Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Copyedit and update Source Guide #4880

Merged
merged 4 commits into from Oct 23, 2019
Merged

Copyedit and update Source Guide #4880

Changes from 3 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
abb2a90
Copyedit and update Source Guide
eloquence Oct 7, 2019
53e978e
Address review comments
eloquence Oct 11, 2019
8375ee5
Further emphasize benefits of Tails usage
eloquence Oct 17, 2019
85e6e96
Add disclaimer-ish notice and link to FPF guide
eloquence Oct 22, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
167 changes: 124 additions & 43 deletions docs/source.rst
View file
Open in desktop
Expand Up @@ -4,73 +4,156 @@ Source Guide
Choosing the Right Location
---------------------------

When national security is involved, we suggest you buy a new computer,
a USB key and pay cash. In any case you must then find a busy
coworking place or cyber cafe you don't regularly go to and sit at a
place with your back to a wall to avoid cameras capturing information
on your screen or keystrokes.
When national security is involved, we suggest you buy a new computer and a
USB flash drive, using cash. In any case you must then find a busy coworking
place or cyber cafe you don't regularly go to and sit at a place with your back
to a wall to avoid cameras capturing information on your screen or keystrokes.

Get the Tor Browser
-------------------

Each SecureDrop instance has a publicly available *Source Interface*: a website where sources can create anonymous accounts, submit files and messages, and check back for replies.
Each SecureDrop instance has a publicly available *Source Interface:* a website
where sources can create anonymous accounts, submit files and messages, and
check back for replies.

Each *Source Interface* is only available as an onion service, which is a
special type of website with an address ending in ".onion" that is only
accessible through Tor. Tor is an anonymizing network that makes it difficult
for anybody observing the network to associate a user's identity (e.g., their
computer's IP address) with their activity (e.g., uploading information to
SecureDrop).

The easiest and most secure way to use Tor is to download the Tor Browser from
the `Tor Project website`_. The Tor Browser is a modified version of the Firefox
web browser. It was designed to protect your security and anonymity while
using Tor. If there is a chance that downloading the Tor Browser raises
suspicion, you have a few alternatives, for example:

* If your mail provider is less likely to be monitored, you can send a mail to
gettor@torproject.org with the text "linux", "windows" or "osx" in the body
(for your preferred operating system) and a bot will answer with instructions.
* You can download a copy of the Tor Browser for your operating system from the
`GitLab mirror <https://gitlab.com/thetorproject/gettorbrowser/tree/torbrowser-releases>`__.
maintained by the Tor team.

While using the Tor Browser on your personal computer helps hide your activity
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Another fact worth stating here is that in its default configuration, Tor does not hide the fact that you are using Tor

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, added a note to that effect in 53e978e. I agree this is an important -- potentially life-altering -- warning to have, but am also worried about people completely misunderstanding it. What do you think about this wording, does it strike the right balance?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK—is this, then, validation @emkll that we should take more aggressive measures at the beginning of the Source UI to get users to change their Tor browser's security settings? Relevant to this one edit—let's be sure to give them clear guidance that WILL assuredly protect them, and let them know that, if indeed it is decided to state that in its default config Tor will not conceal their use of Tor. It's ok to make extreme statements, but only if we offer direct remedies for users to take to protect themselves.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In this (very specific case), I don't think the Tor browser settings would change much to the overall risk. This is a subset of the first contact problem, where we need to bring more awareness about Tor and its properties more generally. This might, in the future, be useful language to include in landing pages, but I think that for now a disclaimer is warranted and also the best we can do. The wording seems quite good to me in 53e978e

on the network, it leaves traces of its own installation on your local
machine. Your operating system may keep additional logs, for example, of the
last time you used Tor Browser.

In general, when you are trying to stay anonymous, many time-saving features of
your computer or phone turn into threats: bookmarks, recommendations,
synchronization features, shortcuts to frequently opened files, and so on. It
is very easy to make small mistakes that can endanger your anonymity, especially
if you use the same device for any other purpose.

For greater deniability and security, we recommend booting into the
`Tails operating system`_ (typically from a USB stick). Tails is specifically
designed to run on your computer without leaving traces of your activity or
saving logs. It automatically routes all of your Internet browsing through Tor
so you can easily access SecureDrop safely.

