security and privacy for journalists

A Brief Overview of Security for Journalists

Created by:Eva Galperin and Jillian C. YorkElectronic Frontier Foundation

Why is security important?

• Once you are compromised, you’ve compromised your entire web of trust

• Privacy and security do not work retroactively. You have to take precautions ahead of time.

Threat Modeling

• What assets are worth protecting?• What are their vulnerabilities?• What internal or external threats

might exploit those vulnerabilities?• What appropriate security

countermeasures exist?

Best practices

Encrypted Communications

• Why do they matter?

• What is SSL/HTTPS?

• What programs should you use?

• What else should you look out for?

https://www.google.com/transparencyreport/userdatarequests/

Secure Passwords

• Lock everything

• Use a password safe (LastPass, OnePass) with a strong master password

• Use 2-factor authorization

• Beware of password recovery questions

Be aware of surveillance

Be aware of open networks

The Man in the Middle

What’s a VPN?

Anonymity

PGP

Off the Record (OTR) Messaging

Additional topics

• Phishing and malware

• Cell phones

• Beware of Skype

• Crossing the border with your electronic devices