All SecureDrop and tor releases (Release file and tag) signed with airgapped key implemented
MITIG46 · Implemented: In place. · Defined in mitigations.py:95
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Github is compomised THREAT50 | accepted | 6 medium | 6 medium |
| Compromise package build servers THREAT51 | mitigated | 6 medium | 6 medium |
| Malicious code introduced in SecureDrop repository THREAT28 | mitigated | 6 medium | 3 low |
| Malicious code introduced in SecureDrop release THREAT29 | mitigated | 6 medium | 3 low |
| SecureDrop APT servers are compromised or APT server man-in-the middle attack with malicious packages. THREAT54 | mitigated | 6 medium | 3 low |
| Tor (now FPF) apt repo compromised THREAT44 | mitigated | 3 low | 3 low |