security and privacy for journalists
TRANSCRIPT
A Brief Overview of Security for Journalists
Created by:Eva Galperin and Jillian C. YorkElectronic Frontier Foundation
Why is security important?
• Once you are compromised, you’ve compromised your entire web of trust
• Privacy and security do not work retroactively. You have to take precautions ahead of time.
Threat Modeling
• What assets are worth protecting?• What are their vulnerabilities?• What internal or external threats
might exploit those vulnerabilities?• What appropriate security
countermeasures exist?
Best practices
Encrypted Communications
• Why do they matter?
• What is SSL/HTTPS?
• What programs should you use?
• What else should you look out for?
https://www.google.com/transparencyreport/userdatarequests/
Secure Passwords
• Lock everything
• Use a password safe (LastPass, OnePass) with a strong master password
• Use 2-factor authorization
• Beware of password recovery questions
Be aware of surveillance
Be aware of open networks
The Man in the Middle
What’s a VPN?
Anonymity
PGP
Off the Record (OTR) Messaging
Additional topics
• Phishing and malware
• Cell phones
• Beware of Skype
• Crossing the border with your electronic devices