program
- Preparing for pwn2own
PTO/Travel
- Some people are at BSidesVancouver and CanSecWest (+pwn2own) next week.
- RSA is this week.
- PT off friday 1st/monday 4th
Upcoming Speaking Engagements
(List it at these two locations too: https://developer.mozilla.org/en-US/events & https://wiki.mozilla.org/Security/Talks )
- Raymond Forbes : Feb 27 - March 2 : Nullcon : Bug Bounty Programs
Planned Blog Posts
Security Review Status (curtisk)
- Completed in Q4 2012: 50
- Completed this Quarter 45
https://security-review-statistics.vcap.mozillalabs.com/weekly
Operations Security Update (Joe Stevensen)
Project Updates
Please add your name to the update so we know who to follow up with
Firefox Desktop
Java CTP
Firefox Mobile
Firefox OS
MWC! :) Gaia sec reviews due by 13th V1.0.1 reviews due end of quarter (existing goal) Weekly notes: https://etherpad.mozilla.org/firefoxossecteammtg Documentation is also focus atm: https://developer.mozilla.org/en-US/docs/Mozilla/Firefox_OS/Security (review, read, contribute etc please)
Firefox Core
- [cdiehl, choller] Resolved multiple blockers for TSan (Thread Sanitizer v2) on Firefox
- Bugs filed so far: https://bugzilla.mozilla.org/buglist.cgi?quicksearch=OPEN%20sw%3A%5Btsan
- [gkw, choller] Fuzzing Baseline Compiler
- New bugs this week: http://tinyurl.com/ab5h2jr 14 issues
- [choller] Fuzzing Odinmonkey
- New bugs this week: http://tinyurl.com/azzpz3v 16 issues
- [gkw] We now have the ability to properly fuzz threadsafe builds by default, at least on Mac 64-bit
MarketPlace
Web Apps
Services
Operation Security
Cool Stuff
- Call out for JSfunfuzz at BsidesSF yesterday (page 5): http://deadliestwebattacks.files.wordpress.com/2013/02/javascript-security-html5.pdf