GlobaLeaks

{{Infobox software

| name = GlobaLeaks

| logo = GlobaLeaks.svg

| logo_size = 300px

| screenshot =

| caption =| latest release version = {{wikidata|property|reference|P348}}

| latest release date = {{start date and age|{{wikidata|qualifier|P348|P577}}}}

| repo = https://github.com/globaleaks/GlobaLeaks

| programming language =Python, JavaScript

| operating system = Linux

| genre =

| license = Affero General Public License

| website = https://www.globaleaks.org/

}}

GlobaLeaks is free and open source software intended to enable secure and anonymous whistleblowing initiatives.

The software is recognized as a Digital Public Good (DPG) by the [https://digitalpublicgoods.net/ Digital Public Goods Alliance].{{Cite web |title=GlobaLeaks Whistleblowing Software - DPGA Details |url=https://app.digitalpublicgoods.net/a/11113 |access-date=2024-09-11 |website=app.digitalpublicgoods.net}}

History

The project started on 15 December 2010{{cite web |last= Pietrosanti |first= Fabio |title= An idea of leaking alternative to wikileaks |publisher= Full Disclosure |date= 15 December 2010 |url= http://seclists.org/fulldisclosure/2010/Dec/340 |access-date= 24 December 2016 |archive-date= 20 December 2010 |archive-url= https://web.archive.org/web/20101220123755/http://seclists.org/fulldisclosure/2010/Dec/340 |url-status= live }} and the first software prototype was announced on 6 September 2011.{{cite mailing list | last = Filastò | first = Arturo | title = GlobaLeaks demo of the Prototype online! | mailing-list = Full Disclosure | date = 6 September 2011 | url = http://seclists.org/fulldisclosure/2011/Sep/38 | access-date = 21 January 2012 | archive-date = 4 January 2017 | archive-url = https://web.archive.org/web/20170104000854/http://seclists.org/fulldisclosure/2011/Sep/38 | url-status = live }}

Relevant figures in the first development are Arturo Filastò, Claudio Agosti, Fabio Pietrosanti, Giovanni Pellerano, and Michele Orrù.{{cite web|url=https://github.com/globaleaks/GlobaLeaks/blob/main/AUTHORS|title=AUTHORS|website=GitHub|access-date=2 February 2021|archive-date=14 February 2022|archive-url=https://web.archive.org/web/20220214195359/https://github.com/globaleaks/GlobaLeaks/blob/main/AUTHORS|url-status=live}}

Operation

GlobaLeaks utilizes Tor Onion Services to guarantee the anonymity of the source.{{cite web|last1=Steele|first1=Shari|title=Tor at the Heart: GlobaLeaks|url=https://blog.torproject.org/blog/tor-heart-globaleaks|website=Tor Blog|access-date=3 January 2017|archive-date=17 December 2016|archive-url=https://web.archive.org/web/20161217081557/https://blog.torproject.org/blog/tor-heart-globaleaks|url-status=live}}

Once the submission is performed the data is encrypted and made available only to configured recipients.{{cite web|title=GlobaLeaks Encryption Protocol|url=https://docs.globaleaks.org/en/main/security/EncryptionProtocol.html|access-date=20 June 2021|archive-date=24 June 2021|archive-url=https://web.archive.org/web/20210624202538/https://docs.globaleaks.org/en/main/security/EncryptionProtocol.html|url-status=live}} The platform does not store anything permanently and the submitted information and files are deleted as soon as possible with a strict data retention policy.{{cite web|title=GlobaLeaks Threat Model|url=https://docs.globaleaks.org/en/main/security/ThreatModel.html|access-date=20 June 2021|archive-date=24 June 2021|archive-url=https://web.archive.org/web/20210624202653/https://docs.globaleaks.org/en/main/security/ThreatModel.html|url-status=live}}{{cite web|title=GlobaLeaks Application Security|url=https://docs.globaleaks.org/en/main/security/ApplicationSecurity.html|access-date=20 June 2021|archive-date=24 June 2021|archive-url=https://web.archive.org/web/20210624200739/https://docs.globaleaks.org/en/main/security/ApplicationSecurity.html|url-status=live}}

The process is generally improved by suggesting sources and recipients to use Qubes OS or Tails operating systems while connecting to the platform.

