1 of 46

DDoSecrets

A library for leaks and hacks

Lorax Horne Sept 21, 2023

2 of 46

Data received and verified

Source: backdrifting.net

3 of 46

Data received and verified

Source: backdrifting.net

4 of 46

Is it of public interest?

Data received and verified

Source: backdrifting.net

5 of 46

Is it of public interest?

Data received and verified

Discard it

Source: backdrifting.net

𝔁 No

6 of 46

Is it of public interest?

Data received and verified

Does it contain PII?

Yes ✔

Discard it

Source: backdrifting.net

𝔁 No

7 of 46

Is it of public interest?

Data received and verified

Does it contain PII?

Yes ✔

Discard it

Publish via torrent

𝔁 No

Source: backdrifting.net

𝔁 No

8 of 46

Is it of public interest?

Can PII be stripped?

Data received and verified

Does it contain PII?

Yes ✔

Discard it

Publish via torrent

Yes ✔

𝔁 No

Source: backdrifting.net

𝔁 No

9 of 46

Is it of public interest?

Can PII be stripped?

Data received and verified

Does it contain PII?

Yes ✔

Discard it

Publish via torrent

Announce as Limited Distribution

Yes ✔

𝔁 No

Source: backdrifting.net

𝔁 No

𝔁 No

10 of 46

Is it of public interest?

Can PII be stripped?

Data received and verified

Does it contain PII?

Yes ✔

Publish redacted data

Discard it

Publish via torrent

Announce as Limited Distribution

Yes ✔

Yes ✔

𝔁 No

Source: backdrifting.net

𝔁 No

𝔁 No

11 of 46

What is DDoSecrets?

We protect our sources

12 of 46

What is DDoSecrets?

We protect our sources

  • We receive submissions from any party and do not try to identify our sources.

13 of 46

What is DDoSecrets?

We protect our sources

  • We receive submissions from any party and do not try to identify our sources.
  • We are interested in data that is not already public elsewhere.

14 of 46

What is DDoSecrets?

We protect our sources

  • We receive submissions from any party and do not try to identify our sources.
  • We are interested in data that is not already public elsewhere.
  • We will evaluate all submissions for a public interest.

15 of 46

What is DDoSecrets?

We protect our sources

  • We receive submissions from any party and do not try to identify our sources.
  • We are interested in data that is not already public elsewhere.
  • We will evaluate all submissions for a public interest.
  • We are a registered non-profit in the United States.

16 of 46

What is DDoSecrets?

We protect our sources

  • We receive submissions from any party and do not try to identify our sources.
  • We are interested in data that is not already public elsewhere.
  • We will evaluate all submissions for a public interest.
  • We are a registered non-profit in the United States.
  • We have a global mandate.

17 of 46

18 of 46

Public data

Collected on our data server and spread via torrents

  • Examples: Bahamas corporate registry, Roskomnadzor Moscow

19 of 46

Public data

Collected on our data server and spread via torrents

  • Examples: Bahamas corporate registry, Roskomnadzor Moscow
  • We describe the datasets and collect research that uses it on ddosecrets.com

20 of 46

Public data

Collected on our data server and spread via torrents

  • Examples: Bahamas corporate registry, Roskomnadzor Moscow
  • We describe the datasets and collect research that uses it on ddosecrets.com
  • Public data server is data.ddosecrets.com.

21 of 46

Public data

Collected on our data server and spread via torrents

  • Examples: Bahamas corporate registry, Roskomnadzor Moscow
  • We describe the datasets and collect research that uses it on ddosecrets.com
  • Public data server is data.ddosecrets.com.
  • We ask people who can: download via the torrents.
  • We seed the torrents, others can seed too

22 of 46

23 of 46

Limited distribution (“Limdis”)

Reserved collection, needs verification to access

24 of 46

Limited distribution (“Limdis”)

Reserved collection, needs verification to access

  • We only publish announcements for our limited distribution datasets.

25 of 46

Limited distribution (“Limdis”)

Reserved collection, needs verification to access

  • We only publish announcements for our limited distribution datasets.
  • People with a research or journalism background request access.

26 of 46

Limited distribution (“Limdis”)

Reserved collection, needs verification to access

  • We only publish announcements for our limited distribution datasets.
  • People with a research or journalism background request access.
  • We verify their background and look at their publishing history.

27 of 46

Limited distribution (“Limdis”)

Reserved collection, needs verification to access

  • We only publish announcements for our limited distribution datasets.
  • People with a research or journalism background request access.
  • We verify their background and look at their publishing history.
  • If evidence of responsible use of sensitive data, we give access.

28 of 46

Limited distribution (“Limdis”)

Reserved collection, needs verification to access

  • We only publish announcements for our limited distribution datasets.
  • People with a research or journalism background request access.
  • We verify their background and look at their publishing history.
  • If evidence of responsible use of sensitive data, we give access.
  • Don’t re-share limdis data. Don’t re-publish. Don’t try to sell it.

29 of 46

30 of 46

Hunter Memorial Library

Indexed data, search tool for researchers

31 of 46

Hunter Memorial Library

Indexed data, search tool for researchers

  • Our instance of Aleph, lives at hunter.ddosecrets.com

32 of 46

Hunter Memorial Library

Indexed data, search tool for researchers

  • Our instance of Aleph, lives at hunter.ddosecrets.com
  • Less features than Aleph, less volume of data. Different leaks

33 of 46

Hunter Memorial Library

Indexed data, search tool for researchers

  • Our instance of Aleph, lives at hunter.ddosecrets.com
  • Less features than Aleph, less volume of data. Different leaks
  • Sometimes embargoed or unpublished collections

34 of 46

Hunter Memorial Library

Indexed data, search tool for researchers

  • Our instance of Aleph, lives at hunter.ddosecrets.com
  • Less features than Aleph, less volume of data. Different leaks
  • Sometimes embargoed or unpublished collections
  • Can cross-reference, run searches, graphically explore PDFs and emails

35 of 46

Hunter Memorial Library

Indexed data, search tool for researchers

  • Our instance of Aleph, lives at hunter.ddosecrets.com
  • Less features than Aleph, less volume of data. Different leaks
  • Sometimes embargoed or unpublished collections
  • Can cross-reference, run searches, graphically explore PDFs and emails
  • Same rules as the Limited distribution server, different system password�

36 of 46

37 of 46

38 of 46

39 of 46

40 of 46

41 of 46

42 of 46

43 of 46

44 of 46

Submit leaks to us…

45 of 46

46 of 46

Questions?

Email us at press@ddosecrets.com