
WikiLeaks has once again lost control of its cache memory, which contains a quarter-million US State Department cables. This is the second time this year, and this time the leaked files are supposedly available online. These uncensored cables are contained in a 1.73GB password-protected file named cables.csv. Apparently, this file is now circulating the Internet according to Steffen Kraft, editor of the German paper Der Freitag. He announced last week this his paper had found the file and easily obtained the password in order to unlock it.
Unlike the original cables that WikiLeaks began publishing last fall, these cables are raw and unredacted, thus containing the names of informants and suspected intelligence agents that were blacked out of the official releases. Der Freitag stated that the documents include the name of suspected agents in Israel, Jordan, Iran and Afghanistan. It even mentioned that interested parties, such as the Iranian government or intelligence agencies, could have already discovered and decrypted the file in order to uncover the names of informants.
“The story is that a series of lapses as far as I can see on behalf of WikiLeaks and its affiliates has led to the possibility a file becoming generally available which it never should have been available,” confirmed former WikiLeaks staffer Herbert Snorrason, of Iceland, who left the organization as part of a staff revolt last year, and is now part of the competing site OpenLeaks.
The German newsweekly Der Spiegel confirmed the information about the exposed file and password. According to them, the cables were contained in an encrypted file that WikiLeaks founder Julian Assange had original stored on a subdirectory of the organization’s server last year, which was not able to be searched for on the Internet unless someone already knew the location.
Assange stated that he gave the password for the file to an “external contact” in order for them to access the file’s content. With both the file and the password now online, the leak is complete. “The issue is double: on one hand there is the availability of the encrypted file, and on the other the release of the password to the encrypted file,” Snorrason told Threat Level on Monday. “And those two publications happened separately.”
Snorrason quickly added that the password leak was done “completely inadvertently.” He also declined to identify who leaked the password, as well as the circumstances of the leak. He did, however, state that it was someone who was neither with WikiLeaks nor OpenLeaks.
Last year, former WikiLeaks spokesman Daniel Domscheit-Berg and another WikiLeaks staffer led a staff revolt at WikiLeaks following a rift with Assange, and finally left the organization and set up OpenLeaks.org. When they left WikiLeaks, they took the contents of the WikiLeaks server with them, which included the encrypted file. Last December, Domscheit-Berg returned most of what he had taken, including the file containing the cables.
Supporters of WikiLeaks released an archive of the data that Domscheit-Berg had returned, which he did as a public service to provide readers with access to everything WikiLeaks had previously published. Among the documents that Domscheit-Berg released was the encrypted file containing the cables. Several months later, the person to whom Assange had provided the password somehow ended up making it publicly available online. Der Spiegel did not state on why or how that person published the password, and Snorrason declined to say any more in fear of guiding people to the password.
“It’s not very obvious how the password was made available, and we’re not keen on making it any more obvious how or why it might have been published,” Snorrason said.
The encrypted file and the password went pretty much unnoticed until very recently. Der Spiegel implied that Domscheit-Berg or someone connected to his rival OpenLeaks organization was responsible for calling Der Freitag’s attention to the file and password in order to make a point that WikiLeaks is unable to properly secure the data it possesses. Domscheit-Berg did not respond to en e-mail that Ars Technica sent regarding a question from Threat Level on Monday.
WikiLeaks completely lost control of its database of cables, allowing some 130,000 to access them. Last year, as the organization and its media partners were beginning preparations to publish stories related to the cables, a WikiLeaks member gave the entire database to a freelance reporter, Heather Brooke. Brooke was not a member of the approved cabal of media outlets that had been given access to the documents. Her possessing these documents directly threatened to derail the plans that WikiLeaks and its media partners work out for publication. The Guardian newspaper in the UK made an agreement with Brooke that she wouldn’t publish any of the cables or stories related to them.
WikiLeaks responded to the leak on Twitter on Monday by writing: “There has been no ‘leak at WikiLeaks’. The issue relates to a mainstream media partner and a malicious individual.”
Source: Ars Technica