Re: [JS-internals] Pwn2Own 2014

2014-03-11 Thread Daniel Veditz
On 3/11/2014 3:19 PM, Chris Peterson wrote: > > On 3/11/14, 2:27 PM, Jason Orendorff wrote: >> On 3/11/14, 3:49 AM, Jan de Mooij wrote: >>> I'd be happy to help. European time zone, weekends are harder but I can >>> check my mail every now and then. >> I'll help out too. > > Thanks, Jason. > > *

Re: [JS-internals] Pwn2Own 2014

2014-03-11 Thread Chris Peterson
On 3/11/14, 2:27 PM, Jason Orendorff wrote: On 3/11/14, 3:49 AM, Jan de Mooij wrote: I'd be happy to help. European time zone, weekends are harder but I can check my mail every now and then. I'll help out too. Thanks, Jason. * Daniel: who are Mozilla's security people that will receive Pwn2

Re: [JS-internals] Pwn2Own 2014

2014-03-11 Thread Jason Orendorff
On 3/11/14, 3:49 AM, Jan de Mooij wrote: > I'd be happy to help. European time zone, weekends are harder but I can > check my mail every now and then. I'll help out too. -j ___ dev-tech-js-engine-internals mailing list dev-tech-js-engine-internals@lists

Re: [JS-internals] Pwn2Own 2014

2014-03-11 Thread Jan de Mooij
I'd be happy to help. European time zone, weekends are harder but I can check my mail every now and then. Jan On Mon, Mar 10, 2014 at 10:53 PM, Chris Peterson wrote: > Pwn2Own 2014 is running this week (March 12-14 in Vancouver). The bounty > for a Firefox exploit on Windows 8.1 x64 is $50,000.

Re: [JS-internals] Pwn2Own 2014

2014-03-10 Thread Daniel Veditz
On 3/10/2014 2:53 PM, Chris Peterson wrote: I believe the exploits will be published on Monday March 17, but details are sometimes leaked over the weekend. That was true in the past, but last year we received exploit details at the conference itself. The rules for this year seem to indicate th

[JS-internals] Pwn2Own 2014

2014-03-10 Thread Chris Peterson
Pwn2Own 2014 is running this week (March 12–14 in Vancouver). The bounty for a Firefox exploit on Windows 8.1 x64 is $50,000. Mozilla's security team recommended that the JS team have some engineers "on call", ready to patch any SpiderMonkey exploits. Any volunteers? :) I believe the exploits