750455 - SecReview: (websms) WebSMS (or Messaging+)

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance: Review Request, task, P2)

Description

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

SecReview tracking bug
Actions regarding the review of the dependent bug should be tracked here.

Comment 2

[Paul Theriault [:pauljt] (no longer reading bugmail)]

I think we need to take a second pass at SMS, or at least review the changes that MMS will  introduce.

Comment 3

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

assigning to Paul for second pass

Comment 4

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

Risk/Priority Ranking Exercise https://wiki.mozilla.org/Security/RiskRatings

Priority: 2 (P4) - Team Quarterly Goal

Operational: 0 - N/A
User: 0 - N/A
Privacy: 3 - Major
Engineering: 2 - Normal
Reputational: 4 - Critical

Priority Score: 24

Comment 5

[Daniel Veditz [:dveditz]]

I get a 56, making it a P2 mozilla initiative, which basecamp is.

Risk/Priority Ranking Exercise https://wiki.mozilla.org/Security/RiskRatings

Priority: 4 (P2) - Mozilla Initiative

Operational: 0 - N/A
User: 3 - Major
Privacy: 3 - Major
Engineering: 3 - Major
Reputational: 5 - Blocker

Priority Score: 56

The impact table is hard to use for reviews of new features. We don't really know what to say about it until after we take a look.

Comment 6

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

I agree, I am trying to not take worst case or best case, but a middle likely case scenario. we can always re-evaluate as we get more info.