Implementations

By 2023, GlobaLeaks has been internationalized in 90+ languages and implemented by several thousands projects and initiatives all over the world. The vast range of adopters include independent media, activists, media agencies, corporations, and more.

In 2013, Free Press Unlimited (FPU),{{cite web|title=Publeaks connects whistleblowers with the media|url=https://www.freepressunlimited.org/en/projects/publeaks-connects-whistleblowers-with-the-media|publisher=freepressunlimited.org|access-date=17 March 2021|archive-date=24 November 2020|archive-url=https://web.archive.org/web/20201124091415/https://www.freepressunlimited.org/en/projects/publeaks-connects-whistleblowers-with-the-media|url-status=live}} an in The Netherlands based non-profit organization, created Publeaks NL{{cite web|title=Vanaf vandaag: anoniem lekken naar media via doorgeefluik Publeaks|url=http://www.volkskrant.nl/vk/nl/2694/Tech-Media/article/detail/3506349/2013/09/09/Vanaf-vandaag-anoniem-lekken-naar-media-via-doorgeefluik-Publeaks.dhtml|publisher=volkskrant.nl|access-date=22 February 2014|archive-date=8 October 2013|archive-url=https://web.archive.org/web/20131008173321/http://www.volkskrant.nl/vk/nl/2694/Tech-Media/article/detail/3506349/2013/09/09/Vanaf-vandaag-anoniem-lekken-naar-media-via-doorgeefluik-Publeaks.dhtml|url-status=live}}{{cite web|title=Handling ethical problems in counterterrorism An inventory of methods to support ethical decisionmaking|url=https://www.rand.org/content/dam/rand/pubs/research_reports/RR200/RR251/RAND_RR251.pdf|publisher=RAND Corporation|access-date=24 February 2014|archive-date=19 December 2020|archive-url=https://web.archive.org/web/20201219230523/https://www.rand.org/content/dam/rand/pubs/research_reports/RR200/RR251/RAND_RR251.pdf|url-status=live}} a foundation that counts around 20 of the country's biggest media organizations among its members that uses the platform to perform investigative journalism under a same umbrella project.

FPU has replicated this successful model in other countries creating MéxicoLeaks,{{cite web|title=Mexicoleaks|url=https://mexicoleaks.mx/|access-date=17 March 2021|archive-date=10 September 2023|archive-url=https://web.archive.org/web/20230910101919/https://mexicoleaks.mx/|url-status=live}} IndonesiaLeaks,{{cite web|title=IndonesiaLeaks|url=https://indonesialeaks.id/|access-date=17 March 2021|archive-date=20 September 2023|archive-url=https://web.archive.org/web/20230920102923/https://www.indonesialeaks.id/|url-status=live}} Leaks.ng{{cite web|title=Leaks.ng|url=https://leaks.ng/|access-date=17 March 2021|archive-date=5 May 2023|archive-url=https://web.archive.org/web/20230505011945/https://leaks.ng/|url-status=live}} and Kenekanko{{cite web|title=Kenekanko|url=https://www.kenekanko.com/|access-date=17 March 2021|archive-date=11 February 2021|archive-url=https://web.archive.org/web/20210211140807/https://kenekanko.com/|url-status=live}} in Mexico, Indonesia, Nigeria and Mali respectively. MexicoLeaks aimed at revealing information for the public interest in Mexico was awarded in 2016 the FRIDA award.{{cite web|title=Frida Award by MexicoLeaks|url=http://programafrida.net/en/archivos/project/mexicoleaks|access-date=1 February 2017|archive-date=4 January 2017|archive-url=https://web.archive.org/web/20170104162615/http://programafrida.net/en/archivos/project/mexicoleaks|url-status=live}} Another project, Africaleaks, was discontinued.{{cite news|last1=Cummings|first1=Basia|title=Wikileaks for Africa? Introducing Afrileaks|url=https://www.theguardian.com/world/2015/jan/13/wikileaks-for-africa-introducing-afrileaks|work=The Guardian|date=13 January 2015|access-date=11 December 2016|archive-date=8 November 2020|archive-url=https://web.archive.org/web/20201108112757/https://www.theguardian.com/world/2015/jan/13/wikileaks-for-africa-introducing-afrileaks|url-status=live}}

