SecureDrop 2.12.9 has been released. This version disables upgrades from Ubuntu Focal to Noble, and updates Tor Browser safety-level guidance in the Source Interface.

If your SecureDrop is still running Ubuntu Focal, please contact us for assistance in reinstalling with Ubuntu Noble.

https://securedrop.org/news/securedrop-2_12_9-released/

"First off, “be available everywhere.” In the past, whistleblowers have been burned because their web histories pointed directly to when and where they reached out to their journalist. So, use the commons of the internet to give people the information they need to securely establish first contact. If you’re running a tipline advertisement on your own website, use an encrypted and safe URL that will not indicate that the public has visited your explicit whistleblowing instructions.

Third-party services like Google are not your friend for the most sensitive of data. Google can definitely be subpoenaed for all the juicy whistleblower details. Find an alternative. Make your submission portals available over Tor, too! Visiting an onion address can make a huge difference.

Lastly, encrypt all the things. This means data in transit as well as at rest. If you are going to plop the next Panama Papers on your hard drive, encrypt that computer like your life depends on it."

https://freedom.press/issues/reddit-asks-we-answer-qa-on-whistleblowing-securedrop-and-sharing-info-with-the-press/

Usually anything related to setting up and configuring printers gets a bad rap, but recently, the SecureDrop Workstation moved to a "just-works" printing approach.

Read how we did it: https://securedrop.org/news/implementing-just-works-printing-in-securedrop-workstation/

SecureDrop Client 0.16.0 has been released! Along with regular dependency updates, this version updates the user interface to include more detailed timestamps of latest source activity, and to use a single typeface across the application.

https://securedrop.org/news/securedrop-client-0_16_0_released

Ubuntu 20.04 (Focal) has reached end of life. Any SecureDrop installations that have not upgraded to Ubuntu Server 24.04 (Noble) will automatically take their Source Interfaces offline. If you are already using SecureDrop and your server has not been upgraded, contact us.

https://securedrop.org/news/ubuntu-focal-has-reached-end-of-life

SecureDrop Workstation 1.2.0 has been released! This version brings initial support for driverless printing, making SecureDrop Workstation compatible with a much larger selection of printers.

https://securedrop.org/news/securedrop-workstation-1_2_0-released/

Ubuntu 20.04 (Focal) is now deprecated for use with SecureDrop Application and Monitor Servers. All new SecureDrop installations should use Ubuntu Server 24.04 (Noble). If you are already using SecureDrop and your server did not upgrade automatically, contact support.

https://securedrop.org/news/ubuntu-focal-is-approaching-end-of-life/

SecureDrop 2.12.8 has just been released, which triggers upgrades to Ubuntu Noble on 100% of Application and Monitor Servers. If either of your servers are not upgraded to Ubuntu Noble with this version installed, please contact support via https://support.freedom.press.

https://securedrop.org/news/securedrop-noble-upgrade-progress/

SecureDrop 2.12.7 has just been released - this version will trigger upgrades to Ubuntu Noble on approximately 40% of all Monitor Servers. If your Application Server has not already been upgraded to Ubuntu Noble, please contact support via https://support.freedom.press.

https://securedrop.org/news/securedrop-noble-upgrade-progress/

SecureDrop 2.12.6 has just been released, which will trigger upgrades to Ubuntu Noble on approximately 20% of all Monitor Servers. If your Application Server has not already been upgraded to Ubuntu Noble, please contact support via https://support.freedom.press.

https://securedrop.org/news/securedrop-noble-upgrade-progress/

Is anyone using #GTK4's PrintUnixDialog/PrintJob via Python? I haven't been able to find any other examples in real projects to see if we're using it wrong, or there's a bug elsewhere

https://github.com/freedomofpress/securedrop-client/pull/2411#issuecomment-2828970646 is the issue we're encountering in #SecureDrop, which is that the page range selector/value is being ignored.

#GNOME #GTK

Today we're releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications.

This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption.

https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/

Missed out on our presentation at #RightsCon? Don't worry, we've posted the recording and slides of @legoktm's intro to the new #SecureDrop Workstation on our blog.

In 15 minutes, learn about the technology behind the Workstation and how it improves on the classic workflow.

https://securedrop.org/news/rightscon-introduction-to-securedrop-workstation/

Over the next two months, all SecureDrops will have their underlying Ubuntu OS upgraded from 20.04 (“Focal”) to 24.04 (“Noble”).

This is the fifth version of Ubuntu we've supported, and for the first time, we're going to support an automated, in-place upgrade.

Learn about the technical details: https://securedrop.org/news/technical-details-for-the-noble-migration/

In about ~35 minutes I'll be on the online stage of #RightsCon, giving an overview and demo of the new #SecureDrop Workstation!

https://rightscon.summit.tc/t/rightscon-2025/events/defending-the-defenders-tips-and-tools-for-collaborating-and-securing-your-work-raiMsueGuyAncZVs3tkBJ8

Attending #RightsCon in-person or online? Don't miss @legoktm presenting and demoing the new #securedrop Workstation on Tuesday at 4:30pm TST / 3:30am EST!