2026-09-11T18:57:10Z https://nostr.now SecureDrop https://nostr.now/npub1npddzeaty9as02n2a6u4jessta4aj2jezmy7sa0faz0m6990lk5sv402r2 https://cdn.masto.host/socialfreedompress/accounts/avatars/113/483/834/080/411/219/original/98eec2c978feb318.png https://cdn.masto.host/socialfreedompress/accounts/avatars/113/483/834/080/411/219/original/98eec2c978feb318.png https://nostr.now/nevent1qqszer6gr2cu0jg08lcdw5p3uw9je9zhkgwj6s6y02q660jnh0m3g9szyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jrqek5e We have updated our guidance for sources, to warn against using AI chatbots or services linked to their personal identity.<br/><br/>We also strongly recommend that newsrooms using SecureDrop update their landing pages with these new warnings.<br/><br/><a href="https://securedrop.org/news/updated-landing-page-guidance/">https://securedrop.org/news/updated-landing-page-guidance/</a><br/><br/>#OpenSource #Whistleblowing 2026-09-24T20:16:38Z https://nostr.now/nevent1qqs2dsv0a2u2d2l65mr0kcecezg78ek8unk8vkd62s46pq96zhgrtqszyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jry93fh We will be rotating the SecureDrop release signing key next year.<br/><br/>This is a routine signing key rotation as a best practice; the current key is still secure and in active use.<br/><br/>The new key will be distributed in releases later this year and start signing releases in 2027.<br/><br/><a href="https://securedrop.org/news/new-release-signing-key/">https://securedrop.org/news/new-release-signing-key/</a><br/><br/>#OpenSource #Whistleblowing #OpenPGP 2026-09-10T14:35:02Z https://nostr.now/nevent1qqsr6ayf6gjgfyac0s7rdl734m0f2vtrmvptemgmnuwjxuyv9t4vgsqzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j9gutz7 SecureDrop Inbox 1.6.0 is now available! <br/><br/>This release adds support for double-encrypted messages and files, improves the source menu, and includes a small speedup to the sync process.<br/><br/><a href="https://securedrop.org/news/securedrop-inbox-1_6_0-released">https://securedrop.org/news/securedrop-inbox-1_6_0-released</a><br/><br/>#OpenSource #Whisleblowing 2026-08-05T17:58:03Z https://nostr.now/nevent1qqsv5sjmuanv7zshz7fmtuy70kjny3pw46gp8ssc8pumv6mvjcrp7jczyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jl6u3cu &#34;It could be as significant an upgrade as HTTPS.&#34;<br/><br/>A nice explainer of WEBCAT, our project to make JavaScript tamper-proof and the web a safer place for everyone:<br/><br/><a href="https://blog.siv.org/2026/07/verifiable-web-code">https://blog.siv.org/2026/07/verifiable-web-code</a> 2026-07-28T18:03:00Z https://nostr.now/nevent1qqs0qa6qxdhrlth25wr5fnfkstg3tl8lx6l5upcg2jly370jxqmuw2qzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jhkrrm6 SecureDrop 2.16.0 is now available, with a number of improvements to APIv2, and a fix for a low-severity security vulnerability:<br/><br/><a href="https://securedrop.org/news/securedrop-2_16_0-released/">https://securedrop.org/news/securedrop-2_16_0-released/</a><br/><br/>#OpenSource #Whistleblowing 2026-06-24T14:28:22Z https://nostr.now/nevent1qqs9p37dmksxa9f0w4x928nzagrtgpkady7xekceczcajyajstx5uxszyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jw7ncza Qubes 4.2 is now end-of-life. All SecureDrop Workstation users should be using Qubes 4.3.<br/><br/>If you have not upgraded, please contact support immediately.<br/><br/><a href="https://securedrop.org/news/qubes-4_2-is-end-of-life/">https://securedrop.org/news/qubes-4_2-is-end-of-life/</a><br/><br/>#OpenSource #Whistleblowing #Qubes 2026-06-22T14:08:53Z https://nostr.now/nevent1qqsr8s3g3y4j6qzl4t2uj8mses73954pluztpch28vlfg0ale6c79egzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jr9sda0 SecureDrop Inbox 1.3.2 is now available! <br/><br/>This update adds warnings and safeguards when deleting large numbers of sources.<br/><br/><a href="https://securedrop.org/news/securedrop-inbox-1_3_2-released">https://securedrop.org/news/securedrop-inbox-1_3_2-released</a><br/><br/>#OpenSource #Whistleblowing 2026-06-03T21:15:56Z https://nostr.now/nevent1qqsvwh4ghkyt854nfg6f7vfmhhfdd39kxknljkf65vpudxdxp6gfayqzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j2nnehn SecureDrop Workstation 1.6.2, for Qubes 4.2, and 1.7.1, for Qubes 4.3, are now available!<br/><br/>These releases remove the legacy SecureDrop Client and enable an upgrade script to make preparing for the Qubes 4.3 upgrade simpler.