News organization, journalist or admin targeted by legal action out of scope
THREAT64
· Out of scope: Outside what this threat model covers.
· Defined in catalog.py:1129
- Risk
- Unknown impact × Unknown likelihood = Unknown
- After mitigations
- Unknown impact × Unknown likelihood = Unknown (unchanged)
Legal threats vary greatly by juristidction and are out of the scope of this document
Mitigations
| Mitigation | Status |
|---|---|
| Inform sources and journalists that no tool is perfect via "SecureDrop can contain bugs" text MITIG87 | implemented |
Where it applies
Applies to 1 component in 1 scenario.
Corporate and legal zone · News Organization / Legal
Notes
Existing mitigations: Disclaimer on bottom of page: Like any Software SecureDrop may have bugs (MITIG87). Automated test for mitigation: No.
How this threat is matched
Listed for these components. A boundary covers every component inside it.