Standup Notes 2020 04 28

Participants (alphabetical): Allie, Conor, Erik, Jen, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

• SecureDrop 1.3.0 check-in

  • Test plan: https://github.com/freedomofpress/securedrop/wiki/1.3.0-Test-plan
    • Section on OSSEC/Journalist API still to come
    • Otherwise ready for feedback & testing!
  • PR for RC1 packages is ready to review - Allie will review: https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/39

• Client Release check-in

  • Fix for submission key handling has landed
  • SDK version bump has landed
  • SDK dependency update in securedrop-client pending (Allie to review https://github.com/freedomofpress/securedrop-client/pull/1076 )
  • Proxy release pending? - Needs to be released at same time as securedrop-client
  • Next steps on https://github.com/freedomofpress/securedrop-client/pull/1050 ? Erik recommends deferring to 0.3.0 - final decision after Kushal/Allie meeting
  • Once we have everything we need in master of securedrop-client, we will test using the latest nightly of securedrop-client and securedrop-proxy. If all looks fine, then we release both.

• Reminder:

  • Pilot/support sync happening as scheduled

  • Client Sync will be happening as well, to discuss security issue

Allie

Yesterday:

• Got caught up on changes made with #1050 and will meet with Kushal after standup
• Also reviewed #1059 with Jen's change
• Upgraded Tails 4.5 and ran into an issue with the manual install
• Prepped for a fresh SD install for QA testing

Today:

• Review https://github.com/freedomofpress/securedrop-client/pull/1076
• Review https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/39
• RM deputy/ QA testing with Kev
• Poke at Issue #815 and meet with Kushal about related work on PR #1050

Blockers or Asks:

• None

Conor

Yesterday:

• Non-SD work

Today:

• Review of SDW tags RPC changes https://github.com/freedomofpress/securedrop-workstation/pull/533
• Regarding Allie's potential blockers: confirmed merge rights into securedrop-dev-packages-lfs repo

Blockers or Asks:

• Can anyone point to use of Pyup.io env vars in our project repos? Identified by PYUP_API_KEY / PIPENV_PYUP_API_KEY env vars

Erik

Yesterday:

• Grantwriting work
• UX review w/ Nina of recently reported issues, pilot findings
• First pass through Mickael's comments on copy/paste docs

Today:

• Grantwriting work
• Address Mickael's comments on copy/paste docs

Blockers or Asks: None

Jen

Yesterday:

• Looked at John's key branch, made minor UI tweak to resolve a little difference to the bubble padding, that's all that was needed, thanks Allie for review/merge
• Finished release of SDK, it's now on PyPI and our pip mirror
• Made PR to use in securedrop-client

Today:

• Lot of meetings rest of today
• Still owe review of clipboard login PR from Erik, didn't get to it yesterday

Blockers or Asks:

• None

John

PTO

Kev

Yesterday:

Today:

• Test plan updates, updates to QA matrix

Blockers or Asks:

• Put in a ticket for quay.io access

Kushal

Today:

• Reviewed and merged #1067 in client
• catching up and investigation related to https://github.com/freedomofpress/securedrop-client/issues/815#issuecomment-618666142
• More investigation of #1050

Tomorrow:

• Start QA on RC1 if possible

Blockers or Asks: None

Mickael

Yesterday:

• https://github.com/freedomofpress/securedrop/pull/5209
• Copy paste testing
• https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/3 (merged)
• https://github.com/freedomofpress/securedrop-debian-packaging/pull/169

Today:

• help with reviewing release tasks if required (backports/testplan/packages)
• review Erik's changes to copy paste docs PR
• QA

Blockers or Asks: None

Ro

Yesterday:

• meetings
• report changes
• prepared some quotes
• misc support correspondence
• reviewed Erik's small docs PR

Today:

• initial onboarding to salesforce
• reviewed Draft SD feature pitch document
• meetings incl DST workflow meeting this afternoon
• report changes or QA as time/as needed
• misc support as needed

Blockers or Asks:

• none