Mozilla WebSec

Mozilla's web security team

[Mozilla WebSec @mozwebsec]

Our Web bug bounty program is now migrating to @Hacker0x01 ! This will provide a more streamlined process for our security researchers to report vulnerabilities. Visit our H1 pages for more info: https://t.co/dEonjHhEI4 and https://t.co/8Jf9JzVBPO. Happy hacking! #bugbounty

[@mikko @mikko]

Tomorrow, I'll be speaking at the @Mozilla HQ in Mountain View, in their Monthly Speaker Series. Wednesday the 7th of March, 10am California time. The talk will be live streamed in Youtube. https://t.co/KFDn4hR83V

[April King 🌀 @CubicleApril]

I expanded on Max Chehab's CSS keylogger attack and put up a live demonstration where you can see just how to easy it is to inject only CSS and create a keylogger in combination with an extremely common JavaScript framework (anti-)pattern:

https://t.co/V7G686ZnpM

[Mozilla WebSec @mozwebsec]

@SymbianSyMoh @bad_packets @deathy @xbs @chrskly @opera @googlechrome @firefox @mozilla thanks for the heads up!

[Mozilla @mozilla]

Add your name to the open letter from @MitchellBaker to tell the Justice Srikrishna Committee to protect the data and privacy of all Indians: https://t.co/UsQOLgtuCt #aadhaar

[Mozilla WebSec @mozwebsec]

Thanks to everyone who contributes to our bug bounty! https://t.co/sXFli83SV4

[Mozilla WebSec @mozwebsec]

https://t.co/2NpcY9EJjr <--Big thanks to @securityshell for helping us with a bug in reviewboard!

[Mozilla WebSec @mozwebsec]

https://t.co/NNeLu1rjf8 <--nice work by Wladimir Palant of @AdblockPlus on a vulnerability in screenshots.

[Mozilla WebSec @mozwebsec]

https://t.co/tjiWhn6RDF <--nice work by @alxbrsn probing a bug tracking system!

[April King 🌀 @CubicleApril]

My recent @USENIXSecurity talk with @__apf__ about measuring HTTPS Adoption on the Web is now available: https://t.co/Ayr899YxML

[April King 🌀 @CubicleApril]

Fantastic news for the web! Technologies such as HTTPS, HSTS, CSP, and SRI are being adopted at an impressive rate: https://t.co/2V2pYkNgzn

[Mozilla WebSec @mozwebsec]

@0thm4n_Whitehat @mozilla @firefox Hard to tell.. submit a bounty report? https://t.co/J3yYipDll0

[Mozilla WebSec @mozwebsec]

https://t.co/qOuOypouu8 <--Happy to announce a relaunch of our web bug bounty program!

[Mozilla WebSec @mozwebsec]

Indeed! Bug Bounty programs are a great way to earn $, get started, or hone your skills! https://t.co/oYHWW3rpKE https://t.co/uIrdMPz5Ir

[Justin Kennedy @jstnkndy]

Great week of bounties! I don't know why everyone doesn't do them. /cc @Bugcrowd @Hacker0x01

[Mozilla WebSec @mozwebsec]

Check out @aprilmpls from @mozilla talking shop about web security: https://t.co/tlMdcwHHql

[Mozilla WebSec @mozwebsec]

https://t.co/ypRbPTRLlM <--wanna work on the other side of the web bug bounty program? Come work @mozilla !

[Mozilla WebSec @mozwebsec]

https://t.co/C9byH4Es61 <--end of an era for @MozillaPersona #bugBounty

[Mozilla WebSec @mozwebsec]

@revskills Noted, thanks!

[Mozilla WebSec @mozwebsec]

https://t.co/94lHlhkunu <-- Should be in the hall of fame but we haven't found you yet? Let us know! --> https://t.co/JVFYYGR3P0

[Mozilla WebSec @mozwebsec]

https://t.co/MnaOEtqAmP <--nice job navigating the hazards of CORS and bug bounties from Saurabh Pundir and @aprilmpls