Researchers Say WSJ's WikiLeaks Copycat Is Full Of Holes
The Wall Street Journal wants a WikiLeaks of its own: a conduit for sources to securely submit large caches of data to the site's reporters. But some security researchers say the Journal has yet to learn a basic rule of digital whistleblowing …
Context & Ripple Effects
The Wall Street Journal's SafeHouse is its answer to the wave WikiLeaks started in late 2010 — a period when banks were bracing over the rumored Bank of America document dump and newsrooms were fighting over whether WikiLeaks counts as a media entity. The Journal's move is an attempt to absorb that leak model into mainstream journalism: a branded conduit where sources hand large caches straight to reporters.
But on May 6, 2011, security researchers judged the clone against the original and found it wanting — the same day the Journal issued a statement responding to SafeHouse's lack of safety. The episode turns source protection into a testable technical claim, not just an editorial promise.
First-order effects
- Potential SafeHouse sources now face a documented gap between the anonymity the Journal promises and what researchers say the system delivers — the exact population the conduit was built for is the one most exposed.
- The Journal is pushed into a public defensive posture hours into the story, issuing a statement while independent researchers, not its own newsroom, control the security narrative.
Second-order effects
- Other newsrooms weighing WikiLeaks-style dropboxes must treat researcher audits as a launch gate, since SafeHouse shows that a flawed debut damages the brand promising confidentiality.
- Security researchers gain a new institutional role as de facto certifiers of press-freedom infrastructure, with outlets' sourcing operations subject to the same disclosure pressure as any software product.
Third-order effects
- If the pattern holds, anonymous-source protection migrates from legal shielding toward cryptographic engineering, splitting newsrooms into those that can build vetted submission systems and those that cannot.
- Mainstream media ends up in direct technical competition with WikiLeaks for sources, making operational security — not editorial reach — the differentiator in high-stakes leaking.
The trend: Legacy newsrooms are racing to build WikiLeaks-style secure submission systems, and independent security researchers are becoming the arbiters of whether those systems deserve a source's trust.