Secure-delete can take a long time. SecureDrop does it by delegating to rq which sends python code to redis which is then interpreted by a rq worker. It is not only fragile, it also has a subtle bug that eluded diagnostic for two years.

Replaced this with 40 LOC of python running in a thread that can be trivially tested.

https://github.com/freedomofpress/securedrop/blob/ea83e2db267fd41adcf0f9ad5303d80d36a37619/securedrop/shredder.py

#securedrop #simpleisbetter