The Open Source Whistleblower system

17th March, 2022

@kushaldas

https://securedrop.org

@kushaldas

@kushaldas

@kushaldas

Journalist

A journalist is a person who collects, writes, or distributes news or other current information to the public.

Whistleblower

A whistleblower is a person who exposes any kind of information or activity that is deemed illegal, unethical, or not correct within an organization that is either private or public.

@kushaldas

Photo by Chris Barbalis https://unsplash.com/@cbarbalis on Unsplash

@kushaldas

Text

Photo by Claus Grünstäudl https://unsplash.com/@w18

@kushaldas

@kushaldas

@kushaldas

@kushaldas

Let me find a journalist I trust

https://kushaldas.in/tips.html

@kushaldas

Photo by No Revisions https://unsplash.com/@norevisions on Unsplash

@kushaldas

@kushaldas

@kushaldas

@kushaldas

Source

Journalist

Airgapped SVS

@kushaldas

Application Server

@kushaldas

Let us meet the Journalist

@kushaldas

@kushaldas

securedrop-workstation

https://qubes-os.org

@kushaldas

Back in 2013

Encryption works. Properly implemented strong crypto systems are one of the few things that you can rely on.

Unfortunately, endpoint security is so terrifically weak that NSA can frequently find ways around it.

@kushaldas

OPSEC

  • FPF provides digital security training
  • SecureDrop is not only an application

Operating system

+

Applications
+
Physical + Legal access
+

Human OPSEC

Support from FPF 

@kushaldas

Landing page & servers

  • Use HTTPS
  • No subdomain
  • No third party tracker or JS

Standard server hardening steps

@kushaldas

How to contribute?

  • https://github.com/freedomofpress/securedrop
  • https://docs.securedrop.org
  • Gitter chat to talk to other contributors
  • UX discussions

@kushaldas

A special tribute

original work

@kushaldas

Links to various images used from Wikipedia

  • https://commons.wikimedia.org/wiki/File:Antu_folder-cloud.svg
  • https://commons.wikimedia.org/wiki/File:Gateway_firewall.svg
  • https://commons.wikimedia.org/wiki/File:GnuPG-Logo.svg
  • https://en.wikipedia.org/wiki/File:Cloud_computing.svg
  • https://commons.wikimedia.org/wiki/File:Gartoon_actions_1leftarrow.svg
  • https://commons.wikimedia.org/wiki/File:Key-311738.svg
  • https://commons.wikimedia.org/wiki/File:Antu_folder-cloud.svg
  • https://en.wikipedia.org/wiki/File:Tor-logo-2011-flat.svg
  • https://en.wikipedia.org/wiki/File:Laptop.svg
  • https://commons.wikimedia.org/wiki/File:CD_icon_test.svg
  • https://commons.wikimedia.org/wiki/File:Usbdrive_icon.svg

@kushaldas

Thank you

https://kushaldas.in