751006 - [Security Review] B2G WiFi Review

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance, task, P2)

Description

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Enumerate available WiFi networks, get signal strength and name of currently connected network, etc.

Comment 1

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Expanding this review to include all things Wifi related for B2G.

Comment 2

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Background information
--------------------------
IDL outlines API see dom code for wifi access: 
http://mxr.mozilla.org/mozilla-central/source/dom/wifi/


Allows reading wifi state, AND modifying state (associating etc)
Requires permission: http://mxr.mozilla.org/mozilla-central/source/dom/wifi/DOMWifiManager.js#39

Use cases: https://etherpad.mozilla.org/WifiInfoSec

Discussion:
http://groups.google.com/group/mozilla.dev.webapi/browse_thread/thread/ed980c42261c5f4a

(note that it definitely not just read access though, allows associating to networks)

Comment 3

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Review documented here https://wiki.mozilla.org/Security/Reviews/SettingsAPI

Comment 4

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

please don't assign bugs to nobody, they show up in triage :)

Comment 5

[David Bruant]

(In reply to Paul Theriault [:pauljt] from comment #3)
> Review documented here https://wiki.mozilla.org/Security/Reviews/SettingsAPI
Should I be worried about a link regarding the SettingsAPI in the Wifi bug? :-/

Comment 6

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Ignore comment 3, I must have commented in this instead of bug 750992. I'm aware this review still needs documenting, but it's lower priority since its certified only.