This session will introduce SecureDrop, a free and open source whistleblowing platform. We will describe how it addresses the critical need for a way for journalists and sources to communicate securely and anonymously. Many large news organizations including the Associated Press (AP), the Guardian, the Washington Post and the New York Times are all now running SecureDrop in their newsrooms to preserve an anonymous tip line in the presence of increasing surveillance powers by governments and corporations. We will describe how SecureDrop works, how you can install it, and how you can contribute to the project.
Motivation and history of the project
Walkthrough of the current workflow from the perspective of sources and journalists
Overview of the current decentralized deployment strategy
Deployment/installation considerations for news organizations
Architecture overview: how SecureDrop uses Tor onion services everywhere to protect the anonymity of users
Leveraging Qubes for VM-based isolation in the journalist workflow to compartmentalize sources and submissions
Talk will be 20 minutes with 10 minutes questions
Speakers: Jennifer Helsby