Information on who visits WikiLeaks - and what they read and upload - is an incredibly high value target. I don&#x27;t see how you can argue otherwise, when Britain&#x27;s top intel agency has an expensive line item in their budget just to get at that info.<p>Given these known security flaws, it&#x27;s not a stretch to assume anyone who can see the GCHQ&#x27;s Piwik server can have that data too, regardless of whether they are authorized.<p>See below for a small preview of what an attacker could exfiltrate (dissident IPs redacted for a reason):<p><a href="https:&#x2F;&#x2F;firstlook.org&#x2F;wp-uploads&#x2F;sites&#x2F;1&#x2F;2014&#x2F;02&#x2F;piwik2.png" rel="nofollow">https:&#x2F;&#x2F;firstlook.org&#x2F;wp-uploads&#x2F;sites&#x2F;1&#x2F;2014&#x2F;02&#x2F;piwik2.png</a><p>While we&#x27;re talking about poor security practices: the privileged username in the screenshot is apparently still the default (&quot;admin&quot;), so I hope the password isn&#x27;t still &quot;changeMe&quot; ... <a href="http:&#x2F;&#x2F;piwik.org&#x2F;faq&#x2F;how-to&#x2F;faq_191&#x2F;" rel="nofollow">http:&#x2F;&#x2F;piwik.org&#x2F;faq&#x2F;how-to&#x2F;faq_191&#x2F;</a>