Re: Hashing functions in Firefox OS

2014-01-16 Thread Paul Theriault
Er ignore me, at least my second comments about replying to stephanie. I didn't realize I wasn't subscribed. On Jan 17, 2014, at 10:01 AM, Paul Theriault wrote: > Device locking is managed in Gaia system app currently, not in gecko. So I > believe we either need a hashing support of some kind e

Re: Hashing functions in Firefox OS

2014-01-16 Thread Paul Theriault
Device locking is managed in Gaia system app currently, not in gecko. So I believe we either need a hashing support of some kind exposed to content, or we need to an API which control devices locking. Maybe dev-b2g is a better place for that discussion, but can anyone answer Stephanie's origina

Re: Hashing functions in Firefox OS

2014-01-16 Thread Stéphanie Ouillon
Hi, On 01/15/2014 06:40 PM, Garrett Robinson wrote: > On 01/15/2014 08:33 AM, Kurt Roeckx wrote: >> On 2013-12-17 16:02, Stéphanie Ouillon wrote: >> >> I'm confused what passwords have to do with hashes. Do you want >> to store hash(pass)? This is a bad idea, please use something >> that is des

Re: Hashing functions in Firefox OS

2014-01-15 Thread Garrett Robinson
On 01/15/2014 08:33 AM, Kurt Roeckx wrote: > On 2013-12-17 16:02, Stéphanie Ouillon wrote: >> Hi, >> >> I'm in the Firefox OS Security team and I'm starting working on adding >> support for stronger passwords in the Firefox OS lockscreen (bug 877541) >> [1]. >> At the moment, only a 4-digit passwor

Re: Hashing functions in Firefox OS

2014-01-15 Thread Kurt Roeckx
On 2013-12-17 16:02, Stéphanie Ouillon wrote: Hi, I'm in the Firefox OS Security team and I'm starting working on adding support for stronger passwords in the Firefox OS lockscreen (bug 877541) [1]. At the moment, only a 4-digit password can be configured and we want to improve that for FxOS 1.4

Re: Hashing functions in Firefox OS

2014-01-15 Thread Frederik Braun
On 15.01.2014 14:32, Kai Engert wrote: > It's not clear why you need something new. > > I'd assume your device locking code is privileged code. > Can't you use nsICryptoHash? There is no privileged JS in FxOS as there is in Firefox Desktop :) All code must be an open web API. -- dev-tech-crypto

Re: Hashing functions in Firefox OS

2014-01-15 Thread Kai Engert
On Di, 2013-12-17 at 16:02 +0100, Stéphanie Ouillon wrote: > I'm in the Firefox OS Security team and I'm starting working on adding > support for stronger passwords in the Firefox OS lockscreen (bug 877541) > [1]. > At the moment, only a 4-digit password can be configured and we want to > improve

Hashing functions in Firefox OS

2013-12-17 Thread Stéphanie Ouillon
Hi, I'm in the Firefox OS Security team and I'm starting working on adding support for stronger passwords in the Firefox OS lockscreen (bug 877541) [1]. At the moment, only a 4-digit password can be configured and we want to improve that for FxOS 1.4 (March 2014). Some time ago, David Dahl provid