Security/Meetings/Automation/2014-09-30

Agenda

• status updates
• conferences
  • Not a con, but I'm talking to PHP East Midlands about CSP on Thursday.
  • curtis just did DerbyCon (trip report sent to team alias)
  • openpgpjs and add-on storage

Status Updates

freddy

• scanjs + travis-ci
• b2g "vivisection"
• subresource integrity (sri) tests
  • <script src="https://cdn.jquery.com/jquery.js" integrity="hash-of-the-js-file" canonical-src="https://owndomain.com/js/jquery.js" />

mgoodwin

• nothing (well, nothing secautomation)

ulfr

• mig reliability
• [contrib] cipherscan sni support, plus some cert stuff https://github.com/jvehent/cipherscan/pull/24
• [mwos] tls cert retriever arch in progress
  • http://golang.org/pkg/crypto/x509/#Certificate

jeff

• bsidesPDX presentation on MozDef Oct 3rd 10:30am
• 'brand-name-internet-company' is looking to install MozDef for their event management/incident response
• release v1.2 due Oct 13th
• releasing http://demo.mozdef.com:3000 this week for bsides as a public demo instance, rebuild every day, etc.