Re: Proposed W3C Charter: Web Application Security (WebAppSec) Working Group

2015-01-31 Thread Eric Rescorla
On Fri, Jan 30, 2015 at 3:15 PM, L. David Baron dba...@dbaron.org wrote: On Friday 2015-01-30 11:14 +0100, Anne van Kesteren wrote: On Fri, Jan 30, 2015 at 7:32 AM, L. David Baron dba...@dbaron.org wrote: I'm particularly interested in review of point (3) in what I've written; I feel

Re: Proposed W3C Charter: Web Application Security (WebAppSec) Working Group

2015-01-30 Thread Eric Rescorla
On Fri, Jan 30, 2015 at 2:14 AM, Anne van Kesteren ann...@annevk.nl wrote: Thanks David! On Fri, Jan 30, 2015 at 7:32 AM, L. David Baron dba...@dbaron.org wrote: I'm particularly interested in review of point (3) in what I've written; I feel that the argument I've written so far is weak, I

Re: Proposed W3C Charter: Web Application Security (WebAppSec) Working Group

2015-01-30 Thread Eric Rescorla
This seems satisfactory to me. On Thu, Jan 29, 2015 at 10:32 PM, L. David Baron dba...@dbaron.org wrote: Here are the comments I have so far on this charter, based on the thread. I'd note that this is a relatively large set of demands to make in the charter review stage at the AC, especially

Re: Proposed W3C Charter: Web Application Security (WebAppSec) Working Group

2015-01-30 Thread Eric Rescorla
This seems good to me. On Fri, Jan 30, 2015 at 3:20 PM, L. David Baron dba...@dbaron.org wrote: Here's a revised set of comments, mainly changing: - describes the objection to powerfulfeatures (part of objection (3)) more clearly, but also, I think, scopes the objection a bit more

Re: gecko-dev and Git replication will be broken for a little while

2015-01-29 Thread Eric Rescorla
Thanks. Hopefully all will be back to normal soon. Best, -Ekr On Thu, Jan 29, 2015 at 1:27 PM, Gregory Szorc g...@mozilla.com wrote: On Thu, Jan 29, 2015 at 1:07 PM, Eric Rescorla e...@rtfm.com wrote: On Thu, Jan 29, 2015 at 12:31 PM, Gregory Szorc g...@mozilla.com wrote: The steps within

Re: Proposed W3C Charter: Web Application Security (WebAppSec) Working Group

2015-01-29 Thread Eric Rescorla
On Thu, Jan 29, 2015 at 12:56 PM, L. David Baron dba...@dbaron.org wrote: On Friday 2015-01-16 09:58 +0100, Anne van Kesteren wrote: On Fri, Jan 16, 2015 at 12:53 AM, L. David Baron dba...@dbaron.org wrote: Please reply to this thread if you think there's something else we should say,

Re: gecko-dev and Git replication will be broken for a little while

2015-01-29 Thread Eric Rescorla
On Thu, Jan 29, 2015 at 12:31 PM, Gregory Szorc g...@mozilla.com wrote: The steps within my control to potentially fix this issue have been postponed until at least tomorrow due to the Firefox Beta build today. tl;dr is people don't want to take on additional risk changing repositories. I

Re: Proposed W3C Charter: Web Application Security (WebAppSec) Working Group

2015-01-16 Thread Eric Rescorla
On Fri, Jan 16, 2015 at 9:31 AM, Martin Thomson m...@mozilla.com wrote: On Fri, Jan 16, 2015 at 12:58 AM, Anne van Kesteren ann...@annevk.nl wrote: * Permissions API this has been tried several times before. Given that there's hardly any involvement from UX in standards, it's not clear

Re: Getting rid of already_AddRefed?

2014-12-23 Thread Eric Rescorla
On Tue, Dec 23, 2014 at 6:48 AM, Ehsan Akhgari ehsan.akhg...@gmail.com wrote: On 2014-12-22 6:52 PM, Eric Rescorla wrote: On Mon, Dec 22, 2014 at 3:35 PM, L. David Baron dba...@dbaron.org mailto:dba...@dbaron.org wrote: On Monday 2014-12-22 18:21 -0500, Ehsan Akhgari wrote

Re: Getting rid of already_AddRefed?

2014-12-23 Thread Eric Rescorla
On Tue, Dec 23, 2014 at 8:48 AM, L. David Baron dba...@dbaron.org wrote: On Tuesday 2014-12-23 08:36 -0800, Eric Rescorla wrote: Why not pass the raw pointer to the function? My general theory is that smart pointers, once boxed, should never be unboxed. The major arguments I see

Re: Getting rid of already_AddRefed?