AWP, a Belgium-based organization, created Ljost (Iceland), Filtrala (Spain), EcuadorTransparente (Ecuador){{cite news|last1=Rodriguez|first1=Katitza|title=Leaked Documents Confirm Ecuador's Internet Censorship Machine|url=https://www.eff.org/deeplinks/2016/04/leaked-documents-confirm-ecuadors-internet-censorship-machine|access-date=3 January 2017|publisher=Electronic Frontier Foundation|date=24 April 2016|archive-date=4 January 2017|archive-url=https://web.archive.org/web/20170104162434/https://www.eff.org/deeplinks/2016/04/leaked-documents-confirm-ecuadors-internet-censorship-machine|url-status=live}}{{cite news|last1=Franceschi Biccherai|first1=Lorenzo|title=Ecuador Briefly Censored Google and YouTube, Leaked Document Shows|url=https://motherboard.vice.com/read/ecuador-briefly-censored-google-and-youtube-leaked-document-shows|access-date=3 January 2017|publisher=Vice|date=14 April 2016|archive-date=4 January 2017|archive-url=https://web.archive.org/web/20170104092605/https://motherboard.vice.com/read/ecuador-briefly-censored-google-and-youtube-leaked-document-shows|url-status=live}} and PeruLeaks (Peru).{{cite web|title=La República se suma a 'Perúleaks'|url=http://larepublica.pe/politica/750787-la-republica-se-suma-peruleaks|publisher=La República|access-date=3 January 2017|archive-date=4 January 2017|archive-url=https://web.archive.org/web/20170104170327/http://larepublica.pe/politica/750787-la-republica-se-suma-peruleaks|url-status=live}}

One of the most successful GlobaLeaks projects is WildLeaks, the world's first whistleblower initiative dedicated to Wildlife and Forest Crime funded and managed by the Elephant Action League (EAL) which reported and investigated various crimes. One of the investigations was highlighted in the award-winning Netflix documentary The Ivory Game.{{cite web|title=New WildLeaks Website Invites Whistle-Blowers on Wildlife Crime|first=Lauren|last=Neme|url=http://news.nationalgeographic.com/news/2014/02/140210-wildleaks-wildlife-crime-trafficking-whistleblower/|archive-url=https://web.archive.org/web/20140302052855/http://news.nationalgeographic.com/news/2014/02/140210-wildleaks-wildlife-crime-trafficking-whistleblower/|url-status=dead|archive-date=2 March 2014|work=National Geographic|access-date=22 February 2014}}{{cite magazine|first=Nadia|last=Drake|author-link=Nadia Drake|title=A New Website That Lets Tipsters Report Wildlife Crimes|magazine=Wired|url=https://www.wired.com/wiredscience/2014/02/wildleaks/|publisher=wired.com|access-date=22 February 2014|archive-date=19 February 2014|archive-url=https://web.archive.org/web/20140219065820/http://www.wired.com/wiredscience/2014/02/wildleaks|url-status=live}}{{cite news|last1=Carrington|first1=Damian|title=WildLeaks attracts major wildlife crime leads in first three months|url=https://www.theguardian.com/environment/2014/jun/12/wildleaks-illegal-wildlife-crime|work=The Guardian|date=12 June 2014|access-date=13 June 2014|archive-date=13 June 2014|archive-url=https://web.archive.org/web/20140613064812/http://www.theguardian.com/environment/2014/jun/12/wildleaks-illegal-wildlife-crime|url-status=live}}

