Standup Notes 2021 06 28

Participants (alphabetical): Allie, Conor, Cory, Erik, John, Kevin, Kushal, Nina, Ro

Topics and Call-outs

Docs LFS issue and next steps

• See findings in https://github.com/freedomofpress/securedrop-docs/issues/234
• Upstream issue: https://github.com/readthedocs/readthedocs.org/issues/8288
• Kev will also take a look. If no resolution by tomorrow, we'll consider dropping LFS.

Signing key rotation

• Planning to post https://docs.google.com/document/d/1bJzQm-a73LORQNrX0iDB01dQ8cGoAhkCo2BoQJoM5HM/edit#heading=h.a54ee36bz9k7 and update securedrop.org later today
• Not planning to bump expiry of old key. Graphical updater failures after June 29 will be handled on the support side.

Holiday recap & meeting schedule this week

• Friday is an FPF holiday for everyone
• US folks will also be off on Monday (4th of July offset)
• Canada folks will also be off on Thursday (Canada Day)

Allie

Yesterday:

Today:

• Knowledge share, E2E WG
• Threat modeling review
• Evening call w/ Kushal & Keturah - OrgSec call
• Catch up

Blockers or Asks: None

Conor

Yesterday:

• PTO

Today:

• Review draft of blog post re: key rotation
• Debug some sys-whonix problems on my system, possibly repro of support inquiries
• SD CI group discussion

Blockers or Asks:

• Still catching up from PTO, so ping me directly with anything urgent

Cory

Yesterday: (Thursday)

1. securedrop#6021: Drafted revisions of status-indicator IMG ALTs and ARIA annotations (draft PR pending #5996)
2. securedrop-client#239: Discussed l10n approach with John

Today: non-FPF day except for sitting in on meetings 3. CI knowledge-share 4. E2EE working group

Blockers or Asks:

1. Kev: incremental a11y PRs #5996 ready for re-review, #6021 ready for first review
2. Allie: hoping to discuss/confirm securedrop-client#239 approach this week

Erik

Yesterday: (Friday)

• Phone screens; additional hiring assignment re: Sr. Sec Eng role
• Non SD work (membership chat w/ Louise, budgeting work)

Today:

• CI knowledge share & E2E check-in
• Hiring/contracts follow-up

Blockers or Asks: None

Jen

• This week will be around for today, some of Tue and Wed
• e2e reading review will not be me awkwardly asking questions to the group so feel feel to lurk even if you didnt do the reading ;-)
• ty for issues, will scan through this afternoon!
• RPing as an applicant to our FPF job this afternoon and getting interviewed by allie

John

Yesterday:

• RTD/LFS doc images

Today:

• a bit of that again
• looking into safe deletion UI discrepancies found by Allie
• a small PR to end securedrop safety warnings about cryptography in admin?

Blockers or Asks:

• None

Kev

Yesterday: (Friday)

• Catching up on support, HTTPSE signing ritual
• #learning for E2E WG

Today:

• Mtgs
• Buster nested CI PR
• Docs issue
• cory PR review

Blockers or Asks: None

Kushal

Out sick

Nina

Yesterday:

• OOO last week, poked at Source UxR findings but just poked. Lots of Dangerzone and Qubes. Easier to do w/o my big monitor at home.

Today:

• AM water delivery to a homeless camp, back ~12pm
• Continue/complete 2019 Source UxR findings synthesis

Blockers or Asks:

Ro

Today:

• support comms, dst meeting
• redmine declutter/cleanup (ongoing)
• knowledge share
• looking at conor's anon-whonix issue
• catch up on ops hire

Blockers or Asks:

• none