Re: Scope of Dev-Security List

2013-09-30 Thread Curtis Koenig
manually. We do all of this in the open so your also welcome to attend our meetings and security reviews as they occur. We would appreciate hearing from you and doing what we can to help you contribute to our security efforts. -- Curtis Koenig Mozilla Corp. Security Program Manager On 27 Sep, 2013

Re: Security fallout of hiding tabs-on-bottom mode

2012-11-12 Thread Curtis Koenig
ussion about it should remain there as this does not rise to the level of a "security issue" -- Curtis Koenig Sr. Security Program Manager @curtisko On 2012-11-12 15:33 PM, Zack Weinberg wrote: > On 2012-11-12 11:45 AM, Johnathan Nightingale wrote: >> On Nov 12, 201

REMINDER: New security bug approval process using the "sec-approval" flag live as of 9/30/2012

2012-10-18 Thread Curtis Koenig
d, ? bugs with higher risk (sec-high and sec-critical), or ? bugs near end of cycle. If there are any questions or discussions, please reply here or send e-mail to me, Dan Veditz, and/or Alex Keybl. -- Curtis Koenig Program Manager Mozilla Security Team ___ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security

Re: [Security Reviews] Week of 2012.06.04

2012-06-04 Thread Curtis Koenig
so yeah, typo Thu should be Jun-7 and Fri Jun-8, at this time we have no reviews scheduled for those times, but if you have a review that is needed and you want those slots let me know. /Curtis On 2012-06-04 11:42 AM, Curtis Koenig wrote: > > > Security Reviews & Threat Mode

[Security Reviews] Week of 2012.06.04

2012-06-04 Thread Curtis Koenig
Security Reviews & Threat Modeling Sessions Scheduled for this week Date / Time Item Mon Jun 04 / 13:00 PDT Web Telephony

[Security Reviews] Week of 2012.05.28

2012-05-30 Thread Curtis Koenig
Security Reviews & Threat Modeling Sessions Scheduled for this week Date / Time Item Mon May 28 / 13:00 PDT US Holiday Tue May 29 / 10:00 PDT Profile feature of Mozilla Persona/BrowserID

Re: [Security Reviews] Wee of 21-Apr

2012-05-21 Thread Curtis Koenig
Yes you are correct, I blame the solar eclipse. :) /Curtis On 2012-05-21 20:34 PM, Jonas Sicking wrote: > Should all of these dates say "may" instead of "apr"? > > / Jonas > > On Mon, May 21, 2012 at 5:38 AM, Curtis Koenig <mailto:curt...@mozilla.com>&g

[Security Reviews] Wee of 21-Apr

2012-05-21 Thread Curtis Koenig
Security Reviews Date / Time Item Mon Apr 21 / 13:00 PST Network Monitor

[Security Reviews] Week of 14-May

2012-05-14 Thread Curtis Koenig
Security Reviews Scheduled for this week Date / Time Item Mon May 14 / 13:00 PST No Review Wed May 16 / 13:00 PST AVAILABLE THU May 17 / 10:00 PST AVAILABLE Fri May 18/ 10:00 AM PSTSocial API *Calendar and Meeting details

[Respond by 30-Mar]Click To Play Plug-Ins

2012-03-23 Thread Curtis Koenig
The security team is preparing for a review of Opt-in Activation for Plugins, in early April. Given that there has been lots of public discussion of this item it has been decided to try and get another public review of the feature page and patches prior to the review on dev-security. Review the at