Standup Notes 2020 06 12

Participants (alphabetical): Allie, Conor, Erik, Jen, John, Kevin, Kushal, Ro

Topics and Call-outs

SecureDrop 1.4.0

• QA Matrix: https://docs.google.com/spreadsheets/d/15qr2XMlBrlCwgaErGzW9HR4UXJsRtwadwkhOPpEJmec/edit#gid=0

• Test plan re: OSSEC alerts should be clarified, Kev care to share more info on

• Kev observes OSSEC going silent after a subsequent playbook run to update iptables rules, hypothesis that comms between app/mon is broken; Kev to investigate further

SecureDrop Workstation 0.3.1

• Test plan for prod scenario needs work, requires patching repo URLs
• Conor to prepare test plan for 0.3.1rc/prod

Allie

Yesterday: (Thursday)

• Worked on https://github.com/freedomofpress/securedrop-client/issues/906#issuecomment-601410639
• Worked on SourceLists.update refactor to fix https://github.com/freedomofpress/securedrop-client/issues/906#issuecomment-601410639

Today:

• Open a PR that refactors how we update the source widgets in the source list on a sync to fix segfault issue #8: https://github.com/freedomofpress/securedrop-client/issues/906#issuecomment-601410639
• Provide final review - looks like PR review comments where addressed: https://github.com/freedomofpress/securedrop/pull/5224
• Wrap up release manager docs changes and pass them over to Conor

Blockers or Asks: None

Conor

Yesterday:

• Workstation keyring update testing, staging results solid but prod needs work

Today:

• Keyring update test plan for prod, in https://github.com/freedomofpress/securedrop-workstation/issues/571
• Will confirm working locally before asking for more testing

Blockers or Asks:

• Erik, stand by for more QA requests on the workstation keyring

Erik

Yesterday: (Thursday)

• QA keyring changes
• Lots of grooming of historical SD Core issues

Today:

• Prep 1.4.0 release comms / docs
• Additional keyring QA, as needed
• Add test plan to https://github.com/freedomofpress/securedrop-workstation/pull/569
• YubiKey docs review, if time permits

Blockers or Asks: May need help with documentation of new OSSEC alert

Jen

Yesterday: (Thursday)

• lotsa meetings
• Review'd/tested CSS PR from Allie, looks great

Today:

• I owe evilaliv3 another review of his HTTPS-E changes
• I also said last week I'd review this: https://github.com/freedomofpress/securedrop/pull/5300

Blockers or Asks:

• None

John

Yesterday:

• 1.4.0 QA

Today:

• Checking s-d-p packaging of securedrop-client with standard pyproject.toml location
• Rechecking OSSEC alerts/iptables config
• Trying https://github.com/freedomofpress/securedrop-workstation/pull/528 on fresh Qubes install

Blockers or Asks:

• At some point I'd like someone with permissions to put setuptools on our PyPI
  • Jen will poke at it, possibly tomorrow

Kev

Yesterday: Thursday:

• 1.4.0 QA

Today:

• More research on OSSEC/iptables issue
• More work on testinfra changes for QA
• Research into updating our hardware recommendation for NUCs

Blockers or Asks: None

Kushal

Today:

• Rereview https://github.com/freedomofpress/securedrop-client/pull/1082
  • all good, approved and merged
• Commented again with example test cases in https://github.com/freedomofpress/securedrop/pull/5284
• https://github.com/freedomofpress/securedrop/pull/5224
  • reading the discussion
  • pushed the change, CI failures, restarted those jobs
  • ready fo review Tomorrow:
• PRs/reviews as required Blockers or Asks:
• None

Mickael

PTO

Ro

Yesterday:

• 5224 review
• Learning time on NTP-related support issue
• Support comms
• Some outreach

Today:

• Support comms/contract renewal (generally, a little extra support comms while Ryan is busy)
• meetings (DST x2, SDx2)

Blockers or Asks:

• none