@mozsec

Views and updates from the Mozilla Firefox security team

blog.mozilla.com/security/
Joined September 2011
  • Tweets400
  • Following31
  • Followers5.2K
Mozilla Security retweeted
Julien Vehent@jvehent9 Jun 2016
"XSS vulnerabilities account for 66% of valid submissions" is why we're pushing hard on CSP in @mozsec . src: pages.bugcrowd.com/hubfs/PDF…

Resources | Bugcrowd

Explore Bugcrowd cybersecurity resources, including research reports, guides, ebooks, best practices, customer stories, and security testing insights.

bugcrowd.com
1
19
21
Mozilla Security retweeted
ISSTA Conference@issta_conf9 Jun 2016
Christian Holler’s MSc thesis on random testing JavaScript netted him $53,000 in bug bounties and a job at Mozilla: issta2016.cispa.saarland/int…
1
31
37
Mozilla Security retweeted
Julien Vehent@jvehent3 Jun 2016
We're growing the Firefox Services Security team. Want to help @psiinon and I keep the fox safe? Head over to careers.mozilla.org/position…
18
1
15
Mozilla Security retweeted
Julien Vehent@jvehent11 May 2016
We're running a RFP to audit the security of Firefox Accounts. Got the pentest/crypto skills? Email me at jvehent[at]mozilla.com

Get Firefox for desktop and mobile

Firefox is a free web browser backed by Mozilla, a non-profit dedicated to internet health and privacy.

firefox.com
3
15
6
Mozilla Security retweeted
April King 🌀@CubicleApril4 May 2016
Woo! The @mozsec HTTP Observatory has hit a million scans! mozilla.github.io/http-obser… Now I just need to find some time to finish the site!
2
4
6
Thanks to @CESG_HMG of GCHQ for helping protect Firefox users. Excellent bug reports for mozilla.org/en-US/security/a… & mozilla.org/en-US/security/a…

Memory corruption with malicious NPAPI plugin

mozilla.org
29
24
Mozilla Security retweeted
Mozilla
@mozilla10 Mar 2016
Bending the curve for HTTPS adoption, which has quadrupled since @letsencrypt launched! mzl.la/24TNT91
10
389
294
Mozilla Security retweeted
Bobby Holley
@bhology19 Feb 2016
How architecting Firefox for security stopped the bugs and spared us the worst of a security breach: bholley.net/blog/2016/the-ri…
2
83
109
Mozilla Security retweeted
Christian Holler@mozdeco16 Feb 2016
Extend #aflfuzz mutation routines with Python modules: github.com/choller/afl/blob/…
1
26
38
Mozilla Security retweeted
Christian Holler@mozdeco16 Feb 2016
Fuzzing a specific part of a large project with #aflfuzz? Try the new partial instrumentation feature: github.com/choller/afl/blob/…
31
48
Mozilla Security retweeted
Start Mozilla@StartMozilla22 Jan 2016
Keeping our security code clean and shiny is a big deal. Help us keep our shields up in this good first C++ bug: bugzilla.mozilla.org/show_bu…

1241646 - remove unused token arguments from nsIX509CertDB (and other interfaces?)

RESOLVED (bmanojkumar24) in Core - Security: PSM. Last updated 2016-02-03.

bugzilla.mozilla.org
4
5
Mozilla Security retweeted
Tom Schuster@evilpies28 Dec 2015
Really nice JIT security improvement by @jandemooij: JIT code is now W^X, i.e non-writable unless patching! bugzil.la/1215479

1215479 - Use W^X JIT code on all platforms

RESOLVED (jdemooij) in Core - JavaScript Engine: JIT. Last updated 2024-02-22.

bugzilla.mozilla.org
11
13
Mozilla Security retweeted
Mark Goodwin@mr_goodwin23 Nov 2015
Firefox now supports OCSP Must-Staple: blog.mozilla.org/security/20…

Improving Revocation: OCSP Must-Staple and Short-lived Certificates – Mozilla Security Blog

Last year, we laid out a long-range plan for improving revocation support for Firefox. As of this week, we've completed most of the major elements of that plan. After adding ...

blog.mozilla.org
19
12
Mozilla Security retweeted
Brad Hill@hillbrad12 Nov 2015
Congrats to editors @freddyb @frgx @fmarier @metromoxie! Subresource Integrity is a W3C Candidate Recommendation. w3.org/TR/SRI/
12
13
Mozilla Security retweeted
Adriana Porter Felt
@__apf__3 Nov 2015
Firefox is simplifying their security indicators. Cool work! xitter.cf/TanviHacks/status/6615…
Tanvi@TanviHacks3 Nov 2015
Updated security indicators released today in Firefox 42- blog.mozilla.org/security/20…

Updated Firefox Security Indicators – Mozilla Security Blog

This article has been coauthored by Aislinn Grigas, Senior Interaction Designer, Firefox Desktop Over the past few months, Mozilla has been improving the user experience of our privacy and security...

blog.mozilla.org
1
11
19
Mozilla Security retweeted
Firefox
@firefox3 Nov 2015
We’re taking private browsing and #usercontrol to a new level today. mzl.la/1HoJ6yz

Firefox Now Offers a More Private Browsing Experience | The Mozilla Blog

We’re releasing a powerful new feature in Firefox Private Browsing called Tracking Protection. We created this feature because we believe in giving you m

blog.mozilla.org
4
72
56
Mozilla Security retweeted
Tanvi@TanviHacks3 Nov 2015
Updated security indicators released today in Firefox 42- blog.mozilla.org/security/20…

Updated Firefox Security Indicators – Mozilla Security Blog

This article has been coauthored by Aislinn Grigas, Senior Interaction Designer, Firefox Desktop Over the past few months, Mozilla has been improving the user experience of our privacy and security...

blog.mozilla.org
2
10
32
Load more