redshiftzero

For 0.11 release changes

Get an API token

$ curl -X POST -H "Content-Type: application/json" --data '{"username":"myusername","passphrase":"mypassword","one_time_code":"123456"}' --proxy socks5h://127.0.0.1:9150 myonionaddress.onion/api/v1/token

The response body will contain a token.

redshiftzero

Building securedrop-proxy 0.1.1 and securedrop-client 0.0.2

Following build guidelines in PR #9, in a Debian AppVM:

1. make install-deps
2. make syncwheels

securedrop-client

redshiftzero

$ vagrant -v
Vagrant 2.1.2
$ vagrant up app-staging
Bringing machine 'app-staging' up with 'virtualbox' provider...
==> app-staging: Importing base box 'bento/ubuntu-14.04'...
==> app-staging: Matching MAC address for NAT networking...
==> app-staging: Checking if box 'bento/ubuntu-14.04' is up to date...
==> app-staging: A newer version of the box 'bento/ubuntu-14.04' for provider 'virtualbox' is
==> app-staging: available! You currently have version '201803.24.0'. The latest is version
==> app-staging: '201806.08.0'. Run `vagrant box update` to update.

redshiftzero

import zlib
import itsdangerous
import argparse


def read_flask_cookie(cookie):
    compressed_data = itsdangerous.base64_decode(cookie.split(".")[1])
    return zlib.decompress(compressed_data)

redshiftzero

---
# Playbook to update SecureDrop VMs configured with the latest stable release
# to use the release candiate packages from apt-test.freedom.press (rather
# than apt.freedom.press). Updates the apt repo pubkey with a testing pubkey,
# and alters the apt source lists to point to the test server.
#
# Steps to use this playbook:
#
#   1. `git checkout 1.2.2`
#   2. Provision prod VMs.

redshiftzero

$ hey -z 1m -c 50 -m GET https://tor-apt.freedom.press/dists/trusty/Release
Summary:
  Total:	60.3476 secs
  Slowest:	1.2616 secs
  Fastest:	0.0277 secs
  Average:	0.0860 secs
  Requests/sec:	578.8131
  Total data:	101995600 bytes
  Size/request:	2920 bytes

redshiftzero

vagrant@development:/vagrant/securedrop$ ls -lR /vagrant/securedrop
/vagrant/securedrop:
total 356
-rw-r--r-- 1 vagrant vagrant   148 Sep 26 17:49 babel.cfg
-rw------- 1 vagrant vagrant  3865 Sep 26 18:19 config.py
-rw------- 1 vagrant vagrant  2410 Sep 26 18:19 config.pyc
-rw-r--r-- 1 vagrant vagrant  3808 Sep 26 17:49 config.py.example
-rw-r--r-- 1 vagrant vagrant 34520 Sep 26 17:49 COPYING
-rw-r--r-- 1 vagrant vagrant  6770 Oct  3 22:39 crypto_util.py
-rw-r--r-- 1 vagrant vagrant  6953 Oct  3 22:39 crypto_util.pyc

redshiftzero

SecureDrop Hackathon

SecureDrop is a whistleblower submission system that media organizations use to securely accept documents from and communicate with anonymous sources. Originally written by Aaron Swartz, it's currently maintained by Freedom of the Press Foundation. Dozens of news organizations including the New York Times, the Washington Post, the Intercept, and many others now use SecureDrop.

How SecureDrop Works

redshiftzero

============================================== FAILURES ===============================================
___________________________ test_app_iptables_rules[ansible://app-staging] ____________________________
[gw1] darwin -- Python 2.7.12 /usr/local/opt/python/bin/python2.7
SystemInfo = <testinfra.modules.base.SystemInfo object at 0x10ee32dd0>
Command = <command>, Sudo = <sudo>

    def test_app_iptables_rules(SystemInfo, Command, Sudo):
    
        # Build a dict of variables to pass to jinja for iptables comparison
        kwargs = dict(

redshiftzero

======================================================= FAILURES =======================================================
____________________________________ test_app_iptables_rules[ansible://app-staging] ____________________________________
[gw3] darwin -- Python 2.7.12 /usr/local/opt/python/bin/python2.7
SystemInfo = <testinfra.modules.base.SystemInfo object at 0x10fcdabd0>
Command = <command>, Sudo = <sudo>

    def test_app_iptables_rules(SystemInfo, Command, Sudo):

        # Build a dict of variables to pass to jinja for iptables comparison
        kwargs = dict(