richard pushed to branch mullvad-browser-115.10.0esr-13.5-1 at The Tor Project / Applications / Mullvad Browser Commits: 1d3f7ac2 by Richard Pospesel at 2024-04-15T17:13:12+00:00 fixup! MB 188: Customize Gitlab Issue and Merge templates emergency security issue for mullvad browser - - - - - 1 changed file: - .gitlab/issue_templates/Emergency Security Issue.md Changes: ===================================== .gitlab/issue_templates/Emergency Security Issue.md ===================================== @@ -18,9 +18,7 @@ ### Type of Issue: What are we dealing with? - [ ] Security (sandbox escape, remote code execution, etc) -- [ ] Proxy Bypass (traffic contents becoming MITM'able) -- [ ] De-Anonymization (otherwise identifying which website a user is visiting) -- [ ] Cross-Site Linkability (correlating sessions across circuits and websites) +- [ ] Cross-Site Linkability (correlating sessions across websites) - [ ] Disk Leak (persisting session information to disk) - [ ] Other (please explain) @@ -36,16 +34,11 @@ - [ ] **richard** : signing, release - [ ] **thorin** : fingerprinting - [ ] Other Engineering Teams - - [ ] Networking (**ahf**, **dgoulet**) - - [ ] Anti-Censorship (**meskio**, **cohosh**) - [ ] UX (**donuts**) - [ ] TPA (**anarcat**, **lavamind**) - [ ] External Tor Partners - - [ ] Mozilla - - [ ] Mullvad - - [ ] Brave - - [ ] Guardian Project (Orbot, Onion Browser) - - [ ] Tails + - [ ] Mozilla (**tjr**) + - [ ] Mullvad (**ruihildt**) - [ ] Other (please list) ### Urgency: When do we need to act? @@ -72,6 +65,7 @@ Sometimes fixes have side-effects: users lose their data, roadmaps need to be ad - [ ] Start an initial email thread with the following people: - [ ] **bella** + - [ ] **ruihildt**, **support@mullvadvpn.net** - [ ] Relevant Applications Developers - [ ] **(Optional)** **micah** - if there are considerations or asks outside the Applications Team @@ -84,6 +78,7 @@ Sometimes fixes have side-effects: users lose their data, roadmaps need to be ad /cc @ma1 /cc @micah /cc @richard +/cc @ruihildt /confidential View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/1d3f... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/1d3f... You're receiving this email because of your account on gitlab.torproject.org.