<br/><br/><a href="https://securedrop.org/news/securedrop-workstation-1_6_2-and-1_7_1-released">https://securedrop.org/news/securedrop-workstation-1_6_2-and-1_7_1-released</a><br/><br/>#OpenSource #Whistleblowing #Electron #Qubes 2026-05-28T20:59:01Z https://nostr.now/nevent1qqs2zv5gdrlav7rj004zghtcvkpv0pdlpawgx434jqrqxgcph9j4y5szyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jtuawfh We&#39;re grateful to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqa3r2ep603h6k68vwdfhkq75g0dmv3sfvtmkdm0gqkrf4jr2zp7dqzag30f" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqa3r2ep603h6k68vwdfhkq75g0dmv3sfvtmkdm0gqkrf4jr2zp7dqzag30f</span> (<span class="italic">nprofile…g30f</span>)</a></span> and Funding the Commons for including us in this crowdfunding campaign alongside nine other cool projects as a new way to fund internet freedom!<br/><br/><a href="https://internetfreedom.torproject.org/projects/securedrop/">https://internetfreedom.torproject.org/projects/securedrop/</a> 2026-05-19T21:08:30Z https://nostr.now/nevent1qqspluzw75n6dcllj2gsx0m20efvru8dkkv0f8emr34jjznjst4m6lczyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j72p3z4 SecureDrop Inbox 1.2.0 is now available! This release increases the number of results returned by search, improves file handling and sync performance, and carries out other internal cleanup. <br/><br/><a href="https://securedrop.org/news/securedrop-inbox-1_2_0-released">https://securedrop.org/news/securedrop-inbox-1_2_0-released</a><br/><br/>#OpenSource #Whistleblowing #Electron #Qubes 2026-05-13T21:52:14Z https://nostr.now/nevent1qqs0gdn0lwjv94jfc0crvsxmscu24u0kheq7s0cdvhvwajs8trfuc8czyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j9xdn9d The inaugural release of SecureDrop Inbox is now available! 🎉<br/><br/>The Inbox is a full rewrite of our client, and includes many new features and performance improvements for journalists.<br/><br/><a href="https://securedrop.org/news/securedrop-inbox-1_0_0-released">https://securedrop.org/news/securedrop-inbox-1_0_0-released</a><br/><br/>#OpenSource #Whistleblowing #Electron #Qubes<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://cdn.masto.host/socialfreedompress/media_attachments/files/116/484/595/631/173/663/original/cbeaa47b81e8b833.mp4"></video> 2026-04-28T22:05:23Z https://nostr.now/nevent1qqsx24vttm82khglgjfnpaukqc6mg3v0qf2wyg77hgsrr3hee9qk5hqzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jswhzfd SecureDrop 2.15.1 is now available, improving memory management while handling APIv2 requests, and fixing an issue with restoring backups without transferring over the network:<br/><br/><a href="https://securedrop.org/news/securedrop-2_15_1-released">https://securedrop.org/news/securedrop-2_15_1-released</a> <br/><br/>#OpenSource #Whistleblowing 2026-04-23T17:42:53Z https://nostr.now/nevent1qqsx8x8gy933twn4jn5hhy649c76dl8gv9r5pnjvyc0fttfjdjg9khqzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j8m4y3v SecureDrop Inbox, the new window into the SecureDrop Workstation, has been rewritten from the ground up to replace the previous client application for existing journalist users.<br/><br/>Improving upon the core functionality, it also includes bug fixes, speed improvements, and a range of new features.<br/><br/><a href="https://securedrop.org/news/new-features-in-securedrop-inbox/">https://securedrop.org/news/new-features-in-securedrop-inbox/</a><br/><br/>#OpenSource #Whistleblowing #Electron #Qubes 2026-04-09T20:53:08Z https://nostr.now/nevent1qqs0q5s4r99h66gzfhf9qvn5n00hq5v64e3ekgz0529msyjv5aygnwgzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j3x5z6c SecureDrop Workstation 1.5.2 has been released, as well as SecureDrop Client 0.17.4. <br/><br/>This update contains multiple security fixes, all of which are low or informational priority. We are not aware of any exploitation in the wild for any vulnerability.<br/><br/><a href="https://securedrop.org/news/securedrop-workstation-1_5_2-released/">https://securedrop.org/news/securedrop-workstation-1_5_2-released/</a><br/><br/>#OpenSource #Whistleblowing #SecureDrop 2026-04-06T20:40:05Z https://nostr.now/nevent1qqsd5zdkcqemts2gy0u6xrvvncplgk5s0vu5g2dczrlvd4nt2psha5gzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jjmvmf2 Web applications are only as trustworthy as the servers that serve them, and servers can get hacked. That’s why we are introducing WEBCAT, a tool allowing web browsers to verify the origin of code before they run it.<br/><br/>🌞 Today, WEBCAT enters alpha testing! If you like to experiment with cutting-edge software, give it a try:<br/><a href="https://securedrop.org/news/webcat-alpha/">https://securedrop.org/news/webcat-alpha/</a> 2026-03-03T18:44:54Z https://nostr.now/nevent1qqs2l94u04k9wdt5mrk0k6jte87cqvnafc5y96v678qpyk86xmkcqgszyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jfrf99x Today we&#39;re releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications.