Notices by SecureDrop (securedrop@social.freedom.press)

SecureDrop 2.16.1, which fixes a low-severity security issue, is now available.

If your instance was affected, administrators will need to take manual action to rotate credentials.

https://securedrop.org/news/advisory-securedrop-2_16_1-released

#OpenSource #Whistleblowing

SecureDrop 2.16.0 is now available, with a number of improvements to APIv2, and a fix for a low-severity security vulnerability:

https://securedrop.org/news/securedrop-2_16_0-released/

#OpenSource #Whistleblowing

SecureDrop Inbox 1.2.0 is now available! This release increases the number of results returned by search, improves file handling and sync performance, and carries out other internal cleanup.

https://securedrop.org/news/securedrop-inbox-1_2_0-released

#OpenSource #Whistleblowing #Electron #Qubes

RE: https://social.freedom.press/@securedrop/116376731571291768

We're getting closer to the release of the brand new SecureDrop Inbox — today we're publishing results from the security audit we commissioned to ensure it's safe before putting it in the hands of journalists.

https://securedrop.org/news/audit-of-securedrop-inbox-completed/

SecureDrop 2.14.0 has been released. This release ensures KeePassXC remains installed on Tails. It also lays groundwork for the upcoming SecureDrop App.

https://securedrop.org/news/securedrop-2_14_0-released/

#OpenSource #Whistleblowing #SecureDrop

SecureDrop 2.12.5 has been released. This version upgrades 100% of Application Servers to Ubuntu Noble. We will begin upgrading Monitor Servers later this week.

https://securedrop.org/news/securedrop-noble-upgrade-progress/

#security #whistleblowing #OpenSource

SecureDrop 2.12.3 has been released. This version upgrades about 40% of servers to Ubuntu Noble, and fixes a bug where failing the pre-upgrade migration check could disable automatic updates.

https://securedrop.org/news/securedrop-2_12_3-released/

#security #whistleblowing #OpenSource

We’ve seen significant interest in newsrooms setting up SecureDrop to better protect whistleblowers, so we've put together a quick list of 5 key things you should know before setting it up:

https://securedrop.org/news/five-things-to-know-about-securedrop/

#SecureDrop #security #whistleblowing #OpenSource

Almost every platform but the web supports code verification. For web apps that rely on encryption, that's a problem. Here's why: https://securedrop.org/news/browser-based-cryptography/

#SecureDrop #Whistleblowing #OpenSource

SecureDrop's fediverse presence is now hosted on Freedom of the Press Foundation's organizational Mastodon server. 🎉

Follow us here at securedrop(at)freedom(dot)press for project updates.