Smart friends: Is there an encrypted help desk type application so the people making the inquiries and the people answering the inquiries can be anonymized and the requests and responses are encrypted? Asking for hundreds of thousands of federal workers...
Comments
Sorry- I can’t help myself
-Someone who was terminated for telling the truth.
It may be overkill but a firewall (hardware) will give added protection.
Never use wifi, even in your home. Too many vulnerabilities.
https://signal.org/blog/phone-number-privacy-usernames/
Not exactly what you're looking for, but might be close enough for whistleblower work.
https://en.wikipedia.org/wiki/Whistleblower_Aid
Hush Line
SecureDrop
GlobaLeaks
https://www.stopitsolutions.com/#:~:text=STOPit%20Anonymous%20Reporting%20System%E2%84%A2,Line%E2%84%A2%20to%20help%20themselves.
People that contact you electronically could be offered your P.O. box where they could send things.
Don't post images of things that are sent, there could be traceable watermarks.
How do the public access the system. Report, request, claim? What is the input?
How do you intend to access and action the output?
She could be compelled to give up sources and devices if she were arrested. Many people in the Intelligence Community are aware of the US government capabilities against encrypted apps. I'm not touching any of them to do something like this.
I’m like GET THE POPCORN, HERE THEY COME!!
the part on domestic surveillance programs and what has already been build / what capabilities are already (book from 2008 so imagine what capabilities are now)
https://www.goodreads.com/book/show/2699739-the-shadow-factory
Encrypted at rest and in transit https://www.atlassian.com/software/jira/security
Except for One Time Pads.
Used correctly, they can't be broken.
Ever.
How to apply in today's world is beyond my capacity.
Just know that everything is monitored.
Go analog (face to face meeting).
Pretend it's 1975.
1) We can describe them with sufficient clarity.
2) They are not inconsistent.
I need a clearer set of requirements.
Download it at https://getsession.org/download
OR https://element.io
OR RocketChat
Probably the easiest to use would be Dread (a forum) since it's somewhat similar to Reddit.
Or even a web hosting software would work
https://www.whmcs.com/integrated-support-tools/
These Data Centers need DATA.
Also, investing in these Data Centers has some (clauses) (?) ...
That a percentage of the Center must reside in the country ...
Saudia Arabian desert (?) Or here in the U.S.
Where, I haven't checked ... 14,000 new jobs and when complete, 4,000 new jobs in each of these Data Centers.
Each Data Center will require massive amount of energy, so structures and tech will be needed as well
heist ... the presidency?
I am talking about Mueller She Wrote opening a PO Box. And people dropping anonymous snail mail into the mail-- which you don't need a PO Box to do.
FYI, if you download ddg to your phone, you can use it to create a fake VPN that blocks all info requests from installed apps.
They used to offer free user accounts - send/receive, group chat, file sharing, etc.
https://www.sysaid.com/lp/ai-help-desk-platform?utm_source=capterra&utm_medium=cpc&utm_campaign=demo&sysaidlsd=help-desk&sysaidKey=capterra&gdmcid=ebec00d5-5e1b-46ca-87cf-8cdbeab5a18a
https://proton.me/
Signal for end-to-end messaging.
https://signal.org/
Do not put it on a personal phone if you're looking to jump ship quickly.
Calendars, email, and VPN would be Proton.
No ties back to you and you didn't break the law.
The rest you can use the link and read the information about them.
If it's not for you there are others.
Grateful for your breadth of knowledge (& sense of humor.)
Oracle HR Help Desk
https://www.oracle.com/human-capital-management/hr-help-desk/
The firewalls will be the issue. Regardless of the application, modern firewalls and edge threat defense have the capability to deconstruct packets and inspect https/ssh traffic.
It's important to know all the requirements. I suspect you might need to build something unfortunately...
No.
It only needs to support attachments up to the size you need
The sender follows the PGP ssh key system w/ the intended recipient for the attachment file, which will be encrypted, & only visible to intended recipient.
However it requires the sender & recipient to coordinate.
Probably better to settle for the secure drop, even tho you asked for help desk.
GlobaLeaks
Matrix + Element
I'm not aware of any and I would seriously have questions of trust in any app that purported to do this. It's pretty niche and presents an extremely high value target.
Note: Absolutely feel free to listen to other smart IT folks, even if they disagree. Of course. Obv.
But I wanted to share the concern my friend voiced...