SecureDrop @securedrop@fosstodon.org

📣 📣 📣

If you have not migrated your SecureDrop servers to Ubuntu 20.04 yet, you must do so _this week_. Ubuntu 16.04 will no longer receive security updates after April 30:

https://securedrop.org/news/securedrop-advisory-end-life-v2-onion-services-and-ubuntu-1604/

Migration docs:

https://docs.securedrop.org/en/stable/upgrade/focal_migration.html

For security reasons, after April 30, the Source Interface of SecureDrop servers on Ubuntu 16.04 will be disabled automatically.

What is the sound of one hand clapping? Let's not find out.

📣 All SecureDrops still running Ubuntu 16.04 must migrate to Ubuntu 20.04 within the next 8 days to stay in contact with sources.

https://securedrop.org/news/securedrop-advisory-end-life-v2-onion-services-and-ubuntu-1604/

🚨 After the 1.8.x release series, the Ubuntu 16.04 (Xenial) platform will no longer be supported. Please make sure to migrate your SecureDrop servers to Ubuntu 20.04 (Focal) before April 30: 🚨

https://securedrop.org/news/securedrop-advisory-end-life-v2-onion-services-and-ubuntu-1604/

SecureDrop 1.8.1 has been released. This is a bugfix release to provide a smoother migration experience of SecureDrop servers to Ubuntu 20.04 (Focal).

https://securedrop.org/news/securedrop-1_8_1-released

There is still time to apply for this Internews 6-month developer contract (full-time) to work with the SecureDrop team on accessibility, translation tooling, and more:

https://phf.tbe.taleo.net/phf04/ats/careers/v2/viewRequisition?org=INTERNEWS&cws=38&rid=1274

Technical focus: Python development (web accessibility experience a big plus)

Daily comp range: USD 300-500

Location: Anywhere (remote)

Friends don't let friends run operating systems past their end-of-life. Migrate your SecureDrop servers to Ubuntu 20.04 before April 30:

https://securedrop.org/news/securedrop-advisory-end-life-v2-onion-services-and-ubuntu-1604/

Through its BASICS program, Internews is hiring a Python developer on a 6-month contract (full-time) to work with the SecureDrop team on accessibility, translation and more. Apply here:

https://phf.tbe.taleo.net/phf04/ats/careers/v2/viewRequisition?org=INTERNEWS&cws=38&rid=1274

We welcome your contributions via GitHub (https://github.com/freedomofpress/securedrop-workstation) and participation in our bug bounty program:

https://bugcrowd.com/freedomofpress

You can read more about the SecureDrop Workstation in this blog post about our pilot program:

https://securedrop.org/news/piloting-securedrop-workstation-qubes-os/

Further details are available in our security whitepaper:

https://media.securedrop.org/media/documents/SD_Qubes_Workstation_Whitepaper.pdf

We are pleased to announce the results of the second independent security audit of the SecureDrop Workstation.

This audit was completed by Trail of Bits (https://www.trailofbits.com/) and funded by The New York Times.

https://securedrop.org/news/second-independent-audit-of-securedrop-workstation-completed/

Last year may have been a blur, but time is no illusion. All SecureDrop servers are due for an OS upgrade before April 30th:

https://docs.securedrop.org/en/stable/upgrade/focal_migration.html

The SecureDrop project will not participate in future FSF (@fsf) events until Richard Stallman is removed from all leadership positions. As Freedom of the Press Foundation (which maintains SecureDrop), we have signed on to this open letter:

https://rms-open-letter.github.io/

Tails 4.17 (@tails) is out:

https://tails.boum.org/news/version_4.17/index.en.html

As always, please update your Tails USB drives:

https://docs.securedrop.org/en/stable/update_tails_usbs.html

Updates from version 4.14 or earlier require manual steps:

https://tails.boum.org/news/version_4.14/broken_upgrades/index.en.html

It’s time for some spring cleaning! All SecureDrop servers are due for an OS upgrade before April 30th.

Please follow our step-by-step guide to migrate to Ubuntu 20.04:

https://docs.securedrop.org/en/stable/upgrade/focal_migration.html

SecureDrop 1.8.0 has been released. This release includes support for Ubuntu 20.04 (Focal Fossa), and several other improvements:

https://securedrop.org/news/securedrop-1_8_0-released/

Update: To allow for additional testing, we have rescheduled the release of SecureDrop 1.8.0 to Thursday, March 11.

SecureDrop 1.8.0 will be released on March 9. This release will include support for Ubuntu 20.04 (Focal Fossa), and several other improvements:

https://securedrop.org/news/securedrop-1_8_0-pre-release-announcement/

🚨 SecureDrop servers must be migrated to Ubuntu 20.04 between March 9 and April 30. 🚨

https://securedrop.org/news/securedrop-advisory-end-life-v2-onion-services-and-ubuntu-1604/

Tails upgrade advisory: If you are running Tails version 4.14 or earlier on your Admin and Journalist Workstations, you need to upgrade Tails manually, or restore automatic upgrades.

https://tails.boum.org/news/version_4.14/broken_upgrades/index.en.html