maybe it's noy so much about steg - maybe it's about the connections - Guardian Project >PKHaven > Freedom of Press Foun -
and securedrop
Maybe JPB stood for something different than the cabal
The doc of SecureDrop assumes the Organization Hosting SecureDrop (in
this case FPF)
• The organization wants to preserve the anonymity of its sources.
• The organization acts in the interest of allowing sources to submit documents, regardless of the contents of these documents.
• The users of the system, and those with physical access to the servers, can be trusted to uphold the previous assumptions unless the entire organization has been compromised.
• The organization is prepared to push back on any and all requests to compromise the integrity of the system and its users, including requests to deanonymize sources, block document submissions, or hand over encrypted or decrypted submissions.
What if the above is assumed, but the assumption's incorrect?
Sauce https://docs.securedrop.org/en/latest/threat_model/threat_model.html