Brussels / 3 & 4 February 2018


Anonymous Whistleblowing with SecureDrop

This session will introduce SecureDrop, a free and open source whistleblowing platform. We will describe how it addresses the critical need for a way for journalists and sources to communicate securely and anonymously. Many large news organizations including the Associated Press (AP), the Guardian, the Washington Post and the New York Times are all now running SecureDrop in their newsrooms to preserve an anonymous tip line in the presence of increasing surveillance powers by governments and corporations. We will describe how SecureDrop works, how you can install it, and how you can contribute to the project.

  • Motivation and history of the project

  • Walkthrough of the current workflow from the perspective of sources and journalists

  • Overview of the current decentralized deployment strategy

  • Deployment/installation considerations for news organizations

  • Architecture overview: how SecureDrop uses Tor onion services everywhere to protect the anonymity of users

  • Leveraging Qubes for VM-based isolation in the journalist workflow to compartmentalize sources and submissions

Talk will be 20 minutes with 10 minutes questions


Jennifer Helsby (redshiftzero)