WSJ Launches Wikileaks Competitor... But Says It Can Reveal Your Info To Law Enforcement
from the that's-not-good dept
With all the focus on Wikileaks recently, and the question of whether it is or is not "press" (not that it actually matters), one point that I've heard more than a few people raise is: why didn't any of the big news organizations create Wikileaks? It seems like a no-brainer, but they didn't. Of course, with the attacks on Wikileaks itself (and it is an organization with flaws, clearly), we've seen a number of alternative platforms for leaking information spring up, and now The Wall Street Journal has entered the game with a platform it's calling SafeHouse.
Now, it's great that the Wall Street Journal has decided to get into the game, and one would hope that other newspapers will set up similar secure and protected dropboxes for information. But... there are some serious problems with the WSJ's implementation. First of all, the terms of service basically say that you shouldn't expect them to protect your anonymity at all:
Separately, researchers, including Jacob Appelbaum are pointing to numerous security flaws in Safehouse's implementation that could also reveal someone's identity, despite promises of anonymity.
Hopefully, the WSJ is willing to admit that it hadn't necessarily thought through all the implications, and will fix these problems quickly.
Now, it's great that the Wall Street Journal has decided to get into the game, and one would hope that other newspapers will set up similar secure and protected dropboxes for information. But... there are some serious problems with the WSJ's implementation. First of all, the terms of service basically say that you shouldn't expect them to protect your anonymity at all:
"Except when we have a separately negotiated confidentiality agreement… we reserve the right to disclose any information about you to law enforcement authorities or to a requesting third party, without notice, in order to comply with any applicable laws and/or requests under legal process, to operate our systems properly, to protect the property or rights of Dow Jones or any affiliated companies, and to safeguard the interests of others."In other words, if you leak to the WSJ and the government wants to know who you are, the WSJ is going to tell the government. Apparently, the WSJ doesn't think too highly of the concept of journalistic shields for sources.
Separately, researchers, including Jacob Appelbaum are pointing to numerous security flaws in Safehouse's implementation that could also reveal someone's identity, despite promises of anonymity.
Hopefully, the WSJ is willing to admit that it hadn't necessarily thought through all the implications, and will fix these problems quickly.






Reader Comments (rss)
(Flattened / Threaded)
Now that is irony
Irony: /ˈīrənē/ N - The expression of one's meaning by using language that normally signifies the opposite
[ reply to this | link to this | view in thread ]
Re: Now that is irony
[ reply to this | link to this | view in thread ]
sources?
[ reply to this | link to this | view in thread ]
I mean, if the story doesn't attract the government's attention, the WSJ doesn't need to credit the original author and the author shuts up (because that's what he intended to do in the first place). If it does attract attention, the author will have more to worry about than suing the WSJ for plagiarism (+ the WSJ will pin the liability to it's source).
It's a win-win for the WSJ.
[ reply to this | link to this | view in thread ]
[ reply to this | link to this | view in thread ]
[ reply to this | link to this | view in thread ]
Rupert Murdoch
[ reply to this | link to this | view in thread ]
[ reply to this | link to this | view in thread ]
Re: Now that is irony
[ reply to this | link to this | view in thread ]
Don't expect the line to be very long WSJ.
[ reply to this | link to this | view in thread ]
In related news...
[ reply to this | link to this | view in thread ]
Re: Now that is irony
Tapping a honeypot through a false flag operation? Someone should should hold a seance and see if Robert Ludlum could write a story about it.
[ reply to this | link to this | view in thread ]
Re: Re: Now that is irony
[ reply to this | link to this | view in thread ]
smh
[ reply to this | link to this | view in thread ]
The Magic Word
[ reply to this | link to this | view in thread ]
Re: The Magic Word
[ reply to this | link to this | view in thread ]
Re:
[ reply to this | link to this | view in thread ]
[ reply to this | link to this | view in thread ]
Clearing confusion
[ reply to this | link to this | view in thread ]
This is the most related article I came across so far and wanted people here to be aware of the BS, so I apologize for being slightly OT.
[ reply to this | link to this | view in thread ]
Re: Re: Re: Now that is irony
[ reply to this | link to this | view in thread ]
overreacting?
pretty balanced reporting by techdirt as usual, and I tend to agree with the commenters, but not as much here - why not be glad the news org's are at least starting to show some signs of life? what'd you expect, a promise to risk the farm over a leaked cable? i'd love to see it too... also didn't see anything requiring you to give your real name, SSN, first born's soul, etc. when submitting to Safehouse - not that hard to obscure any of those or your IP either if you absolutely want/need (unless it's a birth certificate.. kidding kidding). maybe a third party submission app could do the trick (Whistleblower API probably not gonna happen). also can't find any wikileaks submission ToS after browsing a few min, but definitely could be wrong on that. #18 and 19 make pretty good points too...
[ reply to this | link to this | view in thread ]
Add Your Comment