Even if you are using a dedicated computer for your SecureDrop activity that you
have never used and will never use for anything else, we recommend also using
Tails to avoid leaving traces of your activity on the computer's hard disk, in
your ISP's logs, or on cloud services.

.. important::

Tor protects your anonymity, but third parties who can monitor your network
traffic can detect *that you are using Tor*. They may even be able to do so
long after your browser session, using network activity logs. This is why we
recommend using Tor Browser from a cybercafe or coworking space you do not
visit regularly.

Each Source Interface is only available as a *Tor Hidden Service*, which is a special type of website with an address ending in ".onion" that is only accessible through Tor. Tor is an anonymizing network that makes it difficult for anybody observing the network to associate a user's identity (e.g. their computer's IP address) with their activity (e.g. uploading information to SecureDrop).
.. _`Tor Project website`: https://www.torproject.org/
.. _`Tails operating system`: https://tails.boum.org/

The easiest and most secure way to use Tor is to download the Tor Browser from the `Tor Project website`_. The Tor Browser is a modified version of the Firefox web browser designed to protect your security and anonymity while using Tor. If there is a chance that downloading the Tor Browser raises suspicion, you have a few alternatives.
Choose Who to Submit To
-----------------------
We recommend conducting all research related to your submission in Tor Browser.
If you are unsure whether you are using Tor, you can visit the address
https://check.torproject.org.

* If your mail provider is less likely to be monitored, you can send a mail to gettor@torproject.org and a bot will answer with instructions
* If you routinely use GitHub, you can use it to `download the Tor Browser <https://github.com/TheTorProject/gettorbrowser>`__
All organizations operating SecureDrop have a *Landing Page* that provides their
own organization-specific recommendations for using SecureDrop. We encourage you
to consider an organization's *Landing Page* before submitting to them.

Once you have the Tor Browser, launch it and enter the ".onion" address for the Source Interface of the organization that you wish to submit to. You can find this address on the organization's *Landing Page*, or listed on the SecureDrop Directory.
.. note::

While using the Tor Browser on your personal computer helps hide your activity on the network, it leaves traces (of its own installation) on your local machine. For even more deniability, we recommend booting into a live system such as `Tails`_ for a higher level of security. Tails is specifically designed to run on your computer without leaving traces of your activity, and automatically routes all of your Internet browsing through Tor so you can easily access SecureDrop safely.
Each SecureDrop instance is operated and administered independently by
the organization you are submitting to. Only the journalists associated
with that organization can see your submissions.

.. _`Tor Project website`: https://www.torproject.org/
.. _`Tails`: https://tails.boum.org/
Most organizations make their *Landing Page* prominently accessible from their
main website's homepage (for news organizations, typically under sections called
"Tips" or "Contact us"). You can also find an incomplete list of organizations
accepting submissions through SecureDrop in the `SecureDrop Directory`_
maintained by Freedom of the Press Foundation.

Using the Tor Browser, find the ".onion" address for the *Source Interface* of
the organization that you wish to submit to.

Choose Who to Submit To
-----------------------
.. tip::

Each SecureDrop instance is totally independent, and submissions to that instance are only available to journalists associated with that organization.
If the organization does have an entry in the SecureDrop Directory, we
recommend comparing the address of the entry with the one on the
organization's own *Landing Page*.

All organizations have a *Landing Page* that provides their own organization-specific recommendations for using SecureDrop. We encourage you to consider an organization's *Landing Page* before submitting to them.
If the two addresses don't match, please do not submit to this organization
yet. Instead, please `contact us <https://securedrop.org/report-an-error>`__
through the SecureDrop Website, using the Tor Browser. For additional
security, you can use our .onion service address in Tor:

Most organizations make their *Landing Page* prominently accessible from their main website's homepage. You can also find an incomplete list of organizations accepting submissions through SecureDrop on the `SecureDrop Directory`_ maintained by Freedom of the Press Foundation.
``secrdrop5wyphb5x.onion/report-an-error``

We will update the directory entry if the information in it is incorrect.

Once you have located the ".onion" address, copy it into the address bar in Tor
Browser to visit the organization's *Source Interface*.

