Standup Notes 2020 12 16

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

1.7.0 deliverables

• Likely date for 1.7.0: 2021-01-26

• Likely date for 1.8.0: 2021-02-23

• Milestone https://github.com/freedomofpress/securedrop/milestone/66 mostly reflects current consensus

• Regarding Ansible: Timeboxed investigation, 1-2 work days

• Regarding UUIDs: Team leaning against including in 1.7.0, but let's discuss early in 2021

Allie

Yesterday:

• PTO

Today:

• Review as needed
• Debug: Run SDC on Qubes in the background today (also load test) to see if I get network connectivity issues in the client - best guess without digging in yet is that the issue is in the error handling between proxy, sdk, and client

Blockers or Asks:

• None

Conor

Yesterday:

• Investigating RPC policy issue identified by auditors

Today:

• More investigation of above RPC policy issue

Blockers or Asks:

• None

Erik

Yesterday:

• v2/v3 discussion and follow-up
• Pre-holiday backlog grooming
• More investigation of security issue

Today:

• Support backlog review & housekeeping
• PEO follow-up

Blockers or Asks: None; reminder: off until 2021 from tomorrow on

John

Yesterday:

• audit stuff

Today:

• finishing one audit fix
• finalizing a couple of PR reviews

Blockers or Asks:

• None

Kev

Yesterday:

• Support tickets

Today:

• ^^
• Responded to John's review of org names PR
• Getting started on securedrop-admin verify fix

Blockers or Asks: John - can we chat re: input validation across JUI

Kushal

Today:

• Commented on https://github.com/freedomofpress/securedrop/issues/1261 about possibilities of getting this done.

  • See https://github.com/freedomofpress/securedrop/issues/3136 for Ansible pull proposal.

• was stuck with restorating with v2+v3 on vm while debugging #352 client issue. I could not figure from where the new window is coming (and going)

• More updates to https://github.com/freedomofpress/securedrop/wiki/Usage-of-Molecule-and-Ansible-for-development (ready for initial review)

Tomorrow:

Blockers or Asks:

• None but did any has issues with restore for v2+v3? v3 URLS were working but not the v2.

Mickael

Yesterday:

• Updated ossec docs PR https://github.com/freedomofpress/securedrop-docs/pull/106/files

• unattended-upgrades investigation Today:

• reviews as needed

• sshd config based on review feedback https://github.com/freedomofpress/securedrop/pull/5666 , may require having ansible update knownhosts

  • Conor will poke later today, as will Kushal tomorrow

• unattended-upgrades

Blockers or Asks:

Ro

Yesterday:

• Support comms/meetings/Redmine cleanup
• Prospective SD meeting--will be onboarding to Redmine, see Wire for details

Today:

• Focusing on hardware tasks; this afternoon is Qubes SDW provisioning walkthrough with the digital security team
• I noted Kushal's difficulties with v2+v3 onions restore story, and will be following the discussion since the next thing on my list after the workstation provisioning is improving that documentation
• For support-related updates, see Wire (listing a new instance in directory; meeting notes from yesterday)

Blockers or Asks:

• Ask: 500 upon adding directory entry in Wagtail - is there a timeline for resolution? If not, how to handle instance that is looking to launch?