GlobaLeaks

GlobaLeaks is a project aimed at creating a secure and anonymous Whistleblowing platform.

You can read our Guidelines for Whistleblowing Initiatives for GlobaLeaks adopters as a non technical user to plan and organize your whistleblowing initiative.

Here the you can access the Changelog detailing Feature improvements and bugfixes.

We want to help organization willing to setup a Whistleblowing Initiative for good purposes, we do recommend to follow our GlobaLeaks Fast Track Program to follow a workflow of work together to get your GlobaLeaks quickly up & running.

GlobaLeaks is an Open Source software released under Free Affero GPL License.

GlobaLeaks makes use of a plethora of selected Open Source Software. For the list of software used in GlobaLeaks refer to Open Source Software.

If you need help write send your inquiry to the GlobaLeaks Mailing List [email protected], chat on irc.oftc.net #globaleaks or Contact Us Directly if you want to talk privately.

For Bitcoin donation send you BTC to 1D1pTHEjRiGg1UEZxZRj46yMjapxhc6PZp .

GlobaLeaks Documentation

The following sections represent GlobaLeaks documentation:

• Glossary section describes GlobaLeaks jargon
• Architecture section defines GlobaLeaks security architecture
• Setup Guide section provides setup guidelines
• Software Security section provides description of Globaleaks security features
• Software Development section documents Globaleaks Software development
• Infrastructure section describes our own development architecture

Setup Guide

The following documents are the technical and operational corpus for setting up a GlobaLeaks based Whistleblowing Site by someone with basic Linux knowledge:

• Technical Requirements to setup GlobaLeaks
• Installation Guide on how securely setup GlobaLeaks
• Configuration Guide on how to configure GlobaLeaks
• Customization Guide on how to customize GlobaLeaks's interfaces to adjust for your whistleblowing site
• Troubleshooting Guide on how to debug GlobaLeaks if something doesn't work
• Advanced Configuration on how to tweak deeply how GlobaLeaks works (settings.py, commandline, init script)
• Upgrade Guide on how to properly upgrade a GlobaLeaks system
• Integration Guide on how to integrate GlobaLeaks within third party websites

Software Security

Listed in the following are the documents relevant to the GlobaLeaks security and anonymity protection:

• Threat Model of GlobaLeaks with overall security consideration
• Application Security Design and Details of GlobaLeaks
• Operating System Security features that are applied by GlobaLeaks
• Encryption features to protect data in GlobaLeaks
• Penetration Tests and Security Audits that has been done on GlobaLeaks
• Security Awareness and privacy warning on the user interface

Software Development

The first thing to look at, in order to understand the jargon used across the project, is the Glossary. To get a deeper understanding of GlobaLeaks' architecture you should read the Architecture Document. For a general understanding of the project at large, you can read the GlobaLeaks Project Plan

To setup the build environment you need follow the Setting Up GlobaLeaks Software Development

Software Translation

GlobaLeaks software is currently translated in more than 20 languages.

The work on translation is performed in collaboration with the Localization Lab and with help of the Transifex volunteers community.

To read more on how translation is performed and you you could help on this side visit the Localization Lab guidelines.

Unit-Testing

GlobaLeaks codebase is keept continously under Unit Testing thanks to the Travis CI, Coveralls and Landscape cloud services.

Branch	Build Status	Code Coverage	Code Quality
master
devel

Release Procedure

• Release Procedure on how to prepare and release a GlobaLeaks version.

Releases Archive

GlobaLeaks releases are archived on our official deb repository: deb.globaleaks.org

Infrastructure

In GlobaLeaks we make use of a set of Cloud Services and of an own Linux Server to manage various stuff related to the project.

This section describe our own infrastructure. Please note that we do not accept leaks or submission and this infrastructure is only used for the project development.

• Cloud Services that keep running GlobaLeaks stuff
• Dedicated Servers that keep running GlobaLeaks stuff

Grant Reporting

Radio Free Asia Freedom 2 Connect Grant

At the following page are collected the monthly reports of the state of advancement during the period financed by the Freedom 2 Connect Grant (June 2012 to April 2013)

Open Tech Fund Grant

At the following page are collected the monthly reports of the state of advancement during the period financed by the OTF Grant (July 2014 to January 2016; actually ongoing)