An open-source whistleblower submission system — a project of @FreedomofPress Foundation
- Tweets 1,047
- Following 48
- Followers 17,162
- Likes 42
The problem: You can't do meaningful cryptography in the browser if the server delivering the code can't be trusted
WEBCAT solves this
ALT The fix A project called WEBCAT from The Freedom of the Press Foundation (built for SecureDrop, to protect whistleblowers) changes this: it enables your browser to automatically check opted-in sites' code against a signed, public manifest before running it. If there's a mismatch, the page refuses to load. No silent tampering or relying on someone noticing later.
1
2
160
The inaugural release of SecureDrop Inbox is now available! 🎉
The Inbox is a full rewrite of our client, and includes many new features and performance improvements for journalists.
securedrop.org/news/securedr…
1
1
411
📣 Empower journalists and whistleblowers by helping us improve SecureDrop.
Job opening: Senior Software Engineer Full-time
U.S. or remote
Full benefits
Salary range: $110K-$120K/year
Learn more and apply here:
grnh.se/c3f680145us
1
209
📣 Empower journalists and whistleblowers by helping us improve SecureDrop.
Job opening: Senior Software Engineer Full-time
U.S. or remote
Full benefits
Salary range: $110K-$120K/year
Learn more and apply here:
grnh.se/c3f680145us
2
3
2,598
📣 Empower journalists and whistleblowers by helping us improve SecureDrop.
Job opening: Senior Software Engineer Full-time
U.S. or remote
Full benefits
Salary range: $110K-$120K/year
Learn more and apply here:
grnh.se/c3f680145us
2
4
2,377
📣 Empower journalists and whistleblowers by helping us improve SecureDrop.
Job opening: Senior Software Engineer Full-time
U.S. or remote
Full benefits
Salary range: $110K-$120K/year
Learn more and apply here:
grnh.se/c3f680145us
1
2
2,802
We're closing off the year with a recap of what we accomplished in October and November in our latest blog post. Also, we're excited to announce that we have new merch available! Check it out:
securedrop.org/news/looking-…
ALT A sample black t-shirt with "anti-malware malware club" written on the front, and the SecureDrop and DangerZone logos adorning the sleeves
1
273
Looking for a gift this holiday season, but also want to support our work? We got you!
New short-run shirt and cap available, grab them before they're gone.
freedom-press-store.myshopif…
ALT A black t-shirt with the words ANTIMALWARE MALWARE CLUB printed on it in distorted cyan and magenta text, with the SecureDrop and Dangerzone logos partially visible on the sleeves.
ALT A black baseball cap with the Freedom of the Press Foundation logo and name printed on it.
1
1
245
The Aaron Swartz Day podcast is happening live now. Tune in for the annual State of the Drop update from the SecureDrop team: piped.video/watch?v=MZ-PQjP-…
1
11
3,420
We had a great time at the Qubes OS Summit last week! In case you missed it, the recording of our talk, "Joys and sorrows of multi-VM app development: a SecureDrop Workstation case study" is now available: piped.video/watch?v=GIZTeJU0…
#QubesOS #SecureDrop
305
If you missed this year's "State of the Drop" update at #AaronSwartzDay, you can watch it here:
piped.video/U1-VoCguHKU?t=11141
Slides:
media.securedrop.org/media/d…
1
513
This year's "State of the Drop" is now streaming live, here:
piped.video/watch?v=U1-VoCgu…
3
602
Hey @thedailybeast, if you’re looking for a safer way for leakers to communicate and contribute tips, email us at securedrop [at] freedom [dot] press — we’d love to help! thedailybeast.com/fox-news-e…
ALT Screenshot from Daily Beast article that reads: "If you're the Kanye video leaker, or anyone else at Fox with some juicy info, we'd love to hear from you. Email us at confider@thedailybeast.com."
1
1
12
When using @Tails_live, only use Tor Browser in "Safest" mode at least until the release of Tails 5.1 (scheduled for May 31), and restart the browser before and after accessing SecureDrop.
5
Watch @FreedomofPress CTO Conor Schaefer present this year's "State of the Drop" at @AaronSwartzDay now - an annual update on the SecureDrop project:
piped.video/watch?v=RImDxvPt…
1
6
12
The Guardian’s Head of Investigations recently said: "SecureDrop is absolutely indispensable. I do feel quite strongly about this...SecureDrop has become such an integral part of the way we work now, on a daily, sometimes hourly basis."
piped.video/watch?v=1mI3uQnX…
1
10
Ten years ago on this day, the late Internet pioneer Aaron Swartz made the first commit to SecureDrop, the open-source whistleblower submission system.
Read on to see how Aaron’s project has evolved since then: 👇
4
207
610
You can type an address like "lucyparsonslabs.securedrop.t…" in Tor browser (@torproject) instead of the full onion address to access a SecureDrop that uses this feature. Given that v3 addresses are 56 characters long, that’s quite convenient:
1
13
44
Reminder: SecureDrop instances still using 16-character v2 onion URLs should migrate to v3 onion services soon for improved cryptography:
docs.securedrop.org/en/stabl…
3
Fresh onions are the best onions. SecureDrop instances still using 16-character v2 onion URLs should migrate to v3 onion services for improved cryptography:
docs.securedrop.org/en/stabl…
2
On August 12, we spoke with @PaulLewis from @guardian about SecureDrop, and showcased the new SecureDrop Workstation. Watch the event here:
piped.video/watch?v=1mI3uQnX…
6
50
126
There's no time like the present for v3 onion services. Journalists and admins, if you see this warning when accessing your SecureDrop, it's time to plan the switch:
docs.securedrop.org/en/stabl…
1
6
Support for v2 onion services will be removed from SecureDrop in February 2021. Journalists and admins, if you see this warning when accessing your SecureDrop, it's time to migrate to v3 onion services:
docs.securedrop.org/en/maste…
1
17
33
Nine years ago today, the late Aaron Swartz made the first commit to SecureDrop, which was then called DeadDrop.
The project is now used by >70 media organizations world-wide, thanks to Aaron and the community of contributors who have built on his pioneering work.
2
46
94
If you visit securedrop.org in Tor Browser, you will now see ".onion available" in the address bar, directing you to the onion service for the website. This is possible thanks to a new feature in Tor Browser 9.5. You can read more about it here:
community.torproject.org/oni…
32
68
US Senator @RonWyden just issued a letter to the nation's inspectors general, urging them to consider using SecureDrop & @torproject to protect the identity of whistleblowers (PDF):
wyden.senate.gov/imo/media/d…
5
56
110
Eight years ago today, the late Aaron Swartz issued the first commit to SecureDrop, which was then called DeadDrop. Today, its maintainers at @FreedomofPress honor Aaron and the community of contributors forwarding his work for yet another year.
2
51
109
We have temporarily removed SecureDrop instances using Ubuntu 14.04 on their servers from the SecureDrop Directory, as this version of the OS has reached end-of-life for security updates.
If you were using SecureDrop to communicate with an impacted news organization:
1
2
🚨 🚨 🚨
More than 30 organizations have already upgraded their SecureDrop servers to Ubuntu 16.04. Have you upgraded yet? Less than 3 weeks to go until the April 30 deadline! We are happy to assist:
securedrop.org/news/advisory…
1
1
4
🚨 🚨 🚨
More than 20 organizations have already upgraded their SecureDrop servers to Ubuntu 16.04. Have you upgraded yet? Less than 4 weeks to go until the April 30 deadline! We are happy to assist:
securedrop.org/news/advisory…
1
2
🚨 🚨 🚨
Reminder: Ubuntu 14.04 reaches end-of-life for security updates on April 30. If you have not already upgraded your SecureDrop servers to Ubuntu 16.04, you must do so before then (we can help!):
securedrop.org/news/advisory…
3
5
If you work for a tech company and your conscience is compelling you to speak up, you can share information anonymously and securely with the press:
15
21
Huge thanks to our friends at @L10nLab, who coordinated dozens of translators with us to get @SecureDrop in six non-English languages—with more to come!
1
12
32
SecureDrop is now available in six non-English languages. Interested in localizing @SecureDrop for your country? We would love your help! Go here: weblate.securedrop.club/proj…
3
3
Our eternal thanks to all the amazing volunteer translators who helped with the effort to internationalize @SecureDrop.
It was a huge effort, and could not have been done without them.
6
17
Great news: @SecureDrop now supports six non-English languages, with more coming soon.
1. French
2. Spanish
3. Portugese
4. German
5. Norwegian
6. Dutch
securedrop.org/news/securedr…
4
43
74
The @NYTimes is getting 50-100 tips a day through its secure contact page, which includes @SecureDrop. poynter.org/2017/psssst-the-…
2
58
68
Another week, and another important story from @theintercept received through @SecureDrop theintercept.com/2016/10/23/…
60
51
Yet another good story in @the_intercept with a tip gleaned from @SecureDrop theintercept.com/2016/04/08/…
3
32
28
SecureDrop survives on your generous donations. Please keep us in mind this #GivingTuesday securedrop.org/donate
16
13
SecureDrop Lead Developer @garrettr_ will be giving an update on the project shortly: piped.video/watch?v=qle9UvJG…
2
1
Not at the Internet Archive for the Aaron Swartz Day Hackathon? Tune in to the live stream here: piped.video/watch?v=qle9UvJG…
2
5
The @ACLU highlights @SecureDrop in submission to UN Special Rapporteur about encryption aclu.org/sites/default/files…
2
26
13
Watch: @SecureDrop—A #WikiLeaks in Every Newsroom, presentation at @HOPEX feat. @garrettr_ @legind @bcrypt piped.video/watch?v=vkd4cLPR…
2
5
4
Headed to @HOPEX in NYC next weekend? Be sure to stop by the @FreedomofPress vendor booth for some stickers.
2
6
8
Sneak preview of the upcoming @SecureDrop re-design, courtesy of @micahflee: i.imgur.com/HL7Z5oG.png
4
10
7
Check out the amount of new commits to @SecureDrop in the last 2 months, compared to the previous year and a half:
5
2