Slashdot Mirror


Swartz-Designed Whistleblower Tool "SecureDrop" Launched

An anonymous reader writes in with word of a new tool for whistleblowers: "The 'strongest-ever' whistleblowing tool for sources to speak anonymously with journalists, partly developed by the late Reddit co-founder Aaron Swartz, has been launched by the Freedom of The Press Foundation. Before his suicide in January 2013, Swartz had been working on a tool for sources to anonymously submit documents to journalists online, without using traceable email and in a way that could be easily catalogued by news organisations. Called SecureDrop, the tool can be installed on any news organisation's website as a 'Contact Us' form page. But where these pages usually require a name and email address, the encrypted SecureDrop system is completely anonymous, assigning the whistleblower two unique identifiers - one seen by the journalist, and one seen by the whistleblower. These identities stay the same, so a conversation can be had without names being shared or known."

8 of 79 comments (clear)

  1. The problem - yellow dog journalists by Taco+Cowboy · · Score: 5, Insightful

    The problems that are plaguing our world is not only the power that be.

    The journalists are also part of the problem.

    You see, most journalists we have today do not even comprehend the ethic behind journalism.

    And worst of all, some of the journalists are willingly cooperating with the power-that-be (you can see the evidences of the so-called "news media" we have nowadays) - and I still remember a case back in the Bush (senior) days where CNN actually turned over the identity of a whistle blower to the Department of Defense.

    --
    Muchas Gracias, Señor Edward Snowden !
  2. This is only one layer. by Forbo · · Score: 5, Insightful

    I certainly hope that the news orgs will include a warning that they should be using this only as one part of an attempt at anonymity. With the NSA's beam splitters hard at work in every major ISP backbone, it would be quite trivial for them to trace this back.

    1. Re:This is only one layer. by drinkypoo · · Score: 3, Insightful

      Why print? uSDHC cards are cheap. 16GB for ten bucks is not unusual, for sixteen bucks is easy. Printing won't save you from identifiers hidden in the documents, if that's what you're worried about.

      I imagine if I wanted anonymity I'd take a directional wifi rig into the hills and point it at town...

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:This is only one layer. by complete+loony · · Score: 3, Informative

      Source code seems to be available online here. A quick look at the User Manual indicates that all communication is routed via tor which raises the bar for tracing connections significantly.

      --
      09F91102 no, 455FE104 nope, F190A1E8 uh-uh, 7A5F8A09 that's not it, C87294CE no. Ah! 452F6E403CDF10714E41DFAA257D313F.
  3. Re:Why is his death considered a suicide? by Anonymous Coward · · Score: 3, Informative

    I think you're thinking of Michael Hastings, not Aaron Swartz.

  4. Re:How I hope Mr. Aaron Swartz is still alive ! by rmdingler · · Score: 3, Funny

    All we know for certain, is that if Mr. Schwartz was still alive, he would be clawing the hell out of his coffin lid.

    --
    Happiness in intelligent people is the rarest thing I know.

    Ernest Hemingway

  5. Re:Why is his death considered a suicide? by Anubis+IV · · Score: 3, Informative

    Aaron's car never blew up. He hung (hanged?) himself. You're likely thinking of Michael Hastings, who died recently under circumstances that are closer to what you're describing.

  6. Re:How does it work? by watice · · Score: 3, Informative

    Looks like with PGP & Tor, & USB Keys. It's detailed here. https://github.com/freedomofpress/securedrop/blob/master/docs/user_manual.md