Source guide contains some OPSEC considerations implemented
MITIG86 · Implemented: In place. · Defined in mitigations.py:208
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| DNS requests to news organization's subdomain for SecureDrop landing page, freedom.press, torproject.org Tor activity, SD submissions may be correlated THREAT73 | inform | 12 high | 9 high |
| Source reveals that they are using securedrop/leaking documents THREAT76 | partially mitigated | 9 high | 6 medium |
| Source activity is compromised via physical surveillance (e.g.: camera) THREAT131 | partially mitigated | 6 medium | 6 medium |
| Source uses employer/corporate device THREAT78 | inform | 6 medium | 4 medium |
| Source searches for SecureDrop on search engines THREAT156 | accepted | 4 medium | 4 medium |
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Source submits identifying information THREAT88 | partially mitigated | 9 high | 9 high |
| Source visits torproject.org THREAT91 | accepted | 8 high | 8 high |
| Source visits securedrop.org, freedom.press THREAT92 | partially mitigated | 8 high | 8 high |