mozilla :: #security

8 Aug 2017
02:41huzaifasabillings: no drafts yet?
04:02pauljtah damn it
04:02pauljthttps://groups.google.com/forum/#!topic/mozilla.dev.security/-nbJKh5JkyI
04:02pauljtY U do this google groups...
04:07pauljthmm
05:05glob|awaypauljt: is there a list for just the newsletters?
05:06pauljtglob|away: nope. its quarterly. but I always post it to https://wiki.mozilla.org/SecurityEngineering/Newsletter
05:06pauljtso you could watch that page for edits
05:07pauljti considered spamming it dev-platform as well, but it seems excessive ?
05:08glob|awaypauljt: i don't think once per quarter would be excessive, and i totally think it would be of interest to dev-platform :)
05:08glob|awaypauljt: if you didn
05:08glob|awayerr
05:09glob|awaypauljt: if you didn't have problems with formatting i wouldn't have known about the newsletter at all
05:09pauljtyeh fair enough
05:09pauljti guess there aren't that many people sub'd to dev-security
05:09pauljtwill do
06:48Caspy7The following page is loading on Release and Beta but not Nightly. It gives a security error https://client00.chat.mibbit.com/?server=irc.mozilla.org%3A%2B6697&channel=%23firefox
07:02ajaCaspy: 3DES disabled in Nightly now?
07:02ajaCaspy7: 3DES disabled in Nightly now?
10:29kpcyrdpauljt: any chance the file system restrictions mentioned in the mail are based on https://github.com/servo/gaol ?
10:32pauljtkpcyrd: i dont think so - but I've not looked at gaol yet. the sandbox in Firefox is the Chromium sandbox under the hood (or parts of it, since we _used_ to share an IPC layer)
10:32freddybnope
10:33pauljtkpcyrd: so for windows that means https://wiki.mozilla.org/Security/Sandbox#Content
10:33pauljt( we are at "level 3" now )
10:34pauljtOSX is https://wiki.mozilla.org/Security/Sandbox#Content_Levels
10:35pauljtI assume gaol is seccomp, so that would be the same as for linux
10:35pauljthttps://wiki.mozilla.org/Security/Sandbox#Content_Levels_2
10:35pauljtas for Firefox for linux i mean
10:36pauljtyeh it is
10:37pauljthttps://github.com/servo/gaol/blob/master/platform/linux/seccomp.rs
10:37pauljtthe equiv for Firefox is
10:38pauljthttp://searchfox.org/mozilla-central/source/security/sandbox/linux/SandboxFilter.cpp
13:10bhavishya_Any updates on MWoS 17 ?
18:52ryzokukenany news regarding mwos?
21:37Caspy7This is from February, so presumably it is known https://www.youtube.com/watch?v=qGuZjOoArRw
21:37Caspy7"AnC or ASLR^Cache demonstration in Firefox"
9 Aug 2017
No messages
   
Last message: 13 days and 8 hours ago