Standup Notes 2020 07 15

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

Releases

SecureDrop 1.5.0

• Proposed string change to onion services warning https://github.com/freedomofpress/securedrop/pull/5375/files

  • Erik to follow-up on lower case standardization

• need to add some PRs to changelog/milestone (several external contributions, plus wordlist redaction). shouldn't need rc2, just documenting the release content.

• Pushed the string changes to the weblate, announced in forum, commneted to the l10nlab.

• Only one week between string freeze & release for 1.5.0. For 1.6, let's make sure to provide translators with two weeks of translation time.

• QA matrix: https://docs.google.com/spreadsheets/d/1Y8Kiy0NzWxKsoKy9KmmtfQNpCWZxZsbDymP6yJg7FJs/edit#gid=373736950

SecureDrop Client

• Allie will drive 0.2.1 release mechanics, Mickael to support

Other Updates

• Critical glitch reported by one pilot user since kernel update, sd-app windows are filled with graphical noise instead of their expected contents

  • Next steps: Kev will engage w/ user, ask for logs, verify paxctl

  • /proc/gid has to match the user that is running, see

  $ grep -n GID config-securedrop-workstation-4.14

  7774:CONFIG_GRKERNSEC_PROC_GID=1000

  matches the GID of the running user (obtained via id)

Allie

Yesterday:

• Opened PR https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/51
• Reviewed https://github.com/freedomofpress/securedrop/pull/5374 and https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/50
• Reviewed https://github.com/freedomofpress/securedrop/pull/5373

Today:

• Taking a look at https://app.uxpin.com/dashboard/project/2354448 to help with the font notification
• Available to respond to client QA test findings
• Work on https://github.com/freedomofpress/securedrop-client/issues/1109

Blockers or Asks:

• None

Conor

Yesterday:

• Minor PR review in coordination with Erik
• Started investigation of apt-test not deleting packages as expected: https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/51#issuecomment-658463601

Today:

• Package clean up on apt-test. Will timebox, defaulting to manual cleanup, given that we have two different workflows for apt-test vs apt prod.

Blockers or Asks:

• Updating weblate default email address sysadmin@ -> securedrop@freedom.press today. Keturah will ask someone to test, Kushal/Kev can they ping you?

Erik

Yesterday:

• More August SD fundraising event prep w/ Parker & Louise
• Docs changes related to v2 deprecation, other sprint work as time allows
• Final bits of client QA in preparation for release
• Research planning w/ Nina

Today:

• Weblate comment review
• Knowledge share re: release comms w/ Ro
• Any final bits of QA needed for next SecureDrop Client release
• Backlog curation as time allows

Blockers or Asks: None

John

Yesterday:

• release work

Today:

• release work, then back to some lingering PRs

Blockers or Asks:

• None

Kev

Yesterday:

• Tested onion service authentication dialog functionality in Tails 4.8, it's due to the "Onion Grater" firewall

Today:

• Reviewed and approved v2 deprecation docs update
• Writing up bug report for Tails team re: the issue above
• QA NUC

Blockers or Asks: None

Kushal

Today:

• Updated weblate with all string changes. Updated forum, notified localization labs.
• Started digging into focal update. Commented at https://github.com/freedomofpress/securedrop/issues/4768#issuecomment-658855164
  • mod_wsgi is causing trouble in Python3.8/Focal

Tomorrow:

• QA
• client resize issue digging Blockers or Asks:
• None

Mickael

Yesterday:

• default branch changes (prod LFS and docs are the only ones remaining)
• Client pr to clean up references: https://github.com/freedomofpress/securedrop-client/pull/1126
• packaging repo changes for LFS branch https://github.com/freedomofpress/securedrop-debian-packaging/pull/177
• deputy rm tasks

Today:

• release tasks (1.5.0 and client)
• coordination w/ infra for changing default branch

Blockers or Asks:

• debian packaging PR to merge https://github.com/freedomofpress/securedrop-debian-packaging/pull/177 (otherwise nightlies will fail)

  -> Conor to review

Ro

Yesterday:

• Meetings (Standup, infosec council, 1:1s)
• Sprint tasks (thanks John!) + a bit of fussing with Qubes staging env

Today:

• Audrey mtg
• Looked briefly at https://github.com/freedomofpress/securedrop/issues/5364
• Support comms
• Release comms drafts/mtg with Erik
• 0.5 pto

Blockers or Asks:

• no blockers
• interested in looking at testinfra on Qubes staging if no one else is