Information on who visits WikiLeaks - and what they read and upload - is an incredibly high value target. I don't see how you can argue otherwise, when Britain'

Information on who visits WikiLeaks - and what they read and upload - is an incredibly high value target. I don't see how you can argue otherwise, when Britain's top intel agency has an expensive line item in their budget just to get at that info. Given these known security flaws, it's not a stretch to assume anyone who can see the GCHQ's Piwik server can have that data too, regardless of whether they are authorized. See below for a small preview of what an attacker could exfiltrate (dissident IPs redacted for a reason): https://firstlook.org/wp-uploads/sites/1/2014/02/piwik2.png https://firstlook.org/wp-uploads/sites/1/2014/02/piwik2.png While we're talking about poor security practices: the privileged username in the screenshot is apparently still the default ("admin"), so I hope the password isn't still "changeMe" ... http://piwik.org/faq/how-to/faq_191/ http://piwik.org/faq/how-to/faq_191/