SpeakUp.ie

From LeakDirectory

Jump to: navigation, search

General Notes

Transparency International (TI) Ireland is the Irish chapter of the worldwide movement against corruption (defined as the abuse of entrusted power for private gain).

[...]

Speak Up is a service for anyone facing an ethical dilemma or considering reporting wrongdoing at work. It's for people or organisations that have been the victim of corruption or white collar crime. It's for anyone who wants to see an end to corruption, cronyism and unchecked conflicts of interest. By calling our free phone number, or using Transparency International Ireland's secure email system, you can get the information and help you need to report or stop corruption before someone else becomes a victim.

Uses a Hushmail anonymous nym.hush.com email alias to an encrypted Hushmail email account and Hushmail encrypted Form

https://forms.hush.com/speakuphelpline

Would require a Canadian court order to force Hushmail to compromise this.

Contact Details

website:

https://transparency.ie/helpline/contact-us-securely

phone: 01 6127067

Helpline 1800 844 866

info@transparency.ie

Press enquiries

info@transparency.ie

https://transparency.ie/helpline/contact-us-securely

General enquiries

Freephone telephone (in the Irish republic) :

https://transparency.ie/content/contact-speak-freephone

By phone - Freephone 1800 844 866

Bear in mind when calling:

   Our office hours are 10.00 to 18.00 Monday to Friday (excluding public holidays)
   You do not have to give your name or your contact details
   (however we will need some contact details if we are to follow up on your initial call)
   Any details you provide will treated in the strictest confidence
   A call back from the service team members will appear on your phone without caller ID
   No telephone conversation can be encrypted or guaranteed to be 100% fully secure
   You can choose to leave a voicemail message if we were unable to answer when you called

Postal Address:

Transparency International Ireland

6-9 Trinity Street, Dublin 2

Republic of Ireland

Social Networking publicity

Twitter

https://twitter.com/#!/Transparency_ie

FaceBook

http://www.facebook.com/pages/Transparency-International-Ireland/157946654261313

Blog / RSS

https://transparency.ie/taxonomy/term/1/0/feed

YouTube

http://www.youtube.com/user/TransparencyIreland

LinkedIn

http://www.linkedin.com/company/transparency-international-ireland?trk=fc_badge

Financial Donation methods

https://transparency.ie/donate FAQ about donations to TI Ireland

   Can you accept anonymous donations?
   No, we can't. The organisations governing documents and commitments to the TI movement mean that we must disclose all of our revenue sources. So, please ensure you give us your contact details when making a donation.
   You can tell us to restrict your funds to a certain cause or programme of activity.
   What's Ammado?
   Ammado is an online community space that connects nonprofts, companies and individuals dedicated to positive change. See our Ammado profile here.

By Bank

Donations can be made directly to Transparency International Ireland's bank a/c

Bank of Ireland, Lower Baggot, St Dublin 2.

A/c No: 69163705

Sort Code: 901490

By Post

Transparency International (Ireland)

6-9 Trinity Street, Dublin 2

Currently accepting submissions of whistleblower leaks ?

Yes

Explicit promises about Anonymity, Privacy or Security

The Hushmail email address and Contact / Submissions Form are correctly described as Secure, but they are not Anonymous.

No telephone conversation can be encrypted or guaranteed to be 100% fully secure

Promises are made to treat each case in the strictest confidence.

Restrictive Legal Terms & Conditions

No

Practical Advice on preserving Whistleblower Anonymity

Yes

https://transparency.ie/helpline/contact-us-securely

Do

   Think carefully about the information you give us
   Avoid sending information from a work or home computer
   Make sure that the computer you use to send us this message is free of malware and spyware - particularly keystroke logging malware. Update and upgrade your antivirus protection software
   Consider setting up your own Hushmail account to communicate with us. You can setup a free hushmail email account here.
   Address your hushmail emails to
   speakuphelpline@nym.hush.com
   Remember that no phone call is 100% secure
   Consider using a nickname or only your first name. It is not necessary for us to initially know your full name

Don't

   Offer the names of people, companies or organisations involved in any case you're reporting on - we initially do not need specific details in helping you deal with your dilemma or concern
   Call from your office or home landline. Also avoid calling from a bill-pay phone
   Tell your colleagues you are reporting a concern until you are sure you have support from a legal professional or people you trust
   Make a copy of your correspondence with us on your home or work computer

Leak Submission Encryption

Digital Certificate fingerprints published on their website:

No

Qualsys SSLLabs SSL Server Test rating:

https://www.ssllabs.com/ssldb/analyze.html?d=transparency.ie

Overall rating: B [73]

Certificate: 100

Protocol Support: 85

Key Exchange: 80

Cipher Strength: 60

A couple of 56 bit Weak cipher keys suites have not been forbidden.

OCSP enabled (switch this off in your web browser if you are feeling paranoid)

The Hushmail Secure Form has a better score:

https://forms.hush.com/speakuphelpline

https://www.ssllabs.com/ssldb/analyze.html?d=forms.hush.com

Overall rating: A [88]

Certificate: 100

Protocol Support: 85

Key Exchange: 90

Cipher Strength: 90

One of the best SSLabs test scores available

PGP Public Encryption Key

No

(although they could use their Hushmail Open PGP one if they chose to do so)

TOR Hidden Service

No

I2P eepsite

No

PrivacyBox.de

No

Hushmail Secure Form

Yes

https://forms.hush.com/speakuphelpline

Leak Submission Anonymity

TOR users blocked from access

No

3rd Party or persistent tracking cookies or graphics

No

CAPTCHA graphics generated from another website e.g. GoogleRe-Captcha

No

Mixed mode non-SSL graphics or style sheets

No

Embedded video clips etc. from another website e.g. YouTube

No

Flash file uploader class

No

Communications / Acknowledgement back to the whistleblower via the website

Acknowledgement of receipt of information

e.g. file upload success indicator - has the leak message or upload

actually been received successfully ?

No

Leak analysis work flow status reporting

e.g. Has anyone actually looked at what the whistleblower has submitted ?

No

Private message box

e.g for 2 way communications back to the anonymous whistleblower, asking

for clarification, offering advice etc.

No

Domain Name Resilience

Domain Name Registrar

register.ie

register.ieis in the Republic of Ireland

Multiple Internet Service Providers, in different legal jurisdictions ?

No

Domain Name Server(s) & jurisdiction(s)

ns3.hosting.digiweb.ie

ns2.hosting.digiweb.ie

ns1.hosting.digiweb.ie

digiweb.ie is in the Republic of Ireland

Web Server hosting jurisdiction(s)

transparency.ie 91.216.236.120 is in Ireland(IE)

Actual Physical Mirrors of the website:

None

Content officially available via BitTorrent etc P2P etc.

No

Personal tools