Standup Notes 2020 12 10

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Nina, Ro

Topics and Call-outs

SecureDrop Client 0.4.0

• Remaining issue https://github.com/freedomofpress/securedrop-client/issues/1198 can be resolved at a later point, no immediate UX implications

Proposed follow-up work re: user sync https://github.com/freedomofpress/securedrop-client/issues/1143#issuecomment-742043843

Follow-up notes re: synchronization of DB state https://github.com/freedomofpress/securedrop-client/issues/1189#issuecomment-742204787

Kev will do one last round of QA, if no new issues, we should be good to release. Kev + Conor to coordinate on release.

Backlog grooming sessions

• i18n grooming, Erik will prepare set of issues

SecureDrop E2E research presentation at Engineering Meeting

Allie

Yesterday:

• Spent a bunch of time reasoning about order of operations to implement User Sync while thinking about database referential integrity and deleted users. Documented here: https://github.com/freedomofpress/securedrop-client/issues/1143#issuecomment-742043843
• Repro'd a couple issues Erik brought up during QA and made a bug fix (Mickael reviewed and merged): https://github.com/freedomofpress/securedrop-client/issues/1189#issuecomment-742204787
• Met with Nina and discussed client scalability: https://github.com/freedomofpress/securedrop-ux/issues/110#issuecomment-742168402

Today:

• Review Erik's SDK PR
• Around for QA
• Docs

Blockers or Asks:

• None

Conor

Yesterday:

• More HTTPSE re-review! Thanks Mickael & Ro.

Today:

• HTTPSE ruleset from PR https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/19/files is merged, but old data still cached. Maeve is investigating
• 0.4.0 release: Available for signing as required, given PT timezone

Blockers or Asks:

• None

Erik

Yesterday:

• Budget work & other associated fun
• QA

Today:

• Final QA / release comms as needed
• Back to SDK / other technical work as time allows

Blockers or Asks: None

John

Yesterday:

• wordlists
• meeting
• reviewed OSSEC docs PR

Today:

• wordlists
• an entire afternoon of meetings

Blockers or Asks:

• nothing new

Kev

Yesterday:

Today:

• Support call
• Re-review of OSSEC permissions
• QA / 0.4.0

Blockers or Asks: Coffee

Kushal

Today:

Tomorrow:

Blockers or Asks:

Mickael

Yesterday:

• Reviewed/merged https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/19/files
• Review/merge https://github.com/freedomofpress/securedrop-client/pull/1199
• Started review of cryptoutils: https://github.com/freedomofpress/securedrop/pull/5600/ https://github.com/freedomofpress/securedrop/issues/5660 Today:
• Get https://github.com/freedomofpress/securedrop/pull/5666 ready for review
• Help w/ client release if needed
• more review of cryptoutils

Blockers or Asks:

• none

Nina

Yesterday:

Today:

Blockers or Asks:

Ro

Today:

• support comms, scheduled a prospective SD client call for next week
• check out fw screenshots from an existing instance
• SecureDrop meetings
• docs stuff in between those 2 things
• work machine template/vm consolidation? :( (20% disk space left)

Blockers or Asks:

• quick ask/confirmation: Redmine password reset policy for users