Passphrases for journalists and admins are generated to be 7 word diceware implemented
MITIG49 · Implemented: In place. · Defined in mitigations.py:103
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Unknown vulnerabilities in Tor (incl. Onion Service cryptography, authentication) THREAT37 | partially mitigated | 6 medium | 6 medium |
| Failure to segregate Securedrop environment from corporate environment or personal environment THREAT120 Legacy (Tails/SVS) | partially mitigated | 6 medium | 6 medium |
| Authentication vulnerability in Journalist interface THREAT13 | mitigated | 6 medium | 4 medium |
| Admin two-factor authentication device is lost or compromised THREAT1 Legacy (Tails/SVS) | accepted | 4 medium | 4 medium |