Re: WebAPI Security Discussion: Screen Orientation

2012-04-10 Thread Jonas Sicking
On Tue, Apr 10, 2012 at 4:59 PM, Lucas Adamski wrote: > Here's the first API up for discussion.  This should be pretty > straightforward so I hope to close out this discussion by > end of day Thursday (PDT). > > I'd like to keep this discussion on mozilla.dev.webapps, but I'll take > responses o

Re: [b2g] WebAPI security discussions: template and next steps

2012-04-10 Thread Lucas Adamski
Hi Luke, There's quite a bit of discussion and thought has already gone into this topic and we are currently in the process of turning all that thought into a specific proposal. You'll see that shortly, but in the mean time I'd like to keep this thread focused on the topic at hand. As I think

Re: WebAPI Security Discussion: Camera API

2012-04-10 Thread Adrienne Porter Felt
I'd like to propose the following based on discussions at Berkeley & with others about camera access: -- The OS provides two trusted UI buttons. One has a photo icon, and the other has a recording icon. Applications can embed these icons into their UIs but cannot write over them. -- When the use

WebAPI Security Discussion: Camera API

2012-04-10 Thread Lucas Adamski
This discussion will be a bit more involved I think but I'd like to wrap this up by Tue 17th EOD PDT. Name of API: Camera API References: http://dvcs.w3.org/hg/dap/raw-file/tip/media-stream-capture/scenarios.html ("Section 2 Scenarios") are use case scenarios from the media capture task that is

WebAPI Security Discussion: Screen Orientation

2012-04-10 Thread Lucas Adamski
Here's the first API up for discussion. This should be pretty straightforward so I hope to close out this discussion by end of day Thursday (PDT). I'd like to keep this discussion on mozilla.dev.webapps, but I'll take responses on other lists over silence. :) Name of API: Screen Orientation Re

WebAPI security discussions: template and next steps

2012-04-10 Thread Lucas Adamski
Hi all, Below is the template we'll be using to discuss the security implications of individual WebAPIs in each of the application categories. This one is just an example so please don't focus on the proposal itself, as it isn't intended to make much sense. I'm also sending out the first two s

Re: Bug 526019 - Blocklist vulnerable versions of flash for Firefox

2012-04-10 Thread Ian Melven
Alex, Mozilla has blocked older versions of the Java plugin (on Windows) recently (http://blog.mozilla.com/addons/2012/04/04/update-on-java-blocklist/) so it seems possible that older versions of the Flash Plugin may be blocked at some time in the future if the situation warrants. See http://b

CHANGE IN SCHEDULE - Android Malware Re: Fwd: TUESDAY - April 10 - Reputation Based Detection of Socially Engineered Malware - Moheeb Abu Rajab

2012-04-10 Thread Tanvi Vyas
They have changed the schedule and are now talking about Android Malware instead: Hi Everyone, There is another change to the security seminar today: we are back to the seminar on Android Malware by Monirul Sharif. Apologies again for the last minute change. The title and abstract are inline

Bug 526019 - Blocklist vulnerable versions of flash for Firefox

2012-04-10 Thread alex . mayorga
Hello! Thanks on trying to make the web more secure. Would https://bugzilla.mozilla.org/show_bug.cgi?id=526019 be ever actioned on? Regards, Alex ___ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-securi