SecureDrop is a whistleblowing platform originally created in 2012 for journalists to accept leaked documents safely from anonymous sources. It's used by dozens of news organizations including The Guardian, The Washington Post and The New York Times.
This talk introduces the SecureDrop Workstation, the next-generation platform aimed at helping journalists communicate with sources in a high-security environment.
Based on Qubes OS, the SecureDrop Workstation leverages Xen hypervisor isolation to manage sensitive source material safely, including viewing, archiving, and processing documents. The talk will review the results of the recent security audit focusing on the Workstation, and outline future directions for the project as it approaches general availability.