We’re trying something new this month, with a recap of everything the SecureDrop project was up to.

New to the SecureDrop Directory

We welcomed two newcomers to the SecureDrop Directory: News24, a digital news organization from South Africa; and Kenneth R. Rosen, an author and independent journalist. Do you have a SecureDrop instance you’d like to add to the directory? If so, you can submit a request here.

New releases

In September, we released SecureDrop version 2.10.0, following an audit by 7ASecurity. More details can be found in our announcement. We also released SecureDrop Client 0.13.2, a bug-fix release focusing on download improvements.

We are currently working on additional updates to both the server and workstation. For the server, we are preparing for an eventual upgrade to Ubuntu 24.02 “Noble Numbat.” On the client, we are adding support for selecting and deleting multiple sources at once, and working toward further feature milestones in the weeks ahead. Additionally, work is progressing on using openQA to test changes to the workstation as they are developed, to help keep it as robust and stable as possible.

Public appearances

Several members of the SecureDrop team recently attended the annual Qubes OS Summit in Berlin, where we presented a talk titled, “Joys and sorrows of multi-VM app development: a SecureDrop Workstation case study.” You can watch a recording of that talk here.

A SecureDrop team member was also present at RustConf in Montreal, where they had a good time learning from other projects and sharing our experiences with shipping Rust code. They led an unconference session about auditing Rust dependencies, which will hopefully lead to improvements to cargo-vet and other related tools.

Follow our work

Until our next update, you can stay up to date on the latest happenings by following us on Mastodon and subscribing to our RSS feed. Feel free to join our Gitter/Matrix room to talk with us directly.