On the path to DEF CON SecureDrop

[Dark Tangent]

At DEF CON 27 it was announced that we are exploring a way to run a Secure Drop to provide an anonymous way for hackers and researchers to share vulnerabilities with the DHS department that absorbed US CERT, CISA.

https://defcon.org/html/defcon-27/dc...kers.html#Moss
https://www.cyberscoop.com/securedro...osure-def-con/

A panel discussion and audience Q&A was held:
https://youtu.be/bfHVm7MGSYU

No major objections were raised, but there were lots of interesting questions. As DEF CON continues to build toward this goal we will use this forum to make announcements and answer questions everyone may have.

Interested in SecureDrop? Read more about it here: https://securedrop.org/faq/

[number6]

See also:
* https://forum.defcon.org/node/229659 : article : August 08, 2019 : Politico, Tim Starks, DEF CON 27: zero-days and cyber weapons
* https://forum.defcon.org/node/229649 : article : August 09, 2019 : CyberScoop, by Sean Lyngaas, Feds to use SecureDrop to accept anonymized vulnerability reports
* https://forum.defcon.org/node/229673 : article : August 14, 2019 : threatpost, by Tom Spring, DEF CON and Feds Partner on Anonymous Bug Submission Program
* https://forum.defcon.org/node/229959 : article : September 18, 2019 : threatpost, by Lindsey O'Donnell, Marc Rogers: Success of Anonymous Bug Submission Program ‘Takes A Village’

[sleestak]

You can watch the panel where this project got discussed at DEF CON 27 here: https://youtu.be/bfHVm7MGSYU
Add your comments to this thread - we're very interested in feedback.

[Dark Tangent]

Just an update for those wondering what is happening with the long silence. Planning is still ongoing, we hope to make some announcements in the next month or so.

[dianacenteno]

good good
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

[Dark Tangent]

It's been a while, so here are some updates:

With a new US Administration in place we hope to complete the SecureDrop project once DHS CISA gets its new Director and they can do the research to pick up where the the work was left off.

Once the 2020 Election got close it was all hands on deck at DHS CISA and SecureDrop took a back seat. Now we hope to get things back on track.

[curiousocelot]

On one level...disappointing that this is dragging out.... on another level... it is a good time to marshal this program. happy to help whenever and however I can.