Presentation: "Jetpack: Improving Security in Firefox Add-Ons"

Time: Thursday 16:50 - 17:50

Location: Concordia Room

Abstract: "Jetpack" is the new platform for writing add-ons in Firefox, Thunderbird, and other Mozilla applications. One of its main goals is to make add-ons easier to write safely. A mixture of component sandboxing and community-based code review is used to implement a flexible least-privilege security model, improving browser resistance to bugs, vulnerabilities, and malice inside add-on code.

Brian Warner, Engineer with Mozilla Labs

 Brian  Warner
Brian Warner is an engineer with Mozilla Labs, where his experience in capability-based security and network protocols are used to improve Jetpack and other Labs projects. He is the main developer of the Tahoe-LAFS secure distributed filesystem, and founded the Buildbot continuous-integration system.