Sponsored Links

Senin, 26 Maret 2018

Sponsored Links

WIKILEAKS SecureDrop Co-Creator dead at 36, details on 2 deaths ...
src: i.ytimg.com

SecureDrop is an open-source software platform for secure communication between journalists and sources (whistleblowers). It was originally designed and developed by Aaron Swartz and Kevin Poulsen under the name DeadDrop. James Dolan also co-created the software.


Video SecureDrop



History

After Aaron Swartz's death, the first instance of the platform was launched under the name Strongbox by staff at The New Yorker on 15 May 2013. The Freedom of the Press Foundation took over development of DeadDrop under the name SecureDrop, and has since assisted with its installation at several news organizations, including ProPublica, The Guardian, The Intercept, and The Washington Post.


Maps SecureDrop



Security

SecureDrop uses the anonymity network Tor to facilitate communication between whistleblowers, journalists, and news organizations. SecureDrop sites are therefore only accessible as hidden services in the Tor network. After a user visits a SecureDrop website, they are given a randomly generated code name. This code name is used to send information to a particular author or editor via uploading. Investigative journalists can contact the whistleblower via SecureDrop messaging. Therefore, the whistleblower must take note of their random code name.

The system utilizes private, segregated servers that are in the possession of the news organization. Journalists use two USB flash drives and two personal computers to access SecureDrop data. The first personal computer accesses SecureDrop via the Tor network, the journalist uses the first flash drive to download encrypted data from the Internet. The second personal computer does not connect to the Internet, and is wiped during each reboot. The second flash drive contains a decryption code. The first and second flash drives are inserted into the second personal computer, and the material becomes available to the journalist. The personal computer is shut down after each use.

The news organization should not record any information regarding the uploader, i.e., their IP address or information about the computer used, and the browser does not enable persistent cookies or allow third party embedding. Anonymity is not guaranteed, but the creators claim that the system is safer than electronic mail.

Freedom of the Press Foundation has stated it will have the SecureDrop code and security environment audited by an independent third party before every major version release and then publish the results. The first audit was conducted by University of Washington security researchers and Bruce Schneier. The second audit was conducted by Cure53, a German security firm.

SecureDrop suggests sources disable JavaScript to protect anonymity.


securedrop - Mastodon
src: pouet.dachary.org


Prominent organizations using SecureDrop

The Freedom of the Press Foundation now maintains an official directory of SecureDrop instances. This is a partial list of instances at prominent news organizations.


Displacing Wikileaks: Is Securedrop A Government Leak Graveyard?
src: i0.wp.com


Awards

  • 2016: Free Software Foundation, Free Software Award, Award for Projects of Social Benefit

securedrop - Mastodon
src: pouet.dachary.org


See also

  • GlobaLeaks
  • Wikileaks

Second WikiLeaks-Inspired "SecureDrop" Developer Commits ...
src: thefreethoughtproject.com


References


SecureDrop on Twitter:
src: pbs.twimg.com


External links

  • SecureDrop.org
  • SecureDrop on GitHub
  • SecureDrop at Freedom of the Press Foundation

Source of the article : Wikipedia

Comments
0 Comments