It's about 10PM, my partner's in Tokyo, I've been to Ikea and hung a pair of curtains on my own. Of course I have thoughts on The Intercept.
-
Was providing an apparently unredacted copy to a government employee for verification unavoidable?
But, more importantly: https://theintercept.com/leak/ is almost silent on covering most of your tracks.
-
-
It's a document that goes into detail on how to anonymously communicate, but doesn't cover basics like "Is this material access controlled?"
-
Documents that are heavy on detail in one respect and light in another give readers the impression that that stuff doesn't matter
-
Other than having emailed The Intercept on an apparently separate matter, Reality Winner seems to have done everything listed on that page
-
Now yes *we* know that there are many other things to worry about, but when a user follows the documentation and loses anyway that's *bad*
-
If you have a page that encourages people to break the law, you owe it to them to provide enough information to help them assess the risks
-
Information on who you'll show it to to verify it. Information on whether you'll make a best effort attempt to redact metadata or not.
-
When you're documenting a process that could land someone in jail for the rest of their life (or worse), your documentation should be *good*
-
(Yes this has all been a long parable about the state of the tech industry)
- 3 more replies
New conversation -
-
-
Maybe this info on that page could be written in a more guide-like, checklist format, but seems pretty reasonable to me:pic.twitter.com/YLfLWt0NtS
-
Which of those did she fail to do?
-
She used her work computer and network to access and print the document. She had the bad luck to be 1 of 6 to do so.pic.twitter.com/WGlHp6eQAa
-
That's not what that says - she used *a* computer, and it was logged
-
But she may have used *her* computer not knowing how easily such activity is tracked. It's also simplest explanation for how she got access.pic.twitter.com/sa4FWlzrUJ
-
The document doesn't make it clear that the problem isn't just using your computer, it's using your credentials on *any* computer
-
isn't it possible the system activity logs are linked to credentials (especially for remote workers)? Actual computer would be irrelevant.
-
Exactly. But that's not what The Intercept's advice says.
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.