2014-12-23 Thread Eric Rescorla
On Tue, Dec 23, 2014 at 8:53 AM, Ehsan Akhgari ehsan.akhg...@gmail.com wrote: On 2014-12-23 11:36 AM, Eric Rescorla wrote: On Tue, Dec 23, 2014 at 8:32 AM, Ehsan Akhgari ehsan.akhg...@gmail.com mailto:ehsan.akhg...@gmail.com wrote: On 2014-12-23 10:38 AM, Eric Rescorla wrote

Re: Getting rid of already_AddRefed?

2014-12-23 Thread Eric Rescorla
On Tue, Dec 23, 2014 at 10:14 AM, L. David Baron dba...@dbaron.org wrote: On Tuesday 2014-12-23 09:59 -0800, Martin Thomson wrote: On Tue, Dec 23, 2014 at 9:55 AM, L. David Baron dba...@dbaron.org wrote: But that's an implicit constructor that's causing extra refcount traffic, which

Re: Getting rid of already_AddRefed?

2014-12-23 Thread Eric Rescorla
On Tue, Dec 23, 2014 at 1:51 PM, L. David Baron dba...@dbaron.org wrote: On Tuesday 2014-12-23 13:14 -0800, Eric Rescorla wrote: Just to be clear, is your problem the implicit conversion itself or the reference count increment/decrement? The latter -- the problem is that there's

Re: Getting rid of already_AddRefed?

2014-12-23 Thread Eric Rescorla
On Tue, Dec 23, 2014 at 2:07 PM, L. David Baron dba...@dbaron.org wrote: On Tuesday 2014-12-23 14:03 -0800, Eric Rescorla wrote: This may be a much longer argument, but I'm not convinced that sacrificing what would otherwise be good programming practice (never unboxing your pointers

Re: Getting rid of already_AddRefed?

2014-12-22 Thread Eric Rescorla
On Mon, Dec 22, 2014 at 1:12 PM, Ehsan Akhgari ehsan.akhg...@gmail.com wrote: On 2014-12-22 4:10 PM, Jeff Muizelaar wrote: We were talking about this problem and it was a bunch of work to figure out the conclusion so I decided to write a summary: Replacing already_AddRefed with nsRefPtr

Re: Getting rid of already_AddRefed?

2014-12-22 Thread Eric Rescorla
On Mon, Dec 22, 2014 at 3:35 PM, L. David Baron dba...@dbaron.org wrote: On Monday 2014-12-22 18:21 -0500, Ehsan Akhgari wrote: On 2014-12-22 6:07 PM, L. David Baron wrote: On Monday 2014-12-22 17:54 -0500, Ehsan Akhgari wrote: On 2014-12-22 4:56 PM, L. David Baron wrote: I think

Re: Proposal: Change the coding style guide to allow an 'o' prefix to indicate out-params

2014-12-04 Thread Eric Rescorla
On Thu, Dec 4, 2014 at 10:35 AM, Seth Fowler s...@mozilla.com wrote: I’d like to change the coding style guide to let us make out-params more obvious by using an ‘o’ prefix for their name instead of an ‘a’. For example, nsresult Modify(int aCount, size_t aSize, char* oResult); This will

Re: Proposal: Change the coding style guide to allow an 'o' prefix to indicate out-params

2014-12-04 Thread Eric Rescorla
On Thu, Dec 4, 2014 at 10:51 AM, Nicholas Nethercote n.netherc...@gmail.com wrote: On Fri, Dec 5, 2014 at 5:41 AM, Eric Rescorla e...@rtfm.com wrote: I’d like to change the coding style guide to let us make out-params more obvious by using an ‘o’ prefix for their name instead

Re: Git - Hg workflows?

2014-10-31 Thread Eric Rescorla
Let me try to answer at a high level first. I use git for all of my workflows and when I collaborate with other people on my team, we use git and github. See, for instance: https://github.com/unicorn-wg/gecko-dev/tree/multistream_rebase So, I primarily need to engage with hg for the following

Re: Screen Capture

2014-10-25 Thread Eric Rescorla
On Fri, Oct 24, 2014 at 10:56 PM, Jonas Sicking jo...@sicking.cc wrote: On Fri, Oct 24, 2014 at 9:25 PM, Eric Rescorla e...@rtfm.com wrote: On Fri, Oct 24, 2014 at 3:56 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Sat, Oct 25, 2014 at 6:17 AM, Ehsan Akhgari ehsan.akhg

Re: Screen Capture

2014-10-25 Thread Eric Rescorla
On Sat, Oct 25, 2014 at 3:24 PM, Jonas Sicking jo...@sicking.cc wrote: On Sat, Oct 25, 2014 at 7:51 AM, Eric Rescorla e...@rtfm.com wrote: Unfortunately, for the reasons I mentioned in the post I linked to above, it's hard for the user to give informed consent here, as they don't

