securedrop

securedrop copied to clipboard

## Status Ready for review ## Description of Changes Fixes #6904. Changes proposed in this pull request: - The journalist Scripting has changed to disable buttons above the source rows...

rjbaarsma

Support podman in `make dev-tor`

2

## Status Ready for review ## Description of Changes Unfortunately `podman volume` and `docker volume` are not identical, podman will (sensibly) error if you try to create a volume that...

legoktm

Can't install / upgrade on tails 6.3 ?

3

## Description I have a securedrop 2.6 on tails 5.14 I reinstalled a new tails key on 6.3 with the same Persistence I tried to upgrade to 2.8 as follow...

vincib

per-source collection numbering can collide after restoration of a larger collection from a smaller backup

3

## Description For the collection `C(S, t)` for a source `S` at time `t`, collection-level numbering can collide (and effectively lock) if a smaller collection `C(S, 1)` is restored from...

cfm

Proof-of-concept for using oss-fuzz as a part of testing

6

[OSS-fuzz](https://github.com/google/oss-fuzz) looks like a lightweight avenue for adding some fuzzing into our automated testing. We're going to focus on Redwood as a source of test cases. We will be creating...

adaFPF

Investigate / enable brotli compression for HTTP responses

3

## Description brotli is a (relatively) newer compression algorithm originally developed by Google that broadly provides better compression than gzip. ## How will this impact [SecureDrop users](https://github.com/freedomofpress/securedrop-ux/wiki/Users)? Better compression will...

legoktm

## Description [Thanks @legoktm for investigation] GPG creates temporary files in `/var/lib/securedrop/keys/` of the format `/var/lib/securedrop/keys/.#xxxx.app.yyyy`. This results in false positive ossec alerts, as below. We mostly don't encounter this...

rocodes

Support distinct v3 client auth keys for JI access

1

## Description V2 authenticated hidden services (AHSs) originally used a simple access token mechanism - in SecureDrop, the access token was shared by all users of the Journalist Interface. When...

zenmonkeykstop