<br/><br/>This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption.<br/><br/><a href="https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/">https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/</a><br/><br/>#SecureDrop #browsers #Tor #whistleblowing #OpenSource 2025-03-19T20:33:25Z https://nostr.now/nevent1qqstnsyz2ynmcz8425t6jl59ye5vc96dlxk0n9vx06swsgqm76k7puczyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jst4j0e SecureDrop 2.12.0 has been released, adding support for Ubuntu Noble, plus a semiautomated upgrade process. Administrators can upgrade themselves before April 15 or wait for our automated upgrade process after that date.<br/><br/><a href="https://securedrop.org/news/securedrop-2_12_0-released/">https://securedrop.org/news/securedrop-2_12_0-released/</a><br/><br/>#security #whistleblowing #OpenSource 2025-03-18T19:07:35Z https://nostr.now/nevent1qqsv86aqe76yyne44n5827cut6t2y06n43nwlhkrxurkjcl8kmgfxrgzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76ja34h8p SecureDrop Workstation 1.0.2 has been released, addressing two security vulnerabilities we found during internal review.<br/><br/>These vulnerabilities would have required prior compromise of other SecureDrop components in order to be exploitable. Nonetheless, we recommend users upgrade ASAP.<br/><br/>More details in the advisory: <a href="https://securedrop.org/news/securedrop-workstation-1_0_2-released/">https://securedrop.org/news/securedrop-workstation-1_0_2-released/</a><br/><br/>#SecureDrop #Whistleblowing #OpenSource 2025-02-13T18:26:19Z https://nostr.now/nevent1qqs8maw47vrxx0wn38ntxyjrgc7fpdqwm6cccgdk7wr58u9f5c7ausczyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jnvs8u2 In reply to <a href='/nevent1qqs82jl7nr6w4zdq3txpsccz8e4u9pyywcjxte8da29e604c4sng5uspz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qc47rle'>nevent1q…7rle</a><br/>_________________________<br/><br/>FOR SOURCES: If you’re considering leaking information, make sure to consider your options and protect yourself. For more information, follow the thread guide to install Tor Browser on a trusted computer and visit:<br/><br/>freedom[dot]press/digisec/blog/sharing-sensitive-leaks-press 2025-01-15T15:56:44Z https://nostr.now/nevent1qqs82jl7nr6w4zdq3txpsccz8e4u9pyywcjxte8da29e604c4sng5uszyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76je2fy29 In reply to <a href='/nevent1qqs9ks9vuk4q8jw0qqh8lj0u442p265e30zcs59zmf6sfy5myyhrz7cpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43q00rh6q'>nevent1q…rh6q</a><br/>_________________________<br/><br/>FOR JOURNALISTS: SecureDrop provides strong security through its use of offline encryption and the Tor network, but sources still need your help to protect themselves, especially in monitored environments.<br/>Find out more: <a href="https://freedom.press/digisec/blog/leaking-clock-what-your-sources-need-know/">https://freedom.press/digisec/blog/leaking-clock-what-your-sources-need-know/</a> 2025-01-15T15:55:46Z https://nostr.now/nevent1qqsx4p07gcf5l0v8q7jfypva4wxwtlc5wlvpa9ws5e6p3ze2dgg2p2szyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76jlea7jn Out of an abundance of caution, SecureDrop administrators should upgrade Admin and Journalist Workstation USBs to Tails 6.11<br/><br/><a href="https://securedrop.org/news/advisory-upgrade-to-tails-611/">https://securedrop.org/news/advisory-upgrade-to-tails-611/</a><br/><br/>#SecureDrop #Whistleblowing #OpenSource 2025-01-10T02:49:33Z https://nostr.now/nevent1qqsrzf3dclggeafenmshf35dy3wapfq4wdprfu3fgkpeyyaz3mpu07czyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j3afauv SecureDrop 2.11.0 has been released. This release lays the foundation for an automated upgrade to Ubuntu 24.04 (Noble) in early 2025. Administrators are encouraged to review the new Noble migration guide before Jan. 31.<br/><br/><a href="https://securedrop.org/news/securedrop-2_11_0-released/">https://securedrop.org/news/securedrop-2_11_0-released/</a><br/><br/>#SecureDrop #Whistleblowing #OpenSource 2024-12-17T23:25:11Z https://nostr.now/nevent1qqs20lkpldw3wne7uqhzedzjenzxc98emjpnl69krret05lvcwgqg8qzyzv945t84vshkpa2dthtjktxzp0khkf2tytvn6r4a85fl0g54l76j5df7th SecureDrop 2.11.0 is scheduled to be released Dec. 17. This release lays the foundation for an automated upgrade to Ubuntu 24.04 (Noble) in early 2025. Administrators are encouraged to review the new Noble migration guide and perform the preparatory steps before Jan. 31.<br/><br/><a href="https://securedrop.org/news/securedrop-2_11_0-pre-release-announcement/">https://securedrop.org/news/securedrop-2_11_0-pre-release-announcement/</a><br/><br/>#SecureDrop #Whistleblowing #OpenSource 2024-12-13T20:54:17Z