The Open Source Whistleblower system

Nullcon19

@kushaldas

https://securedrop.org

@kushaldas

https://freedom.press

@kushaldas

Journalist

A journalist is a person who collects, writes, or distributes news or other current information to the public.

Whistleblower

A whistleblower is a person who exposes any kind of information or activity that is deemed illegal, unethical, or not correct within an organization that is either private or public.

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

@kushaldas

Source

Journalist

Airgapped SVS

@kushaldas

Application Server

@kushaldas

Back in 2013

Encryption works. Properly implemented strong crypto systems are one of the few things that you can rely on.

Unfortunately, endpoint security is so terrifically weak that NSA can frequently find ways around it.

@kushaldas

OPSEC

  • FPF provides digital security training
  • SecureDrop is not only an application

Operating system

+

Applications
+
Physical + Legal access
+

Human OPSEC

Support from FPF 

@kushaldas

Landing page & servers

  • Use HTTPS
  • No subdomain
  • No third party tracker or JS

Standard server hardening steps

@kushaldas

securedrop-workstation

https://qubes-os.org

@kushaldas

How to contribute?

  • https://github.com/freedomofpress/securedrop
  • https://docs.securedrop.org
  • Gitter chat to talk to other contributors
  • Daily standup video call
  • UX discussions

@kushaldas

A special tribute

original work

@kushaldas

Links to various images used from Wikipedia

  • https://commons.wikimedia.org/wiki/File:Antu_folder-cloud.svg
  • https://commons.wikimedia.org/wiki/File:Gateway_firewall.svg
  • https://commons.wikimedia.org/wiki/File:GnuPG-Logo.svg
  • https://en.wikipedia.org/wiki/File:Cloud_computing.svg
  • https://commons.wikimedia.org/wiki/File:Gartoon_actions_1leftarrow.svg
  • https://commons.wikimedia.org/wiki/File:Key-311738.svg
  • https://commons.wikimedia.org/wiki/File:Antu_folder-cloud.svg
  • https://en.wikipedia.org/wiki/File:Tor-logo-2011-flat.svg
  • https://en.wikipedia.org/wiki/File:Laptop.svg
  • https://commons.wikimedia.org/wiki/File:CD_icon_test.svg
  • https://commons.wikimedia.org/wiki/File:Usbdrive_icon.svg

@kushaldas

Thank you

Slides ideas from: Jennifer Helsby & Conor Schaefer