Standup Notes 2020 06 10

Topics and Call-outs

• SecureDrop 1.4.0

  • QA matrix: https://docs.google.com/spreadsheets/d/15qr2XMlBrlCwgaErGzW9HR4UXJsRtwadwkhOPpEJmec/edit#gid=0

  • Test plan: https://github.com/freedomofpress/securedrop/wiki/1.4.0-Test-plan

  • Public keys have been updated on keyservers & securedrop.org (test plan already asks for confirmation in the Admin Workstation section)

  • Can anyone please double verify https://github.com/freedomofpress/securedrop/pull/5287 after changing the iptables rules if the alerts are being generated? Also, please update the steps with more granular details for this one please.

• SecureDrop Workstation Keyring Update

  • Next step: build and upload 0.3.1rc1 of RPM (Conor/Kev)

  • Aiming for release on Monday

• bump contributor survey

Allie

Yesterday:

• Client architecture meeting
• Uploaded new release signing key to securedrop.org using Wagtail
• Updated Test Plan section on testing new release signing key
• Reviewed https://github.com/freedomofpress/securedrop/pull/5224

Today:

• While QA is going on, pick back up CSS and screen resolution PR
• Fix up WIP RM docs PR

Blockers or Asks:

• Should we start work on https://github.com/freedomofpress/securedrop/issues/3868 -> Allie will start a WIP branch to share with Conor
• It might make sense for QA to review or provide input on https://github.com/freedomofpress/securedrop/pull/5224 -> Ro will take a look

Conor

Yesterday:

• Public key updates w/ Allie, as part of 1.4.0 keyring release prep
• Test plan review

Today:

• Working on Workstation keyring RPM rc1 (deb keyring already live on apt-test)
• Will work with Kev/Allie on the RPM process, into next week, for knowledge transfer
• Take a look at https://github.com/freedomofpress/securedrop/issues/5265 (stretch goal, not critical for 1.4.0)

Blockers or Asks:

• None

Erik

Yesterday:

• Paired w/ Martin on a user research session (Nina was sick)
• Poked w/ Allie at client dev data PR #5224
• Non-SD work

Today:

• Pre-release comms for SecureDrop 1.4.0
• SecureDrop Client/Workstation QA & dev work
• Some backlog grooming as time permits

Blockers or Asks: None

Jen

Yesterday:

• Started looking at the client CSS PR towards EOD upon request

Today:

• Gonna do a bit of learning time today
• Looking at security #32 (just filed)
• Continuing looking at the client CSS PR

Blockers or Asks:

• None

John

Yesterday:

• Trying to get my system able to review https://github.com/freedomofpress/securedrop-workstation/pull/528

Today:

• Reviewing #528 above
• QA

Blockers or Asks:

• None

Kev

Yesterday:

• 1U hardware testing, but ran into issues with Admin Workstation USB

Today:

• Worked through keyring update PR test (#563) failure, looks good to merge
• 0.3.1-rc1 workstation release
• Client call and associated follow-up

Blockers or Asks: None

Kushal

Today:

• securedrop 1.4.0rc1 QA (will update the ticket later at night)

Tomorrow:

• qa + learning time Blockers or Asks:
• Can anyone please update the steps with more granular details for https://github.com/freedomofpress/securedrop/pull/5287 ?

Ro

Yesterday:

• Support comms/clean up Redmine a little
• Some learning re Qubes/Tails
• Contributor survey

Today:

• SD client meeting
• couple small tickets/comms
• Dev environment docs review
• Possible firewall docs improvements
• meetings

Blockers or Asks:

• none; thank you conor for quick attention on core #5265, I will get your approval before proceeding