Hi r/cybersecurity. We’re the Firefox security team. Join us in 30 minutes for a live AMA: Tom: u/tomrittervg - Principal Security Engineer - 10 years at Mozilla Freddy: u/mozfreddyb - Engineering Manager, Firefox Application Security - 15 years at Mozilla Christian: u/mozdeco - Principal Software Engineer - 15+ years at Mozilla Daniel: u/dveditz - Senior Staff Security Engineer - 22 years at Mozilla (contributing since Netscape, ‘98) Proof Photos! We work on everything Firefox, encompassing: Anti-Fingerprinting: Making Firefox users less unique to browser fingerprinters and combatting this tracking vector Security hardening: Making Firefox more resilient when under attack, e.g., by restricting capabilities in high-privilege contexts Product Security: Threat modeling, Security Reviews, Bug Bounty, Security Advisories, CVEs etc Fuzzing & LLM-based vulnerability identification: Design, implement and run fuzzers/test agents against select functions, API as well as the whole browser at cloud scale. We also co-maintain the required build configurations (eg AddressSanitizer) Web Security: We specify & develop new standards for the web platform with features like HTTPS-First, CSP, Sanitizer API etc. We collaborate across the industry in standards bodies like W3C, IETF and WHATWG We have involvement in the broader Security & Privacy Protections of Firefox like Enhanced Tracking Protection, Cryptography, and Sandboxing. We also inspect & shepherd all security bugs from being filed to being fixed in an update. We’ll be here at 12pm EDT for an hour or so answering questions about these areas, securing an open-source browser, and everything in between. Ask us anything! *Edit: That's all the time we have for today. Thank you for all of the thoughtful questions and engaging with our team. Some of us will be around for a few extra minutes responding to as many questions as we can. Sorry if we are unable to get to your question today. See you next time!   submitted by   /u/firefox [link]   [comments]