Today we're releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications.

This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption.

https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/

Missed out on our presentation at #RightsCon? Don't worry, we've posted the recording and slides of @legoktm's intro to the new #SecureDrop Workstation on our blog.

In 15 minutes, learn about the technology behind the Workstation and how it improves on the classic workflow.

https://securedrop.org/news/rightscon-introduction-to-securedrop-workstation/

Over the next two months, all SecureDrops will have their underlying Ubuntu OS upgraded from 20.04 (“Focal”) to 24.04 (“Noble”).

This is the fifth version of Ubuntu we've supported, and for the first time, we're going to support an automated, in-place upgrade.

Learn about the technical details: https://securedrop.org/news/technical-details-for-the-noble-migration/

Attending #RightsCon in-person or online? Don't miss @legoktm presenting and demoing the new #securedrop Workstation on Tuesday at 4:30pm TST / 3:30am EST!

We’ve seen significant interest in newsrooms setting up SecureDrop to better protect whistleblowers, so we've put together a quick list of 5 key things you should know before setting it up:

https://securedrop.org/news/five-things-to-know-about-securedrop/

#OpSec

#ElectronicFrontierFoundation #EFF
- Surveillance Self-Defense : https://ssd.eff.org

#Signal #SignalApp - https://support.signal.org

#Tails (portable operating system) - https://tails.net

#SecureDrop - https://securedrop.org/overview/

#Tor #TorBrowser - https://www.torproject.org

Test Tor IP - https://check.torproject.org

#Proton - https://proton.me

#Tuta - https://tuta.com

#PrivacyGuides - https://www.privacyguides.org

Activist Digital Security - https://activistchecklist.org

SecureDrop Workstation 1.0.2 has been released, addressing two security vulnerabilities we found during internal review.

These vulnerabilities would have required prior compromise of other SecureDrop components in order to be exploitable. Nonetheless, we recommend users upgrade ASAP.

More details in the advisory: https://securedrop.org/news/securedrop-workstation-1_0_2-released/

Out of an abundance of caution, SecureDrop administrators should upgrade Admin and Journalist Workstation USBs to Tails 6.11

https://securedrop.org/news/advisory-upgrade-to-tails-611/

We're closing off the year with a recap of what we accomplished in October and November in our latest blog post. Also, we're excited to announce that we have new merch available! Check it out:

https://securedrop.org/news/looking-back-at-october-and-november-2024

SecureDrop 2.11.1 has been released. This is a hotfix release to address an issue where multiple OSSEC alerts were being sent in error.

https://securedrop.org/news/securedrop-2_11_1-released/

Almost every platform but the web supports code verification. For web apps that rely on encryption, that's a problem. Here's why: https://securedrop.org/news/browser-based-cryptography/

SecureDrop 2.11.0 has been released. This release lays the foundation for an automated upgrade to Ubuntu 24.04 (Noble) in early 2025. Administrators are encouraged to review the new Noble migration guide before Jan. 31.

https://securedrop.org/news/securedrop-2_11_0-released/

Looking for a gift this holiday season, but also want to support our work? We got you!

New short-run shirt and cap available, grab them before they're gone.

https://freedom-press-store.myshopify.com/

SecureDrop 2.11.0 is scheduled to be released Dec. 17. This release lays the foundation for an automated upgrade to Ubuntu 24.04 (Noble) in early 2025. Administrators are encouraged to review the new Noble migration guide and perform the preparatory steps before Jan. 31.

https://securedrop.org/news/securedrop-2_11_0-pre-release-announcement/

The recording of our State of the Drop 2024 talk that we delivered for Aaron Swartz Day is now available to watch. See our progress over the past year and learn more about the future direction of the project.

https://securedrop.org/news/state-of-the-drop-2024/

#CIJLogan24 is streaming live now, including a panel discussion featuring SecureDrop dev Rowen S on the impact and limitations of encryption technologies for journalism:

https://www.youtube.com/live/gSdaJ5gbpqo

We'll be marking Aaron Swartz Day this year with our annual State of the 'Drop presentation. Find out more here: https://www.aaronswartzday.org/episode-7-aaron-swartz-podcast/

September was a busy month for SecureDrop! Read about the latest happenings in our blog post, the first in a new series of monthly retrospectives: https://securedrop.org/news/looking-back-at-september-2024/