securedrop

securedrop copied to clipboard

Develop and implement kernel update policy

2

## Status quo We currently build and distribute our own grsecurity-patched Linux kernels to get some extra security benefit. Most of the team is not particularly familiar or experienced with...

legoktm

Phase out old signing key in `securedrop-admin`

1

`securedrop-admin` currently still trusts the old signing key for releases. It's been more than a year since the [full key rotation](https://media.securedrop.org/media/documents/signing-key-transition.txt) (not to be confused with the recent expiry bump),...

eloquence

## Status Ready ## Description of Changes This PR continue the work from https://github.com/freedomofpress/securedrop/pull/6503, by bringing the new test code and fixtures to some of the layout tests for the...

nabla-c0d3

Move UA checks to server-side code instead of Javascript

8

## Description In a related issue, #1787, @psivesely mentions the possibility of moving the UA checks for non-TBB browsers and the Android versions of Tor Browser to server-side code instead...

zenmonkeykstop

Allow sources to contact specific journalists

6

I had a discussion with Dave Maass, media relation coordinator at EFF. He pointed out that some sources might contact a specific media organization because they want to get in...

micahflee

# Feature request SVS (and other Tails workstations?) should show hidden files by default ## Description Currently, decompressing a file may decompress hidden files in addition to regular ones. In...

huertanix

## Description Microsoft Office 365 is moving away from support Basic Authentication protocols and in the future will only support Modern Authentication. While they will still allow SMTP, they highly...

winseng

Support grsec kernel previews for instances on non-HCL hardware.

2

In order to facilitate pre-release testing for new kernels, it would be helpful to have a preview component on apt.freedom.press, and an associated release/testing procedure which admins can follow to...

eloquence

Determine plan for auditing Rust dependencies

1

As part of using Sequoia, we'll start pulling in Rust dependencies (161 crates by my current count!). The process for performing "diff reviews" of Python dependencies is [documented on the...

legoktm

Re-evaluate Orfox warnings

4

## Description Orfox is no more, and Tor Browser for Android, which took its place, is not being caught by the current regular expression targeting Orfox. This results in confusing...

eaon