{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/106","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/106/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/106/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/106/events","html_url":"https://github.com/freedomofpress/securedrop/issues/106","id":21688433,"number":106,"title":"Upload to Tahoe-LAFS grid instead to local FS","user":{"login":"nkubarelov","id":2358435,"avatar_url":"https://avatars.githubusercontent.com/u/2358435?v=3","gravatar_id":"","url":"https://api.github.com/users/nkubarelov","html_url":"https://github.com/nkubarelov","followers_url":"https://api.github.com/users/nkubarelov/followers","following_url":"https://api.github.com/users/nkubarelov/following{/other_user}","gists_url":"https://api.github.com/users/nkubarelov/gists{/gist_id}","starred_url":"https://api.github.com/users/nkubarelov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nkubarelov/subscriptions","organizations_url":"https://api.github.com/users/nkubarelov/orgs","repos_url":"https://api.github.com/users/nkubarelov/repos","events_url":"https://api.github.com/users/nkubarelov/events{/privacy}","received_events_url":"https://api.github.com/users/nkubarelov/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2013-10-28T13:22:08Z","updated_at":"2015-01-06T19:22:29Z","closed_at":null,"body":"I was thinking that uploading to tahoe-lafs grid can secure the storage of the leaks."},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/68917713","html_url":"https://github.com/freedomofpress/securedrop/issues/106#issuecomment-68917713","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/106","id":68917713,"user":{"login":"dolanjs","id":1495205,"avatar_url":"https://avatars.githubusercontent.com/u/1495205?v=3","gravatar_id":"","url":"https://api.github.com/users/dolanjs","html_url":"https://github.com/dolanjs","followers_url":"https://api.github.com/users/dolanjs/followers","following_url":"https://api.github.com/users/dolanjs/following{/other_user}","gists_url":"https://api.github.com/users/dolanjs/gists{/gist_id}","starred_url":"https://api.github.com/users/dolanjs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dolanjs/subscriptions","organizations_url":"https://api.github.com/users/dolanjs/orgs","repos_url":"https://api.github.com/users/dolanjs/repos","events_url":"https://api.github.com/users/dolanjs/events{/privacy}","received_events_url":"https://api.github.com/users/dolanjs/received_events","type":"User","site_admin":false},"created_at":"2015-01-06T19:22:29Z","updated_at":"2015-01-06T19:22:29Z","body":"Thanks for that write up @zooko.\r\nFirst, I do think there are plenty of use cases for Tahoe-LAFS in support of journalists and film makers that we work with and it definitely could be a solution to some of the issues they are facing. The ability to use Tahoe-LAFS grid for the journalist or filmmaker's file storage/backup (non SecureDrop stuff) while crossing borders and travelling makes a lot of sense and something we would like to look into more in the future.\r\n\r\nFor:\r\n\r\n> Tahoe-LAFS can be used, today, as a backup tool which provides strong encryption for the backups. I\r\n> am not aware of any reason not to start doing this right away.\r\n\r\nCurrently we are storing the backups on airgapped Tails persistent media. Which at least for now is simpler and I'm not sure what we would gain by moving that back to networked computers.\r\n\r\n> Tahoe-LAFS might be useful as a safer server-side storage tool for, at least, the messages and replies.\r\n> This would require coding and maybe architecture changes. I'm not entirely sure how difficult it would be,\r\n>  nor am I sure what security SecureDrop already has for the messages and replies.\r\n\r\nCurrently the messages and replies are gpg encrypted and stored locally on the server until the journalist downloads and transfers them to the airgapped host. The gpg private key used for decryption only exists on the airgapped host. After viewing the documents on the airgapped host the journalist secure wipes the docs off the server. "}}