The Future of Leaks: What's Next for the Online Library of Hacked Data?
Where
Talks
HOPE XV
Duration
48 min
Explains how a leak-publishing collective vets, releases and protects sensitive datasets, and the pressures it faces.
Summary
Emma Best and Lorax Horne, members of Distributed Denial of Secrets, explain how the collective handles leaked datasets. Incoming material is checked for public interest and screened for personal information. It is then released as a torrent, published in redacted form, or placed in a restricted section that only vetted researchers can request.
The talk then covers pressures on the project. Donors are wary of leaks, so fundraising is hard, and crowdfunding for individual sources has sometimes fallen short. The speakers described a restricted dataset of about seven terabytes that surfaced on a hacking forum after a phishing attempt that impersonated a journalist. Credential sharing among newsrooms was another risk. Their response includes a physical card for accessing the search tool and reserved downloads, along with verification based on published research. They also announced a subscription fee for commercial requesters seeking exclusive embargoes.
Closing remarks and audience questions covered recruiting people who can teach processing skills and cover more languages, plus the difficulty of keeping tens of terabytes redundant across jurisdictions. Source protection was described as case by case, depending on the leaker's skill and the data. The collective also presented a lifetime achievement award to a whistleblower behind Football Leaks and Luanda Leaks.
Related talks
Talks·55 min
Lorax B. Horne · Freddy Martinez · Emma Best
Explains how the DDoSecrets collective collects, publishes and vets leaked datasets, and the ethical trade-offs involved.
Talks·51 min
Jesselyn Radack · Carey Shenkman
Examines how the Espionage Act and Computer Fraud and Abuse Act are being used against whistleblowers and journalists.
Talks·43 min
Markus Hölsä
Traces how EU chat control and high-level group proposals could erode end-to-end encryption and user privacy.


