Fan Mail From Some Flounder

September 26th, 2016

Generalissimo,

How come you don’t utilize a product like SecureDrop? I came across a document I thought you might find useful but the only way to get it to you is via email and, uh…no.

James Thorpe
Parsons, KS

James,

The short answer is money.

The longer version is slightly more complicated; though SecureDrop is free, the hardware to run it is not. And that’s if –a very big if– your hosting provider agrees to do so. 1 And that’s also true for the cloud, places like Amazon’s AWS. There’s the Darknet, but that would open up an entirely different can of worms. Finally, I could set up another laptop in the manse and run the software from there, but Missouri lacks a journalist “shield law.” Moreover, blogger’s rights are tenuous at best.

However, all is not lost. We’ve given this some thought and have come up with a compromise. Should you have information you would like to pass us, try the following:

Acquire an anonymous email account – many people find these folks to be accommodating. And free!

Once you have that set up, and using your InPrivate mode or VPN, slide on over to Dead Drop. This is exactly as it sounds, a place to leave information that self-destructs after 24 hours. Below is the message you would receive after entering data into the form:

Hi,
I’m sending you some secure information.
Click this url
https://dead-drop.me/pickup/57ed01b33c7e89.64384484
or if that doesn’t work, copy and paste it into your web browser’s location bar
This will ONLY work once, so be careful with the password, and make sure to copy the data immediately.
This is the password
HI3zY2AYoCI773c
After you pick it up, the data will self destruct and this link won’t work anymore.
This link will only work for 24 hours, so please check shortly.
Thanks!

The downside to this method is that Dead Drop doesn’t accept attachments. Which means you would have to a.) transcribe the information, or b.) scan and edit the doc, using a variety of available software. But…it is what it is.

So… to summarize:

1. Using a VPN or your browser’s privacy feature (or, better yet, doing same from public, free WiFi) place your info at Dead Drop.
2. Using a VPN or your browser’s privacy feature (or, better yet, doing same from public, free WiFi) send us [SOMEONE AT WILLNOTBETELEVISED DOT COM] the resultant link via anon email.

At some point we will expand on this, and other security implementations, 2 under a new tab.

Thanks for the question.

Regards,
Generalissimo Francisco Franco (still dead)

Fan Mail From Some Flounder

Show 2 footnotes

  1. Ours flat out said “No.”
  2. You did notice the site is running TLS/SSL, n’est-ce pas?

Something to say...?