Standup Notes 2020 12 09

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael

Topics and Call-outs

SecureDrop Client 0.4.0

Uncovered issue related to global read/unread state: - user not created who never sent a reply; seen actions not recorded - downloaded state not captured in SecureDrop Client

• Erik to test fix for downloaded state today; user who never sent a reply from the JI
• Release likely to be pushed out by 1-2 weeks, potentially after holidays

HTTPSE ruleset updates

• PR now contains signed rulesets: https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/19 Requesting functional verification in a test-only update channel from another team member

  • Mickael to work w/ Conor on final review / automation script

Allie

Yesterday:

• SD Client fun

Today:

• ^^; regression tests, investigate options for resolving remaining issue between two client instances against same server (this is something i don't test during development but now i will set it up) and begin looking at https://github.com/freedomofpress/securedrop-client/issues/1157 as a possible solution
• review Erik's SDK PR given time

Blockers or Asks: None

Conor

Yesterday:

• HTTPSE signing & docs, finished https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/19 and opened a few issues

Today:

• Non-SD work, can be available for release signing as required

Blockers or Asks:

• Mickael, please take a look at HTTPSE PRs https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pulls

Erik

Yesterday:

• Git workshop round 1
• SD Client QA

Today:

• SD Client QA
• Final budget sanity checks; onboarding mtg w/ new accountants
• Technical work as time allows

Blockers or Asks: None

John

Yesterday:

• review SDK pydantic PR

Today:

• hopefully merging passphrase PR!
• non-SD meeting
• can review https://github.com/freedomofpress/securedrop-docs/pull/106
• if no other needs, continuing with kanban period ideas

Blockers or Asks:

• anyone who wanted to review https://github.com/freedomofpress/securedrop/pull/5600/ and has time today

  • Mickael taking a look

Kev

Yesterday:

• Git workshop

Today:

• SD Client testing
• Learning time: Poke at Jen's Signal protocol work

Blockers or Asks: Conor: Chat re: signing responsibilities

Kushal

Today:

• Commented on the https://github.com/freedomofpress/securedrop-sdk/issues/33#issuecomment-741606462
• Finally managed to build PySide2 wheel, wrote steps in the PR https://github.com/freedomofpress/securedrop-client/pull/1089#issuecomment-741799433 Tomorrow:

Blockers or Asks:

• None

Mickael

Yesterday:

• Started review on cryptoutils https://github.com/freedomofpress/securedrop/pull/5600
• Tested allie's fix for the seen issue, but did not take into account the scenario Erik brought up earlier.
• Opened sshd config PR https://github.com/freedomofpress/securedrop/pull/5666

Today:

• Finish review of cryptoutils PR refactor
• Review https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pulls

Blockers or Asks: