The platform Riseup offers various options for secure communication online, primarily for leftist or anarchist groups. The service is very popular, with thousands of users, including Wikileaks, which uses their mail servers for communication. Since it is, of course, a thorn in the side of state authorities that they cannot completely monitor activities on the internet, there is always the risk that the operators will be forced to hand over data or that intelligence agencies will snoop on the servers. However, it can also be prohibited to inform users that one has been compelled to release data, which is why the so-called
Warrant Canary has been established. In short, this means that a status is regularly published on a page indicating that the services have not yet been compromised by the state, as long as that is indeed the case. If an update is missing, it can be assumed that the servers are being monitored, but the operator is not allowed to publicly state this.
This is exactly what has now happened with Riseup. The
last update was on August 16, which was three and a half months ago. However, it is also stated on the page that they intend to update the status quarterly. Therefore, there is reason to fear that the services of Riseup are no longer secure. Anyone with an account there should carefully consider to what extent they want to continue using it.
Further information with detailed insights can be found on the following pages:
Riseup.net compromised? Users beware!RiseUp.net: Has the canary died?Email provider RiseUp: The canary has fallen silentUnderstanding RiseUp.net's current status after their Nov 21 announcementRiseup’s Canary Has Died