Lucian Constantin
CSO Senior Writer

WikiLeaks: Security worries impede new submission system

News
Nov 29, 20112 mins

WikiLeaks has scheduled a press conference on Thursday in London that will cover the organization's plans

WikiLeaks has postponed the launch of its new secure submission system due to recent security compromises that seriously affected the credibility of the SSL infrastructure.

“Constructing the system is very complex,” the organization said in a public statement. “Due to the deteriorating state of internet security which directly impacts the ability of sources to communicate with journalists and human rights activists securely, WikiLeaks has decided to postpone the launch initially scheduled for Monday.”

The new submission system, which WikiLeaks claims will be substantially more advanced than its previous one, was originally scheduled for release on Monday.

WikiLeaks spokesperson Kristinn Hrafnsson declined to reveal any additional details about the delay or the future of the system until a press conference scheduled for Thursday in London.

There will be more information released then that will also cover the organization’s other plans, Hrafnsson said. WikiLeaks said in its statement that it plans start a new phase and to expose privacy threats to journalists, sources and others.

What’s clear so far is that the organization is not happy with the current state of the Internet’s public key infrastructure. This stems from recent compromises involving multiple Certificate Authorities (CAs), some of which resulted in the issuing of rogue SSL (Secure Sockets Layer) certificates for high-profile domains.

“Over a year or longer SSL certificates have been penetrated by various organized crime groups and intelligence agencies,” WikiLeaks said. “The entire SSL system, which is the mechanism that guarantees security and anonymity online, has been compromised. SSL is beyond repair,” it added.

The ability to submit documents securely has been suspended on the WikiLeaks website since several key members left the organization last year and allegedly sabotaged the submission system. These included former WikiLeaks spokesperson Daniel Domscheit-Berg and Icelandic historian Herbert Snorrason.

The two went on to create rival whistleblowing website OpenLeaks, which promised increased security for sources and more transparency over its inner-workings. The new platform was supposed to be launched at the beginning of this year, but has yet to do so.

Lucian Constantin

Lucian Constantin writes about information security, privacy, and data protection for CSO. Before joining CSO in 2019, Lucian was a freelance writer for VICE Motherboard, Security Boulevard, Forbes, and The New Stack. Earlier in his career, he was an information security correspondent for the IDG News Service and Information security news editor for Softpedia.

Before he became a journalist, Lucian worked as a system and network administrator. He enjoys attending security conferences and delving into interesting research papers. He lives and works in Romania.

You can reach him at lucian_constantin@foundryco.com or @lconstantin on X. For encrypted email, his PGP key's fingerprint is: 7A66 4901 5CDA 844E 8C6D 04D5 2BB4 6332 FC52 6D42

More from this author