Posted by Red Nanaki via Fulldisclosure on Jul 02 Whistleblowersoftware.com: confidentiality and anonymity leakage to third

parties

Summary

The anonymous reporting flow on whistleblowersoftware.com encrypts report

text end-to-end in the browser but does not extend the same guarantee to

attachments and exposes the reporter's network identity and timing to a US-based

third party. Together these weaken the confidentiality and anonymity

properties the platform is expected to provide.

##...