Friday, February 17, 2012

Soliciting Harper Government Leaks

This post serves two purposes. First, I'm willing to collect leaked information in a way that does not directly reveal either my identity or the identity of the revealing party. Second, this outline serves as a relatively private manner of information exchange for anyone to use.

Leak to Canada II

You have information you would like to leak. You would like to be anonymous. I would like to receive said information without you learning my identity either.
  • I can’t guarantee to leak all material received.
  • I can’t specify in advance how any leaked material may be distributed.

Instructions: Tor and Hushmail

First, you will want to install Tor, as discussed in this post, so that web sites you visit will not be given your IP address or other identifying information.

Then, set up a free Hushmail account while using Tor. When you create a free Hushmail address you do not need to provide identifying information. However, the first thing you should do when you set up your account is to use the preferences -> reading option to disable loading of images, colors and formatting (just in case you access Hushmail without using Tor).

This will allow you to set up a Hushmail account and leave an anonymous comment in my blog without letting Google or I know anything about you. Later, when I moderate your comment I will delete your message so that your Hushmail account is not revealed. I will then email you from my Hushmail account (assuming you left a hushmail account address) and we can exchange information in a reasonably secure manner.

Security Thoughts

In the event that a serious investigation was undertaken you would want to consider the issue of who would have access to the information to be leaked. This can often help identify the leaking party. 

You would also need to consider whether or not the material would be important enough to have the affected parties entice Google or Hushmail to trace back our activities (in the event that my own identity was eventually compromised).

Update: Removed alternate leak methodology and added use of Tor when using Hushmail.

1 comment:

  1. -- comment deleted --

    Yes, you can offer a leak about any elected official... though whether or not it gets released or generates interest would be based on the content presumably.