Standup Notes 2021 05 12

Top priorities

1. Complete first iteration of Safe Deletion for SecureDrop Client

2. Complete deliverables for SecureDrop 1.8.2, test them, and issue a point release

3. Update TemplateVMs to Fedora 33

Topics and Call-outs

1.8.2

RC2 debs are now available

QA matrix: https://docs.google.com/spreadsheets/d/1s8V0MZH6O3isjS_7p9wS8lzuO5YYaiNI2x7eHrNhYJE/edit#gid=373736950

John, Mickael will be doing QA today Erik will open docs PR today

Hiring

SecEng hiring team

Phone screen, technical assignment, followed by 1:1 behavioral session, followed by 1 2-3 person panel, followed by Trevor interview Core hiring team: Allie, Kevin, Conor, (non-SD member)

Security Update

Pip requirements proposal

Allie: We often have requirements.in, and then we have test-, dev- etc. for non-prod requirements. When we build dev-*, we pass in both requirements.in and dev-requirements.in.

We get safety alerts on dev requirements because we pin them to old versions. Proposal: Let’s use the latest packages and only pin if we need to, add comments/issue references as warranted. Consensus to proceed per this proposal for SecureDrop Workstation test/dev requirements.

Allie

Yesterday: Security issue Note: Mickael merged pip-tools PR — we can now use pip-tools > 5.0.0.

Today: ^^ Requirements updates Participating on a panel interview today

Blockers or Asks: None

Conor

Yesterday: More review of Fedora 33 template changes. Found some warnings I want to track down.

Today: SDW logging review first, so aid in debugging F33 template changes Reviewing F33 template changes (From yesterday) open keyring issues for workstation: dom0 & domU Some coordination with tor re: httpse ruleset key rotation

Blockers or Asks: None

Erik

Yesterday:

• Internews hiring prep
• Release comms
• Tails 4.19 testing

Today:

• More hiring fun (Internews interview/scheduling/SecEng prep)
• Release docs for 1.8.2 and maybe some docs cleanup
• Technical work as time permits

Blockers or Asks: None

John

Yesterday: Entropy check removal

Today: ^^ QA

Blockers or Asks: None

Kev

Yesterday: Release

Today: QA

Blockers or Asks: None

Kushal

Today:

Tomorrow:

Blockers or Asks:

Mickael

Yesterday: Reviewed https://github.com/freedomofpress/securedrop-debian-packaging/pull/248 Assisting with process work QA Today: More process assistance More qa Hiring tasks Blockers or Asks: None

Ro

Yesterday: Meetings + followup Support comms Onion name addition PR (WIP)

Today: Redmine cleanup Support tasks Admin ws rebuild docs

Blockers or Asks: