When the Weakest Link is Strong...
summary
Year‑long Panama Papers collaboration centralizes >2 TB for ~400 journalists across ~120 organizations and builds three tools: Backlight document search, a global hub forum, and Linkurious visualizations; systems require per-login two‑factor and PGP, enforce download thresholds, and use HTTPS with secret URLs. Adoption moves from ~45% never‑used 2FA / ~47% never‑used PGP to 100% using two‑factor and PGP, with 89% using the hub weekly and 64% using Backlight daily; usable defaults, active monitoring, and community norms produce no known source compromise and successful coordinated publication.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 0:30Users are often implicated
- 0:43Transforming the narrative
- 1:13The Panama Papers
- 2:28ICIJ
- 3:29What We Know
- 5:34Keeping the Project Secret
- 6:09Collaboration Systems
- 7:15Threat Model
- 8:07System Design
- 9:50Security Systems
- 11:47TwoFactor Authentication
- 11:58Survey Results
- 13:20Collaboration
- 14:30Survey Responses
- 15:30Normalized Security Culture
- 16:22User Involvement
- 16:50Batch Search
- 17:10Organizational Commitment
- 18:46Summary
- 20:03Thanks
related talks
04mThe tech behind the biggest journalism leak in history
19mWeakest Link
43mSecuring Journalists
52mPrivacy & Security, Policy & Technology
30mCryptPad: End to End encrypted collaboration can be easy to use
01h 30mDigital Privacy – low and high hanging fruits, and how to pick them.
48mSecurity from zero
44mSecuring Journalists in 2022