Standup Notes 2020 06 16

Participants (alphabetical): Allie, Conor, Erik, Jen, John, Kevin, Kushal, Ro

Topics and Call-outs

• SecureDrop 1.4.0

  • QA matrix: https://docs.google.com/spreadsheets/d/15qr2XMlBrlCwgaErGzW9HR4UXJsRtwadwkhOPpEJmec/edit#gid=0

  • Not planning RC2 at this time

• SecureDrop Workstation 0.3.1 / Debian packages

Allie

Yesterday:

• Submitted a PR to fix a small bug https://github.com/freedomofpress/securedrop-client/pull/1112
• Work on deletion crasher issue / tests

Today:

• ^^

Blockers or Asks: None

Conor

Yesterday:

• Workstation keyring updates
• Prod debs PR: https://github.com/freedomofpress/securedrop-debian-packages-lfs
• Started RPM process

Today:

• Proceeding with final prod release after testing

Blockers or Asks:

• Testing on SDW, re-review of RPMs

Erik

Yesterday:

• Added 1.3.0->1.4.0 upgrade docs and guide for new OSSEC alert: https://github.com/freedomofpress/securedrop/pull/5316
• Drafted 1.4.0 release messaging
• Fleshed out test plan, promoted black PR for securedrop-workstation to ready for review: https://github.com/freedomofpress/securedrop-workstation/pull/569

Today:

• Follow-up to existing PRs and QA, as required
• Back to old issue/PR curation

Blockers or Asks: None

Jen

Yesterday:

• looked into a 500 happening in the API when disconnected submissions are afoot, filed ticket and put a starting diff up (should just need a regression test). should be a rare case but regardless the API shouldnt 500. small fix for next release (1.5.0).
• provided feedback to will on his PR

Today:

• this morning reviewed workstation release PRs
• re-review any release-related PRs
• after meeting block gonna look at the HTTPS-E ruleset changes pending from Kushal and do the prod signing. Will toss back to you Kushal for final testing/review tomorrow

Blockers or Asks:

• None

John

Yesterday:

• 1.4.0 OSSEC testing
• trying to get qubes installed on my X1

Today:

• got Qubes installed (legacy mode FTW)
• figured out securedrop-debian-packaging changes for pyproject.toml
• gonna get through the remaining black/isort issues
• reviewing https://github.com/freedomofpress/securedrop-workstation/pull/528 on my new Qubes machine

Blockers or Asks:

• None

Kev

Yesterday:

• 1U QA, tracked down to firewall misconfig
• Testinfra fun

Today:

• Cont'd on ^^
• File issue(s) to detect OSSEC misconfiguration similar to the above

Blockers or Asks: None

Kushal

Today:

• Reviewed and merged https://github.com/freedomofpress/securedrop-client/pull/1112
• Pull request https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/7 for The Guardian
• QA steps on fresh update so that I can write a blog post

Tomorrow:

• finish off the strings PR
• Transparency by Design (listening mostly) Blockers or Asks:
• None

Mickael

PTO

Ro

Yesterday:

• DST meetings/regular meetings
• Digisec outreach
• Qubes BIOS troubleshooting w John
• Looked at #5315 (thanks Jen!)

Today:

• Workstation issue 574
• Many meetings: prospective SD/DST clients + regular meetings
• Finish sd core #5265, if time start https://github.com/freedomofpress/securedrop-workstation-docs/issues/46