GlobaLeaks also partnered with major anticorruption and human rights NGOs like Transparency International (Allerta Anticorruzione),{{cite web|title=Allerta Anticorruzione project by Transparency International|url=https://allertaanticorruzione.transparency.it/|access-date=3 January 2017|archive-url=https://web.archive.org/web/20160319123322/https://allertaanticorruzione.transparency.it/|archive-date=19 March 2016|url-status=dead}} OCCRP ([https://www.occrp.org/occrpleaks/ OCCRPLeaks] {{Webarchive|url=https://web.archive.org/web/20160506172515/https://www.occrp.org/occrpleaks/ |date=6 May 2016 }}) and Amnesty International (Amlea).{{cite web|title=Amlea project by Amnesty International|url=https://amlea.org/|access-date=3 January 2017|archive-url=https://web.archive.org/web/20190223103751/http://amlea.org/|archive-date=23 February 2019|url-status=dead}}

In 2017, Xnet, an activist project which has been working on and for networked democracy and digital rights since 2008, launched in the Barcelona City Hall the first public Anti-Corruption Complaint Box using anonymity protection technology like Tor and GlobaLeaks ("Bústia Ètica" in Catalan). With this pioneering project, the Barcelona City Hall is the first municipal government to invite citizens to use tools which enable them to send information in a way that is secure, that guarantees privacy and gives citizens the option to be totally anonymous.{{cite web|title=Xnet installs a Whistleblowing Platform against corruption for the City Hall of Barcelona – powered by GlobaLeaks and Tor friendly|url=https://xnet-x.net/en/whistleblowing-platform-barcelona-city-council/|access-date=17 February 2018|archive-date=4 June 2019|archive-url=https://web.archive.org/web/20190604141701/https://xnet-x.net/en/whistleblowing-platform-barcelona-city-council/|url-status=live}} 50px Material was copied from this source, which is available under a [https://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 Unported] {{Webarchive|url=https://web.archive.org/web/20110222170930/http://creativecommons.org/licenses/by-sa/3.0/ |date=22 February 2011 }} license.

In 2018 the Italian Anti-Corruption Authority (ANAC), an administrative watchdog, launched their national online whistleblowing platform using GlobaLeaks and onion services, giving whistleblowers who come forward a secure way to report illegal activity while protecting their identities.{{cite web|title=Italian Anti-Corruption Authority (ANAC) Adopts Onion Services|url=https://blog.torproject.org/italian-anti-corruption-authority-anac-adopts-onion-services|access-date=17 February 2018|archive-date=11 July 2019|archive-url=https://web.archive.org/web/20190711170633/https://blog.torproject.org/italian-anti-corruption-authority-anac-adopts-onion-services|url-status=live}}

Since 2020 the software is now recommended by Transparency International among the available secure, ethical and free solutions that could be used to implement whistleblowing systems for anticorruption purposes.{{cite web|last1=Jenkins|first1=Matthew|title=Overview of Whistleblowing Software|url=https://www.u4.no/publications/overview-of-whistleblowing-software|work=[Transparency International]|access-date=2 February 2020|archive-date=15 November 2020|archive-url=https://web.archive.org/web/20201115231458/https://www.u4.no/publications/overview-of-whistleblowing-software|url-status=live}}

Funding

The GlobaLeaks project maintains public and transparent documentation of the funds and partners that have supported its research and development.{{cite web|title=Funding|url=https://www.globaleaks.org/about/funding/|access-date=2 February 2021|archive-date=24 June 2021|archive-url=https://web.archive.org/web/20210624201455/https://www.globaleaks.org/about/funding/|url-status=live}}