Standup Notes 2020 04 14

Participants (alphabetical): Conor, Erik, Jen, John, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

• Install potentially happening today (Harlo/Conor), please join support sync for updates

• Priority of securedrop-workstation PRs (there are many PRs, draft or otherwise)

  • Recommended to start with: https://github.com/freedomofpress/securedrop-workstation/pull/532
  • Next up: https://github.com/freedomofpress/securedrop-workstation/pull/528

• SecureDrop 1.3.0

  • Kernel update: merged
  • Key cache for SecureDrop Workstation: merged
  • Tor language/UX tweaks: WIP - https://github.com/freedomofpress/securedrop/pull/5116
  • OSSEC update: WIP
  • Tor update: https://github.com/freedomofpress/securedrop/pull/5192 (approved) and https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/38 (merged)
  • Ansible update: not started
  • Proposal: align release date with Tails (May 5), pushing feature freeze to April 21 - Jen: this is OK as the version of Tor in production (0.4.1.x) EOLs May 20

• SecureDrop Client 0.2.0

  • Reduce timeout errors: merged
  • Gracefully handle missing submission key: WIP - https://github.com/freedomofpress/securedrop-client/pull/1059
  • Don't cut off long URLs / makes messages/replies selectable: WIP - https://github.com/freedomofpress/securedrop-client/pull/1050
  • Mitigate deletion crashers: not started

Allie

PTO

Conor

Yesterday:

• Poked at open workstation PRs a bit, but no formal review Today:
• Pilot install

Blockers or Asks:

Erik

Yesterday:

• Updater changes
  • UI updates
  • Add sys-whonix to system VM grouping
  • Draft PR for using poweroff/polling strategy

Today:

• Pilot comms
• Follow-up on above
• Maybe help with PR testing, review Ro's Tor PR

Blockers o`r Asks: PR review on updater changes in flight

Jen

Yesterday: PTO

Today:

• Get to a good pause point with HTTPS Everywhere (at least for review from Kushal), got a branch from Friday in progress, I'm at figuring out the (official) signing process for HTTPSE rulesets
• Help with review of work for the upcoming releases

Blockers or Asks: None

John

Yesterday:

• Stuck on #140: qt stylesheet bugs which I should have remembered

Today:

• reviewing https://github.com/freedomofpress/securedrop/pull/5190
• finishing #140

Blockers or Asks:

• would like to discuss how to suppress GPG notifications for #140 with Jen

Kev

Yesterday:

• Got partway through SDW install -> hardware issues
• Started on OSSEC update

Today:

• Cont'd on OSSEC update
• Known issues docs: https://github.com/freedomofpress/securedrop-workstation-docs/issues/29

Blockers or Asks: None

Kushal

Time off

Mickael

Yesterday: (This AM)

• review/merged https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/38
• reviewed but not merged https://github.com/freedomofpress/securedrop/pull/5192 (having issues with local reboot?)

Today:

• Review sd core PRs
• Review workstation PRs Updater Blockers or Asks:
• Anyone having issues with the reboot task in the libvirt molecule scenario?? Getting errors "FAILED: Timed out waiting for last boot time check"

Ro

Yesterday:

• support comms
• https://github.com/freedomofpress/securedrop/pull/5116, mostly was figuring out flake8
• prepped for provisioning but it didn't happen; see Wire
• repro/look into Thunderbolt/USB-C Qubes issues (thanks john + conor)

Today:

• support comms
• report-writing I hope
• meetings
• avail for QA later this week if needed

Blockers or Asks:

• none but I need some uninterrupted time to actually write my report, is hard to come by, I may skip standup/go low-comms one of the days this week if need be.