Standup Notes 2021 05 25

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Nina, Ro

Top priorities

1. Safe Deletion: Land first iteration PR with minimal UX; land API for change for 2.0.0

2. Keyring update: Deliver keyring update (round 1) to SecureDrop Workstation users

3. Prep for 2.0.0: Complete release blockers for SD 2.0.0

Topics and Call-outs

CI overrides policy

• There are a few places where are required to override CI when it's failing, e.g., during SecureDrop Workstation package builds. It can also happen during SecureDrop releases as with 1.8.2, depending on the state of release branch. Conor is suggesting that we allow all SD maintainers to override in these cases.
• Allie: SGTM if we clearly document when it's appropriate to do so.
• Let's do it & let's document :).

fedora-33 migration

• Allie and Kushal will attempt reproducing install issue

make dev errors

• Erik/Kev will poke a bit more today to see if we can reproduce

Allie

Yesterday:

• Kushal 1:1: reviewed secure-fs
• Initial review of Erik's keyring-update PR: https://github.com/freedomofpress/securedrop-workstation/pull/700
• SecureDrop Workstation 0.5.4 release prep for Thursday https://github.com/freedomofpress/securedrop-workstation/issues/699

Today:

• Traffic meeting
• Continue to work towards workstation release
• secure-fs packaging - add manifest, update readme

Blockers or Asks: None

Conor

Yesterday:

• Upgrade scenario PR and docs: https://github.com/freedomofpress/securedrop/pull/5960
• Key rotation documentation, shared internally

Today:

• Dig up citation for CI override in packaging repo
• HTTPSE meeting to discuss rotation mechanics
• Will convert the key rotation issue to an epic, with liberal cross-linking

Blockers or Asks:

• None

Erik

Yesterday:

• fedora-33 & SDW key rotation fun:
  • Test plan for https://github.com/freedomofpress/securedrop-workstation/pull/700
  • Test plan for SDW 0.5.4 (key rotation bits pending): https://github.com/freedomofpress/securedrop-workstation/wiki/0.5.4-Test-Plan
• Finished review of Ro's docs PR - Kev, over to you

Today:

• Hiring kick-off SecEng
• Virtual "brown bag" with Thierry from Insurgo
• More SecureDrop key rotation fun all around

Blockers or Asks: None

John

Yesterday:

• babel/safety
• safe deletion

Today:

• safe deletion

Blockers or Asks:

• none

Kev

Yesterday:

• Holiday

Today:

• Investigating removing pyotp from SD Core
• Putting together draft PR for keyring update

Blockers or Asks: Conor/Kev will coordinate on keyring update

Kushal

Today:

• ✅ Meeting with Allie yesterday night about secure-fs
• ✅ read through https://www.tenable.com/security/research/tra-2021-14 to find any impact
• ✅ Filed https://github.com/freedomofpress/securedrop/issues/5961
• 🔲 Started digging into https://github.com/freedomofpress/securedrop/issues/5898

Tomorrow:

• Cyclone
• #5898

Blockers or Asks:

• None

Nina

Yesterday:

• Sick in AM, Qubes in PM

Today:

• Outstanding SafeDelete Zeplin (dialogs)
• Thierry, yay!
• UX planning w/ Erik

Blockers or Asks:

• Nope!

Ro

Yesterday:

Today:

Blockers or Asks: