Interest Article

All news
Interest Article

Security at every step: how we’re checking SecureDrop landing pages

How do whistleblowers find out about a news organization’s SecureDrop? The most common answer is a landing page, an ordinary web page hosted by the organization operating a SecureDrop. It explains how sources can download the Tor browser, and how they can safely connect to the onion address of ... Read More

Interest Article

Advisory: Preparing for the server upgrade from Ubuntu 14.04 to 16.04

On 30 April 2019, Ubuntu 14.04 LTS (Long Term Support) will reach End of Life. After this date, no new security updates to the base operating system will be provided. It is therefore of critical importance for the security of all SecureDrop instances to upgrade to the next version ... Read More

Interest Article

Third party audit of integrated SecureDrop Workstation completed

The SecureDrop team is currently working on an integrated SecureDrop Workstation that combines the previously separate Journalist Workstation and Secure Viewing Station into a single device, based on Qubes OS. This represents a potential major change to the SecureDrop architecture and threat model, which is why we have sought independent ... Read More

Interest Article

Advisory: Automatic Update Failure from Version 0.10.0 to 0.11.0 on Some SecureDrop Instances

Ordinarily, updates to the SecureDrop servers are performed automatically within 24 hours of a release. After the release of SecureDrop 0.11.0 on December 11, our monitoring service indicated that some SecureDrop instances were not updated as expected. Instances known to be impacted were set up before SecureDrop version 0.4 (released July 25, 2017). Read More

Interest Article

Join us for a SecureDrop hackathon at Aaron Swartz Day this weekend in San Francisco

Photograph of Aaron Swartz by Sage Ross, Creative Commons Attribution/Share-Alike LicenseAaron Swartz was a brilliant computer scientist, a passionate digital rights activist, and a dear friend to many. He believed fiercely in freedom of speech and information, and dedicated his brief but full life to building the open web ... Read More

Interest Article

Advisory: Server installation failure with UEFI boot mode

Update, October 25: The upstream issue causing the problem described in this advisory has been resolved. If you encounter this problem again during the installation, please let us know by filing a bug report. During a SecureDrop installation against servers with with UEFI boot mode enabled, the ./securedrop-admin install command ... Read More

Interest Article

Advisory: Installation/Workstation Update Failure on Tails 3.9

A configuration error in Tails 3.9 will cause the following operations to fail: Installing SecureDrop using an Admin Workstation running Tails 3.9 Updating the SecureDrop code on an Admin or Journalist workstation running Tails 3.9 The securedrop-admin setup step will fail with the following error: W: The ... Read More

Interest Article

Come to the SecureDrop Hackathon at EFF in San Francisco on August 15th

Come work on SecureDrop at the Electronic Frontier Foundation offices on Wednesday, August 15, 2018! Event details:  Location: 815 Eddy St, San Francisco, CA 94109  Date: 6:00PM to 9:00PMSecureDrop is a whistleblower submission system that media organizations use to securely accept documents from and communicate with anonymous sources ... Read More