.. _`SecureDrop Directory`: https://securedrop.org/directory

Making Your First Submission
----------------------------

Open the Tor Browser and navigate to the .onion address for the SecureDrop
Source Interface you wish to make a submission to. The page should look similar
*Source Interface* you wish to make a submission to. The page should look similar
to the screenshot below, although it will probably have a logo specific to the
organization you are submitting to.
organization you are submitting to:

|Source Interface with Javascript Disabled|

If this is the first time you're using the Tor Browser, it's likely that you
have JavaScript enabled and that the Security Setting that the Tor Browser provides
is set to "Low". If you do, there will be a purple warning banner at the top of
the page that encourages you to disable JavaScript and turn up the **Security Setting** to **Safest**:
have JavaScript enabled and that the Tor Browser's security setting is set
to "Low". In this case, there will be a purple warning banner at the top of
the page that encourages you to disable JavaScript and change the security
setting to "Safest":

|Source Interface Security Slider Warning|

Click the **Security Setting** link in the warning banner and a
message bubble will pop up explaining how to disable JavaScript and configure your security properly:
Click the **Security Setting** link in the warning banner, and a message bubble
will pop up explaining how to adjust this setting:

|Fix Javascript warning|

Follow the instructions and the page should refresh automatically. Note
that this will change your security settings and disable JavaScript for every page in your
Tor Browser, and this setting will persist across browser sessions.
Follow the instructions, and the security setting in Tor Browser should look
similar to this screenshot:

|Security Slider|

The page should look similar to the screenshot below. If this is the first
time you are using SecureDrop, click the **Get Started** button.
.. note::

The "Safest" setting disables the use of JavaScript on every page you visit
using Tor Browser, even after a browser restart. This may cause other
websites you visit using Tor Browser to no longer work correctly, until
you adjust the Security Setting again. We recommend keeping the setting at
"Safest" during the entirety of the session in which you access an
organization's SecureDrop instance.

The SecureDrop *Source Interface* should now refresh automatically and look
similar to the screenshot below. If this is the first time you are using
SecureDrop, click the **Get Started** button.

|Source Interface with Javascript Disabled|

Expand All @@ -96,7 +179,7 @@ Once you have generated a codename and put it somewhere safe, click
You will next be brought to the submission interface, where you may
upload a document, enter a message to send to journalists, or both. You
can only submit one document at a time, so you may want to combine
several files into a zip archive if necessary. The maximum submission
several files into a ZIP archive if necessary. The maximum submission
size is currently 500MB. If the files you wish to upload are over that
limit, we recommend that you send a message to the journalist explaining
this, so that they can set up another method for transferring the
Expand Down Expand Up @@ -132,7 +215,7 @@ Continuing the Conversation

If you have already submitted a document and would like to check for
responses, click the **Log in** button on the media
organization's SecureDrop homepage.
organization's *Source Interface*.

|Source Interface with Javascript Disabled|

Expand All @@ -145,8 +228,8 @@ If a journalist has responded, their message will appear on the
next page. This page also allows you to upload another document or send
another message to the journalist. Before leaving the page, you should
delete any replies. In the unlikely event that someone learns
your codename, this will keep your identity secret as no one will be
able to see the previous correspondences you had with journalists.
your codename, this will ensure that they will not be able to see the previous
correspondences you had with journalists.

|Check for a reply|

Expand All @@ -155,18 +238,16 @@ below message.

|Delete received messages|

If the server experiences a large number of new sources signing up at
once and is overloaded with submissions, the journalist will flag your
message on their end and you will see the message below. They can't
write a reply to you until you've seen this message for security
reasons. This will only happen the first time a journalist replies and
with subsequent replies you will skip this step. Click **Refresh** or
log in again to see if a journalist has responded.
If the server is experiencing a surge in traffic, you may see the message below:

|Check for an initial response|

Repeat these steps to continue communicating with the journalist.
This will only happen once for a given codename. It means that the journalist
wants to reply to your submission, but for security reasons, they cannot do so
until you've seen this message. Log in again at a later time to see if the
journalist has responded.

Repeat these steps to continue communicating with the journalist.

.. |Source Interface Security Slider Warning| image:: images/manual/securedrop-security-slider-warning.png
.. |Security Slider| image:: images/manual/source-turn-slider-to-high.png
Expand Down