Every time a file is exchanged over the Internet via services like emails, Dropbox or file transfer features of instant messaging applications, metadata is left all over the place that can link the journalist and its information source together.
We wrote about OnionShare, which is a simple solution for ad-hoc file transfers. As OnionShare does not have any chat feature, you have to run Ricochet in parallel. However, both parties needs to be online at the same time in both cases.
GlobaLeaks is a secure platform that simplifies the process. It runs as a Tor hidden service, where it connects the information source and the journalist together. The server is self-hosted, therefore the uploaded data and messages are only accessible to you. Also, files are encrypted with PGP, so nobody can open the files except for you and only you.
The following guide demonstrates how an information source can upload files and send messages with the service as well as how the journalist can retrieve them.
Need some help with hosting GlobaLeaks? Contact us to discuss
Once the files are submitted, the journalist receives an optional, PGP encrypted email of the submission.
The information can log back in any time to add more files, or read and write messages.