Standup Notes 2021 05 19

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Nina, Ro

Top priorities

1. Complete first iteration of Safe Deletion for SecureDrop Client

2. Complete deliverables for SecureDrop 1.8.2, test them, and issue a point release

3. Update TemplateVMs to Fedora 33

Topics and Call-outs

• keyring rotation:

  • testing behavior of release files

  • qubes-builder logic (needs ticket, Conor will file)

    • order of operations: keyring package to prod first!

Allie

Yesterday:

• Hiring and administrative tasks

Today:

• Wrap up incident response for security issue
• Review Conor's PRs: https://github.com/freedomofpress/securedrop/pull/5922 and associated docs PR
• Take a look at growing ready-for-review column and sprint tasks
• Ask FPF for CoC feedback

Blockers or Asks:

• None

Conor

Yesterday:

• Review of several small SD & docs PRs

Today:

• Removing upgrade scenario - https://github.com/freedomofpress/securedrop/issues/5512
• Open qubes-builder issue for keyring changes (emphasize order of operations: keyring package must be in prod first)

Blockers or Asks:

• Requesting review on https://github.com/freedomofpress/securedrop/pull/5922 & associated docs changes. Should be light work for any maintainer.

Erik

Yesterday:

• 1.8.2
• Hiring
• UX research rehearsal
• Docs review

Today:

• User research session focused on deletion
• Sprint prep for tomorrow
• Hiring & technical work as time allows

Blockers or Asks: None

John

Yesterday:

• 1.8.2
• https://github.com/freedomofpress/securedrop/pull/5954

Today:

• docs PR for #5954
• evaluating Babel vuln https://ubuntu.com/security/notices/USN-4962-1
• working on orgsec presentation
• Returning to safe deletion

Blockers or Asks:

• Mickael, if you have any time left, a glance at #5954 would be much appreciated

Kev

Yesterday:

• 1.8.2

Today:

• Changelog PR is ready
• Reviews, investigate tailsconfig issues
• Safe Deletion

Blockers or Asks: None

Mickael

Yesterday:

• 1.8.2
• Reviewed/merged https://github.com/freedomofpress/securedrop-proxy/pull/88 Today:
• Communications w/ Allie
• Reviews, starting with 5954
• Try a template build to see if it works Blockers or Asks:
• For Allie and other interested parties, review the advisory text for publication

Ro

Yesterday:

• support comms
• https://github.com/freedomofpress/securedrop-docs/pull/224
• meetings
• review orgsec slides

Today:

• support comms
• brief incident resp copy review
• docs continued
• orgsec followup?
• some time afk this afternoon

Blockers or Asks:

• n/a