Firefox/Meeting/27-Oct-2015

Actions from last meeting

• None

General Topics / Roundtable

(tips/tricks/FYI, productivity improvements, industry news)

• There was a proposal to decommission "dumbmake".
  • Final decision seems unclear.
• [MattN] Bug #'s are now required in telemetry probe descriptions: https://mail.mozilla.org/pipermail/fhr-dev/2015-October/000655.html
• [MattN] #-moz-resolution is no longer supported/required for proper resolution ICO files. The correct frame should be automatically chosen. See https://bugzil.la/1118926
• Proposal to merge comm-central into mozilla-central on m.dev.platform
• [mconley]: @bcrypt published slides on how to do a timing attack to get a sense of a user's browsing history: https://zyan.scripts.mit.edu/presentations/toorcon2015.pdf. Firefox release seems slightly more vulnerable / accurate than Chrome, based on anecdotal reports.
• [mconley]: Autoland for MozReview has been turned on for the version-control-tools repository for testing. Will hopefully be turned on for mozilla-inbound soonish. Other MozReview updates: http://www.lowleveldrone.com/mozilla/mozreview/2015/10/23/mozreview-workweek.html
• [MattN] Interviewing for desktop front-end is starting soon

Friends of the Firefox team

(Give a shoutout/thanks to people for helping fix and test bugs. Introductions)

Resolved bugs (excluding employees): http://mzl.la/1XvhDEK More than one bug fixed:

• Iaroslav Sheptykin
• Johann Hofmann
• Philip Chee
• Tooru Fujisawa [:arai]

Project Updates

Add-ons

E10s

• [mconley]: M8 continues to tend downward: https://bugzilla.mozilla.org/buglist.cgi?quicksearch=cf_tracking_e10s%3Am8%2B&list_id=12639676
• [mconley]: Printing appears to be broken on OS X due to a clang upgrade? Workaround posted here: bug 1217190#c12
• [mconley]: The Telemetry Experiment has been launched: bug 1193089

Go Faster

• Progress was made on making Hello into a system extension

Hello

• New user journey (direct calls, contacts removed, auto-tab-sharing to be turned on, still at risk))
• e10s-support

Notifications

Done

• Notification options are complete and working on e10s for XUL (non-native) and OS X
• Management interface simplification landed

In progress: https://docs.google.com/spreadsheets/d/1ALsyc0Y8k0UikZYF2fjhn2wUnFMUxYeMJioz-Q2DVlo/edit?pli=1#gid=0

• Fixing XUL transparency issues
• Change in permission notification upon upgrade – push uses the same permission as web notifications
• Other polish issues and bug fixes – stabilizing for shipping in Fx44

Privacy/Security

• Press outlets are talking about Tracking Protection in Fx42 e.g. http://www.alphr.com/software/1001784/ad-blocking-gathers-pace-with-mozillas-firefox-rollout
• Landed an updated RC4 error page to coincide with RC4 deprecation in Fx 44
• Landed a patch to use a lock with a strikethrough for HTTP pages that have Password Fields in the Control Center
  • https://twitter.com/rlbarnes/status/656554266744586240

Search

• Bug 1203167 is close to landing (search hijacking countermeasures)
• Testing a prototype add-on to unify url+search bar, with the goal to launch a telemetry experiment soon

Windows 10

This week I learned…

• [MattN] The FIDO U2F "specification" doesn't even define where it's API endpoints should be implemented… *headdesk*
  • "Implementations may choose how to make such an API available to RP web pages."
  • [mconley]: Someone wrote an add-on: https://addons.mozilla.org/firefox/addon/u2f-support-add-on/