Standup Notes 2020 10 22

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Ro

Topics and Call-outs

Template consolidation release & QA

(Conor) In quick discussion yesterday we agreed that a quick action on the part of journalists should suffice. There's a "happy path" (users follow guidance) and a "sad path" (users miss our advice). In both cases users should not be hitting unrecoverable errors.

While beginning to poke at test plan, we're discovering need for optimizations. Kev just pushed optimization to actually only update the required templates :). Another required change is to more durably configure MIME types as the system default, and to ensure that only one run is required.

• Allie will attempt a test run today following test plan currently in https://pad.riseup.net/p/sdw-consolidate-test-plan

HTTPSE ruleset update

• Mickael will poke, possibly tomorrow: https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/issues/13

Bugcrowd triage

• Has historically been handled by Jen/Mickael, but most everyone has already handled a submission
• Will tie triage responsibility to sprint

Allie

Yesterday:

• Seen/Unseen, Draft PR open
• Migrations, PRs open, ready for review
• SDK release

Today:

• Seen/Unseen
• SDK release reviews/followup
• Test template consolidation #619

Blockers or Asks:

• Review blocking PR: https://github.com/freedomofpress/securedrop-client/pull/1162 - John will review

Conor

Yesterday:

• Template consolidation discussion, drafted test plan https://pad.riseup.net/p/sdw-consolidate-test-plan

Today:

• Build dom0 RPM for yum-test, submit PR
• Port test plan draft to https://github.com/freedomofpress/securedrop-workstation/pull/619

Blockers or Asks:

• Kev: Let's mindmeld on your GUI updater testing today, want to make changes up front if required

Erik

Yesterday:

• Finished up docs migration
• Finished up changelogs review: https://docs.google.com/document/d/1kQwI1ktbr_oO0wkF2BgTpJZNuZuC7lhcfwt_txgxCvU/edit#

Today:

• Build test plan based on changelogs review
• Docs & SDO content work as time allows

Blockers or Asks: None

John

Yesterday:

reviews

Today:

reviews

Blockers or Asks:

Kev

Yesterday:

Template consolidation

Today:

• Slim down work the updater is doing for template consolidation
• More happy path work / touch base w/ Conor
• NUC8 docs

Blockers or Asks: None

Kushal

PTO

Mickael

Yesterday:

• template consolidation review:

  • packages (incl. conor's new client build for template-consolidation component)

  • packaging changes

  • client changes

  • export changes

  • opened a branch for defense-in-depth mimetime handling, issue with viewer vm

• sdk release w/ allie

• updated https://github.com/freedomofpress/ansible-role-grsecurity-build/pull/61 Today:

• help with template consolidation

• httpse update

• threat model update based on the team's recent work

Blockers or Asks: None

Ro

Yesterday:

Today:

Blockers or Asks: