I'm hopeful an organization will use SecureDrop in India. Redshiftzero: H mm, there is at least one organization that started installing securedrop before their primary language was available - they have not announced yet so i can't share their name yet unfortunately.Įrinm: No need to share the organization name, but if possible, interested in hearing the language that is in need so that we can prioritize finding individuals to support it.ĭachary: I heard of one news organization who was interested in having a SecureDrop in Arabic. Kwadronaut: There's French and Dutch at however, it can be improved a lot (ie: showing the right content depending on accept language header).Įrinm: Have any organizations asked for localization support for a language not currently available? One more note on the onion service question: one challenge we have for migrating the journalist and SSH interfaces away from v2 onion services is that we make heavy use of a feature of v2 onion services that provides client auth (HidServAuth) which makes it such that only users that have a special cookie can even connect - that is not yet in v3 onion services but hopefully will be soon.Įrinm: On that note, do you have more examples of organizations, media or otherwise, currently using SecureDrop? And do you know of any using localized versions in particular? Redshiftzero: so for background v3 onion services are Tor's latest version of onion services which provide server anonymity (the changes in v3 are described in brief ) - we are not supporting v3 of Tor onion services yet, but we plan to migrate the source interfaces over (tracking here: ) ![]() Redshiftzero: instances are administered by the news organization or non-profit itself (usually by their IT staff)ĭ: Do securedrop supports the new V3 of Tor? greenpeace - using securedrop, but i'm not sure of any in the HRO context off the top of my head.ĭ: Do the instances hosted by the people get administered by the Securedrop team or by them? Redshiftzero: W e do have some organizations that aren't news orgs - e.g. Most of them need to get out of Dropbox / Google Drive and self-host with something like Nextcloud. ![]() Do you have any examples of use within HROs yet?ĭachary: Some human right organizations need very high level of security and SecureDrop. Redshiftzero: Any organization that has a need to get data from anonymous people might benefit from a securedrop instance.Įrinm: So the tool can really apply to more than just "traditional" media organizations.ĭkaurin: Awesome-I think that would be useful for folks to know. Provides a high level view of the flow for sources / journalists.ĭkaurin: And with that actually-are there other use cases for SecureDrop? For human rights organizations, for example. And in addition to what points to, is a demo dedicated to localizers, with frequent updates with the latest strings. Redshiftzero: As a journalist it is relatively easy to use and does not require special technical skill, but to administer the securedrop instance you do need to find someone who is comfortable doing basic linux administration.Ī technically skilled journalist can also act an administrator (we have people doing this in a few cases) but most commonly they are separate roles.Īnd there is a demo of the web application that journalists use at: if you use the credentials on the page after clicking on "journalist interface."ĭachary: From a localizer point of view, SecureDrop is super easy: there only are ~250 strings to translate. Hackers are good at refurbishing used hardware that cost very little.ĭkaurin: How easy is SecureDrop to use? What level of technical skill would one need? I actually haven’t seen a demo, Idt. for journalists that are not technically oriented finding a volunteer admin (someone like )) is usually the most common way to get a securedrop up and running for a single journalist.ĭachary: I was also able to provide hardware (because 1.5k is a lot of money for a journalist). Redshiftzero: Y eah right now in terms of financial costs you need to spend about 1.5k in hardware but reusing older hardware can help. I actively support a few french investigative journalists who do not have the means to pay for professional support. If you're in Europe, there are a few volunteers who can help. If you're in the USA, Freedom of the Press Foundation would be the non-profit to go to and ask for help. ![]() Erinm: We have one question from twitter: "How can freelancers, without institutional support of a big media company, install secure-drop or ensure they have a similar facility for whistle-blowers to contact them securely? Independents with specific beats could really use this functionality but don't have the resources."ĭachary: It really depends on which country you live in.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |