Translated material
Securedrop - a platform for the safe communication of journalists and human rights activists
Securedrop - open source platform, which allows news media organizations anonymously and safely receive information and communicate with journalists and human rights activists.
Initially, the platform was called Deaddrop and was developed by Aaron Swartz together with Kevin Poulsen and James Dolan . After the death of Aaron Schwartz at the age of 26, on January 11, 2013, the Freedom of the Press Foundation Press Freedom Freedom Freedom Freedom Freedom Freedom Freedom Freedom .
According to Wikipedia , at the moment, securedrop is used by organizations such as The New Yorker, Forbes, Bivol, Propublica, The Intercept, San Francisco Bay Guardian, The Washington Post, The Guardian, the Globe And Mail and Canadian BroadCasting Corporation.
How mediaorganes can be installed by securedrop
Any organization can set Securedrop for free, as well as make changes, as an open source project. The platform has detailed installation instructions .
The Freedom Freedom of the press provides assistance to organizations in the installation and use of securedrop to train journalists as much as possible to protect the sources of the information transferred by him.
For commercial projects, the use of securedrop is paid. These funds go to the development and support of the project.
How Securedrop works
The platform uses two physical servers: the first server on the public side that stores messages and documents, and the second server that monitors the security of the first.
The web application in the form of a site on a public server accepts messages and documents from the Internet and encrypts them for safe storage. This site is available only through Tor, thereby hiding the data from both the Securedrop server itself and from external attacks. This communication format can be compared with the usual form of feedback on the site, only safer.
Each user who visits the site receives a unique code name that allows you to establish communication with news organizations without revealing a real person and without using e -mail.
In order to read the answers from journalists working in organizations where information was sent, the user needs to enter his code name and identifier. All information is collected in a single collection, such as a branch of mails in the mail.
What technologies does Securedrop use
Securedrop did not invent the wheel and uses a set of reliable tools and applications to ensure the safety and anonymity of information sources. Among them - Tor , Gnupg - encryption, Apache , Ossec , Ubuntu , Tail operating system.
The Securedrop (in English) guide includes a study that shows that 9 out of 10 surveyed organizations regularly receive important information, which is further published or used by news resources. It is not possible to obtain more accurate information, since all the data is anonymous and encrypted.