Standup Notes 2021 06 07

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Nina, Ro

Top priorities

1. Land Safe Deletion support for SecureDrop Client and associated SDK changes
2. Land remaining release blockers for SecureDrop 2.0.0 and begin QA
3. Organize knowledge-shares focused on:

• CI improvement opportunities (collaboration w/ infra)
• SecureDrop Workstation provisioning logic

Topics and Call-outs

Knowledge Share

securedrop-admin cryptography update

Allie

Yesterday: (Friday)

• Opened PR for a new SDW template: https://github.com/freedomofpress/securedrop-workstation-dev-rpm-packages-lfs/pull/26

Today:

• Respond to review of ^ if required and perform next steps
• Review https://github.com/freedomofpress/securedrop-workstation/issues/702 and join code walkthrough of the updater
• Review https://github.com/freedomofpress/securedrop-client/pull/1261 and other client PRs that are ready-for-review
• Turn off dependabot's auto-PR updates in securedrop-export: https://github.com/freedomofpress/securedrop-export/pull/77/files
• If there's time, fix export locking issue: https://github.com/freedomofpress/securedrop-export/issues/40

Blockers or Asks:

• None

Conor

Yesterday:

Today:

• Review of new SDW template https://github.com/freedomofpress/securedrop-workstation-dev-rpm-packages-lfs/pull/26
• Review Maeve's CI image change https://github.com/freedomofpress/securedrop/pull/5976

Blockers or Asks:

• Let's chat about key rotation order (e.g. sign new RPM with new key)

Erik

Yesterday: (Friday) PTO

Today:

• Boost SecEng posting in add'l venues; set up more phone screens
• Draft a couple of updated contracts
• Participate in knowledge share re: Qubes update & provisioning logic
• Continue review of translation comments prior to 2.0.0 code freeze

Blockers or Asks: None

John

Yesterday:

• InstanceConfig race condition fix

Today:

• a couple of dev update PRs
• Babel review
• safe deletion tests

Blockers or Asks:

• if anyone's inclined to review the dev cryptography and mypy update PRs, cool, but not urgent

Kev

Yesterday:

• SDW install attempt; investigating manual workarounds for key issue

Today:

• Testing new upgrade scenario PR
• Catching up w/ Conor to chat re: order of operations for key rotations

Blockers or Asks: None; John, anything else you need on the Safe Deletion side for 2.0.0? No, all good

Kushal

Today:

• 🔲 https://github.com/freedomofpress/securedrop/pull/5909
  • will finish up tomorrow
• A bunch of meetings today at night

Tomorrow:

• Finish #5909

Blockers or Asks:

• None

Nina

Yesterday

• Swag Patrol meet-up (yes, live and in person!) with David & Keturah at vendor (OSI) in Portland

Today

• AM dentist appt
• Finish transcription from last week's UxR interview
• Begin research/planning for Source UI UxR

Blockers or Asks

• Erik, budget q's around SUI testing—should be home by 11am

Ro

Friday

• workstation provisioning, interrupted
• support comms
• 0.5 day

Today:

• Support comms
• DST handoff of a new training client
• review of DST slide deck
• apply changes to https://github.com/freedomofpress/securedrop-workstation-docs/pull/81 based on conor's review - thanks conor!
• knowledge share meeting

Blockers or Asks: -none

Cory (async)

Yesterday: (Thursday)

• Triaged accessibility audit's recommendations to #5972 epic
• Prep. of new development and Qubes testing environments

Today: non-FPF day, but will attend knowledge-sharing session

Blockers or Asks:

• Kev: feedback welcome on prioritization spreadsheet linked in #5972