Standup Notes 2020 04 16

Participants (alphabetical): Erik, Jen, John, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

• Reminder: Copy & paste UX discussion happening after standup

• SecureDrop 1.3.0

  • Tor language/UX tweaks: Ready for review - https://github.com/freedomofpress/securedrop/pull/5116
  • OSSEC update: WIP - https://github.com/freedomofpress/securedrop/pull/5196 (Mickael reviewing)
  • Ansible update: not started yet

  ---

  • Kernel update: merged
  • Key cache for SecureDrop Workstation: merged
  • Tor update: merged

• SecureDrop Client 0.2.0

  • Gracefully handle missing submission key: WIP - https://github.com/freedomofpress/securedrop-client/pull/1059
  • Don't cut off long strings / makes messages/replies selectable: WIP - https://github.com/freedomofpress/securedrop-client/pull/1050
  • Mitigate deletion crashers: not started yet

  ---

  • Reduce timeout errors: merged

• SecureDrop Workstation RPM 0.3.0

  • Copy & paste RPC policy PR: WIP - https://github.com/freedomofpress/securedrop-workstation/pull/528
  • Avoid use of qvm-kill due to libxenlight issue: Ready for review - https://github.com/freedomofpress/securedrop-workstation/pull/534
  • Mitigate "Failed to resolve" issue during install: https://github.com/freedomofpress/securedrop-workstation/pull/535 - Ready for review
  • Single stage updater: Under review - https://github.com/freedomofpress/securedrop-workstation/pull/528

  ---

  • Gentle shutdown of sys-usb: merged
  • Clear Salt cache before securedrop-admin operations (mitigates "recurse failed" error): merged

• Component ownership discussion upcoming -- we have CODEOWNERS files, but can be a bit more explicit about review responsibilities

• Quarterly roadmap meeting coming to your calendars soon

Allie

Yesterday:

Today:

Blockers or Asks:

Conor

Remote install

Erik

Yesterday:

• Got "shutdown via poweroff+polling" PR to ready for review (100% test coverage, responded to all draft comments) - https://github.com/freedomofpress/securedrop-workstation/pull/534
• Prep for install today
• Merged Kev's install troubleshooting PR
• Filed https://github.com/freedomofpress/securedrop-workstation-docs/issues/32 re: BIOS settings borking USB-C

Today:

• Prioritizing copy & paste policy PR and associated docs so we can potentially get that merged
• Pilot comms
• Commms at HTTPSEverywhere outreach
• Work on "one stage updater PR" if time allows

Blockers or Asks:

• Please weigh in re: BIOS settings

Jen

Yesterday:

• Got HTTPS Everywhere stuff to a good stopping point - removed test version, added first org, signed with official key, added docs (some external, some internal on how to do the signing)

Today:

• this morning, investigating the QLabel/QPlainTextEdit situation to see if I can help out on that front. I do see what Allie reported regarding text-selectable QLabels seg faulting (!) the application, totally mysterious to me why that is happening. Regardless, trying to see if we can resolve the existing issues with QPlainTextEdit.

Blockers or Asks:

• None

John

Yesterday:

• #140

Today:

• #140
• Ansible update

Blockers or Asks:

• None

Kev

Yesterday:

• Docs PR for common install issue
• Draft PR for OSSEC upgrade

Today:

• OSSEC follow-up. Does it need PaX flags set? Not sure yet.

Blockers or Asks: None

Kushal

Today:

• worked on https://github.com/freedomofpress/securedrop-client/pull/1050 trying different options (commented on the issue)
• Reviewed and merged https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/1

Tomorrow:

• Python language summit

Blockers or Asks: None

Mickael

Yesterday:

• Non-SD work

Today:

• OSSEC PR review
• Prioritizing 1.3.0 review if needed

Blockers or Asks: None

Ro

Yesterday:

• Support comms
• Poke at Tor new identity PR, fighting Selenium

Today:

• Back to support

Blockers or Asks: None