Re: Screen Capture

2014-10-24 Thread Eric Rescorla
Here is my writeup of the security issues with this from a while ago: http://lists.w3.org/Archives/Public/public-webrtc/2013Mar/0024.html As MT says, we already are shipping screen sharing in FF 33. It's currently whitelisted, but otherwise it's fairly complete. -Ekr On Fri, Oct 24, 2014 at

Re: Screen Capture

2014-10-24 Thread Eric Rescorla
24, 2014, at 11:44 , Eric Rescorla e...@rtfm.com wrote: Here is my writeup of the security issues with this from a while ago: http://lists.w3.org/Archives/Public/public-webrtc/2013Mar/0024.html As MT says, we already are shipping screen sharing in FF 33. It's currently whitelisted

Re: Screen Capture

2014-10-24 Thread Eric Rescorla
On Fri, Oct 24, 2014 at 3:56 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Sat, Oct 25, 2014 at 6:17 AM, Ehsan Akhgari ehsan.akhg...@gmail.com wrote: Can we keep track of where the stream comes from, and make sure to taint the images that can come out of them similar to the way that

Re: gtests that start XPCOM

2014-10-22 Thread Eric Rescorla
On Wed, Oct 22, 2014 at 4:05 PM, Ted Mielczarek t...@mielczarek.org wrote: On 10/22/2014 9:29 AM, Benjamin Smedberg wrote: Is there a mechanism for running single gtests that start XPCOM? Not that I know of currently. The gtest runner explicitly starts XPCOM before running tests[1]. With

Re: c++ unit test in content process

2014-10-03 Thread Eric Rescorla
Sadly, the WebRTC gtest-based ones (e.g., media/webrtc/signaling/test) do. On Fri, Oct 3, 2014 at 6:04 AM, Kyle Huey m...@kylehuey.com wrote: On Fri, Oct 3, 2014 at 5:44 AM, Benjamin Smedberg benja...@smedbergs.us wrote: On 10/3/2014 4:59 AM, Patrick Wang wrote: Hi, I am trying

Re: Using c++11 right angle bracket in template code?

2014-10-01 Thread Eric Rescorla
On Wed, Oct 1, 2014 at 3:45 PM, Mike Hommey m...@glandium.org wrote: On Wed, Oct 01, 2014 at 06:34:19PM -0400, Ehsan Akhgari wrote: On 2014-10-01, 6:26 PM, Mike Hommey wrote: On Wed, Oct 01, 2014 at 11:00:28AM -0400, Ehsan Akhgari wrote: On 2014-10-01, 9:01 AM, Joshua Cranmer  wrote: On

Re: Using c++11 right angle bracket in template code?

2014-10-01 Thread Eric Rescorla
On Wed, Oct 1, 2014 at 4:16 PM, Mike Hommey m...@glandium.org wrote: On Wed, Oct 01, 2014 at 04:02:46PM -0700, Eric Rescorla wrote: On Wed, Oct 1, 2014 at 3:45 PM, Mike Hommey m...@glandium.org wrote: On Wed, Oct 01, 2014 at 06:34:19PM -0400, Ehsan Akhgari wrote: On 2014-10-01, 6:26

Re: Using c++11 right angle bracket in template code?

2014-10-01 Thread Eric Rescorla
On Wed, Oct 1, 2014 at 4:42 PM, L. David Baron dba...@dbaron.org wrote: On Wednesday 2014-10-01 16:24 -0700, Eric Rescorla wrote: Obviously, if you have some argument that auto is bad programming practice or a hazard and should thus be forbidden, that's something you could make and see

Re: Deprecate geolocation and getUserMedia() for unauthenticated origins

2014-09-29 Thread Eric Rescorla
On Mon, Sep 29, 2014 at 3:44 AM, Anne van Kesteren ann...@annevk.nl wrote: On Mon, Sep 29, 2014 at 12:19 PM, Dale Harvey d...@arandomurl.com wrote: There's a host of problems when you're using file URLs. pun intended? :) Heh. (Note that file URLs apparently count as authenticated

Re: Deprecate geolocation and getUserMedia() for unauthenticated origins

2014-09-28 Thread Eric Rescorla
On Fri, Sep 26, 2014 at 12:58 PM, Anne van Kesteren ann...@annevk.nl wrote: Exposing geolocation on unauthenticated origins was a mistake. Copying that for getUserMedia() is too. I suggest that to protect our users we make some noise about deprecating this practice. And that in that message

Re: http-schemed URLs and HTTP/2 over unauthenticated TLS (was: Re: WebCrypto for http:// origins)

2014-09-15 Thread Eric Rescorla
On Mon, Sep 15, 2014 at 9:08 AM, Anne van Kesteren ann...@annevk.nl wrote: On Mon, Sep 15, 2014 at 5:59 PM, Richard Barnes rbar...@mozilla.com wrote: On Sep 15, 2014, at 5:11 AM, Henri Sivonen hsivo...@hsivonen.fi wrote: I think the primary way for making the experience better for users

Re: Per-origin versus per-domain restrictions (Re: Restricting gUM to authenticated origins only)

2014-09-13 Thread Eric Rescorla
On Sat, Sep 13, 2014 at 12:38 AM, Anne van Kesteren ann...@annevk.nl wrote: On Sat, Sep 13, 2014 at 12:07 AM, Martin Thomson m...@mozilla.com wrote An iframe embed is different, but in that context, the framed site retains complete control over its content and is arguably competent to

Re: Restricting gUM to authenticated origins only

2014-09-10 Thread Eric Rescorla
On Wed, Sep 10, 2014 at 2:09 AM, Henri Sivonen hsivo...@hsivonen.fi wrote: On Tue, Sep 9, 2014 at 8:13 PM, Eric Rescorla e...@rtfm.com wrote: Sure, I think there are some reasonable cases. Say that a site asks to take your picture for the purpose of displaying an avatar. So you give

Re: Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Eric Rescorla
On Fri, Sep 5, 2014 at 3:34 AM, Henri Sivonen hsivo...@hsivonen.fi wrote: On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen hsivo...@hsivonen.fi wrote: Is current gUM restricted to authenticated origins? If it

Re: Intent to implement: Disabling auto-play videos on mobile networks/devices?

2014-08-25 Thread Eric Rescorla
On Mon, Aug 25, 2014 at 11:51 AM, Daniel Veditz dved...@mozilla.com wrote: On 8/24/2014 6:21 PM, Eric Rescorla wrote: FWIW, to the best of my knowledge WebRTC calls do not require a click. But you have to click on the door-hanger to share camera/mic (or be on a site you have already trusted

Re: PSA: ./mach build subdirectory doesn't work reliably any longer

2014-08-25 Thread Eric Rescorla
On Mon, Aug 25, 2014 at 8:37 AM, Gregory Szorc g...@mozilla.com wrote: On 8/22/14 9:08 AM, Ehsan Akhgari wrote: Unfortunately I don't really understand the reasons behind this, but if you use this command, please know that it doesn't work properly any more, even if it seems to work in some

Re: PSA: ./mach build subdirectory doesn't work reliably any longer

2014-08-25 Thread Eric Rescorla
On Mon, Aug 25, 2014 at 3:18 PM, Mike Hommey m...@glandium.org wrote: On Mon, Aug 25, 2014 at 12:24:53PM -0700, Eric Rescorla wrote: On Mon, Aug 25, 2014 at 8:37 AM, Gregory Szorc g...@mozilla.com wrote: On 8/22/14 9:08 AM, Ehsan Akhgari wrote: Unfortunately I don't really

Re: Intent to implement: Disabling auto-play videos on mobile networks/devices?

2014-08-24 Thread Eric Rescorla
On Fri, Aug 22, 2014 at 9:12 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Sat, Aug 23, 2014 at 5:59 AM, Jared Hirsch 6...@mozilla.com wrote: FWIW, Safari on iOS doesn't allow autoplay or preload, and also only initiates play/load on a user-triggered event (so, pages can't use JS to

Re: Intent to implement: webserial api

2014-07-14 Thread Eric Rescorla
On Mon, Jul 14, 2014 at 4:22 AM, tzi...@gmail.com wrote: On Monday, July 14, 2014 2:00:47 PM UTC+3, Gervase Markham wrote: On 13/07/14 18:35, Vasilis wrote: Jonas, I would be really interested in your thoughts. Try as we might (in the WebSerial API docs, at least), noone could

Re: Intent to implement: webserial api

2014-07-13 Thread Eric Rescorla
What are you assuming about access to actual USB devices? -Ekr On Sun, Jul 13, 2014 at 11:16 AM, Andrew McCreight amccrei...@mozilla.com wrote: - Original Message - Jonas, I would be really interested in your thoughts. Try as we might (in the WebSerial API docs, at least), noone

Re: Google announces Chrome builds for Win64

2014-06-05 Thread Eric Rescorla
On Thu, Jun 5, 2014 at 8:34 AM, J. Ryan Stinnett jry...@gmail.com wrote: On Thu, Jun 5, 2014 at 10:03 AM, Robert Kaiser ka...@kairo.at wrote: It's also security boost for 64 bit users. Could someone please explain why you and Google claim 64bit to be more secure? This is a new argument

<    1   2   3