Freedom of the Press Foundation Launches SecureDrop, an Open-Source Submission Platform for Whistleblowers

Freedom of the Press Foundation Launches SecureDrop, an Open-Source Submission Platform for Whistleblowers

October 15, 2013

October 15, 2013 San Francisco, CA: Freedom of the Press Foundation has taken charge of the DeadDrop project, an open-source whistleblower submission system originally coded by the late transparency advocate Aaron Swartz. In the coming months, the Foundation will also provide on-site installation and technical support to news organizations that wish to run the system, which has been renamed SecureDrop.

By installing SecureDrop, news organizations around the world can securely accept documents from whistleblowers, while better protecting their sources anonymity. Although it is important to note that no security system can ever be 100 percent impenetrable, Freedom of the Press Foundation believes that this system is the strongest ever made available to media outlets. Several major news agencies have already signed up for installations, and they will be announced in the coming weeks.

Weve reached a time in America when the only way the press can assure the anonymity and safety of their sources is not to know who they are, said JP Barlow, co-founder and board member of Freedom of the Press Foundation. SecureDrop is where real news can be slipped quietly under the door.

Originally created by Swartz in partnership with investigative reporter Kevin Poulsen, SecureDrop is a Python application that accepts messages and documents from the web and encrypts them for secure storage. Each source who uses the platform is assigned a unique codename that lets the source establish a relationship with the news organization without having to reveal her real identity or resort to e-mail.

In addition to installation support, Freedom of the Press Foundation will provide media organizations with instruction on security best practices and long-term technical support. Small media organizations with significant financial need may also apply to Freedom of the Press Foundation for help obtaining hardware. The New Yorker, the first news organization to use the SecureDrop code, through its StrongBox project, will continue to operate its system.

Freedom of the Press Foundation is hiring computer-security specialist James Dolan to help maintain the SecureDrop code, install the system for media organizations, and teach journalists about information security. Dolan previously helped manage the New Yorkers installation of StrongBox, the magazines version of SecureDrop. He also originally reviewed and hardened the security architecture before the initial launch.

Journalists are starting to recognize that sophisticated communications security is a key element in the newsgathering process, Freedom of the Press Foundations Chief Technology Officer Micah Lee said. SecureDrop is the safest way we know for an anonymous source to send information to journalists while protecting their identity.

SecureDrops code has gone through a detailed security audit by a team of University of Washington researchers, led by Alexei Czeskis. Other authors of the audit include renowned security expert Bruce Schneier and Tor developer Jacob Appelbaum. Freedom of the Press Foundation has made a number of updates to SecureDrop based on these findings and will be making a significant investment in continually improving the system.

See more here:
Freedom of the Press Foundation Launches SecureDrop, an Open-Source Submission Platform for Whistleblowers