Security/B2G/2014 02 17

FirefoxOS Security Team Meeting

1pm PST, B2G Vidyo room Prior notes are here: https://wiki.mozilla.org/Security/B2G/2014_02_11

Agenda Items

• Seccomp/Sandboxing
• buddy up (Freddy)
• [arroway] UX ideas/questions (is it in the backlog already?)
  • Do Not Track (see some bugs in backlog)
  • Settings: view per permission (there's a bug)
  • Parent Control (Kid mode, Guest mode)
  • MDN: Security page for non-technical audience

News

• [cr] https://mozillians.org/en-US/u/Gioyik/ wants to contribute to security tools add-on

 * started template at https://github.com/Gioyik/CSP-validator
 * Paul Rouget works on CSP stuff, too, might overlap, cr to introduce the two
 I think this is it: https://github.com/paulrouget/gecko-dev/tree/page-summary-2

Notes

Previous Action Items

• [pt] https://docs.google.com/a/mozilla.com/document/d/1som_jWCaKgTx1hKLxin6dG8hBWhJpsh2CAPSc1zKMNI/edit#
• [arroway] build patched version of buri + marrionette

New Action Items

• merge whitelist changes into one single bug [jld/pauljt]
• talk to kevin hu about new device [kang]

Goal Status Updates

Other stuff

• HITB - Anyone know anything?
  • may 27-30