Standup Notes 2020 06 11

Participants (alphabetical): Allie, Conor, Erik, Jen, John, Kevin, Kushal, Ro

Topics and Call-outs

• SecureDrop 1.4.0

  • Tracking issue: https://github.com/freedomofpress/securedrop/issues/5289

  • QA matrix: https://docs.google.com/spreadsheets/d/15qr2XMlBrlCwgaErGzW9HR4UXJsRtwadwkhOPpEJmec/edit#gid=0

  • Test plan: https://github.com/freedomofpress/securedrop/wiki/1.4.0-Test-plan

  • Early QA results show no problems on basic functionality, need more attention to 1.4.0-specific changes (bottom section of test plan)

    • Kev observing issue with OSSEC test, investigating

• SecureDrop Workstation 0.3.1rc1

  • LFS PR: https://github.com/freedomofpress/securedrop-workstation-dev-rpm-packages-lfs/pull/13 - Kev will review
  • Tracking issue: https://github.com/freedomofpress/securedrop-workstation/issues/571

• Flagging community PR for shredder behavior: https://github.com/freedomofpress/securedrop/pull/5308 - John will review

• Small Q: We sometimes refer to SecureDrop Server as "SD Core" which at least one team member has suggested is ambiguous. Should we consistently use "SD Server" instead? Core also includes Tails workstation code.

  • Kev/Conor: Prefer standardizing on "Core" for now

  • Jen/John: implies some kind of ranking

  • Conor: maybe we can find some middle ground :)

  • Erik: will leave at "Core" for now, alternatives welcome!

Allie

Yesterday:

• Fixed placeholder bug appearing on Qubes in PR: https://github.com/freedomofpress/securedrop-client/pull/1082
• Provided more detailed review of https://github.com/freedomofpress/securedrop/pull/5224

Today:

• Finish screen resolution PR
• Continue working on WIP RM docs PR

Blockers or Asks:

• How do people feel about merging this? https://github.com/freedomofpress/securedrop-client/pull/1082

Conor

Yesterday:

• Workstation LFS package
• Follow up on OSSEC error w/ Ro

Today:

• Test plan for RPM
• Priority on Core release
• Early look at https://github.com/freedomofpress/securedrop-workstation/pull/569

Blockers or Asks: Kev: LFS PR review

Erik

Yesterday:

• Pre-release comms for 1.4.0
• Exploring options for new SD Workstation audit in 2020
• Got black PR in securedrop-workstation ready for a round of feedback: https://github.com/freedomofpress/securedrop-workstation/pull/569

Today:

• Test 0.3.1-rc1 when ready
• Poke a little at dev data PR again
• Review of old PRs w/ Jen

Blockers or Asks: Feedback on workstation #569 appreciated

Jen

Yesterday:

• Upon request reviewed a bunch of docs PRs
• Finished testing the CSS PR in qubes, I'm pro merge there so can give the latest changes a spin today

Today:

• Will look at CSS PR in qubes as it looks like there was at least one commit added, will merge if all looks good
• Otherwise got a meetingful afternoon as I moved a bunch of my meetings from yesterday to today

Blockers or Asks:

• None

John

Yesterday:

• #528
• partial 1.4.0 QA with wrong Tails version 🤦

Today:

• QA
• https://github.com/freedomofpress/securedrop/pull/5308 -- it's a good catch, should be easy to check while I've got a bunch of machines ready to test it
• black/isort PRs

Blockers or Asks:

• none

Kev

Yesterday: Workstation release, 1.4.0 QA Today: ^^

Blockers or Asks: None

Kushal

Today:

• Finishup QA, filed https://github.com/freedomofpress/securedrop/issues/5309
• Updated https://github.com/freedomofpress/securedrop/pull/5224 Tomorrow:
• Holiday :) Blockers or Asks:
• None

Ro

Yesterday:

• Meetings
• Support comms, some support followup
• Pair w/ Allie on https://github.com/freedomofpress/securedrop/pull/5224 and QA conversation

Today:

• reviewed updates to 5224
• discussed OSSEC issue and provisioning logic w Conor, thank you C!
• bit of Ansible learning related to ^
• firewall screenshots

Blockers or Asks:

• small random ask: appreciate help with an NTP issue