Standup Notes 2019 03 18

Participants (alphabetical): Allie, Conor, Emmanuel, Erik, Heartsucker, Jen, John, Kevin, Kushal, Mike (async), Mickael, Nina (async)

Topics and Call-outs

• Release date changed by one day to allow for additional QA
• QA and release update

Allie

Yesterday: (Friday)

• Spent time on SF SecureDrop test hardware, ended day with a working instance, keys for AWS will be sent to Kev

Today:

• Back in PDX, Qubes laptop arrived. Curious about what docs to use.
• Looking into security issue with Mickael
• https://github.com/freedomofpress/securedrop-client/pull/270 ready for review

Blockers:

• ^^ see Qubes bit

Conor

Yesterday:

• Non-SD backend task review

Today:

• Further progress on securedrop.org repo audit, in support of open sourcing next week
• Non-SD backend task review

Blockers: -None

Emmanuel

Yesterday:

• Support messaging, redmine audit

Today:

• More on ^^

Blockers: None

Erik

Yesterday: (Friday)

• NoScript update: more QA on NoScript RC, should fix the problem if it lands with correct preferences in next Tor release
• Mainly support and non-SD work

Today:

• Draft release messaging for 0.12.1
• Chat with accessbility auditors in a bit
• Support & Xenial messaging follow-up (aiming to post to some source interface URLs for folks who are not in our support portal)

Blockers: None

Heartsucker

Today:

• Keeping an eye on the release
• Working on client: adding data from messages/replies directly to DB

Blockers: None

Jen

Yesterday:

• Helped Allie when needed with SD install
• Used learning time to write a wee script to backport PRs https://github.com/freedomofpress/securedrop/pull/4268 (polling the GitHub notifications API, it currently only acts on commands from my handle)

Client land:

• Reviewed and merged heartsucker’s file counter PR
• Merged a temporary workaround from Allie for the segfault issue, which we discovered last week was an upstream issue in pyqt

Today:

• After AM meetings, Gonna look at this SDK CI job (which runs the SDK tests against the latest journalist API container to detect breakage)

Blockers:

• None

John

Yesterday:

• Looking into PR #4023
• Spending too much time thinking about preventing people sending sensitive stuff to [email protected]

Today:

• Actually testing #4023

Blockers:

• None

Kev

Yesterday: (Friday)

• 0.12.1 clean VM install

Today:

• support issue, more 0.12.1 testing (see matrix)

Blockers: None

Kushal

Today:

• 0.12.1 QA

Tomorrow:

• NUCs

Blockers: None

Mickael

Yesterday:

• Reviewed heartsucker's 4262

Today:

• May poke at threat model docs, time permitting

Blockers: None

Mike (async)

Yesterday: Upgraded discourse to patch security vuln

Today: Nothing! Wooooo

Blockers: None

Nina

Yesterday: Buggy computer lameness hijacked most of my Friday

Today:

• Client VisDe update from last week's UX Meeting's feedback
• Possibly poking at Client Reply things

Blockers:

• Nope! :)