Security for journalists

Quick tips/wins

• if sharing passwords etc when people can't access Passbolt or whatever, send half over WhatsApp and half over Signal – never a whole one and especially not over here

• a couple of useful tests around getting phished – I nearly got had by someone who was pretending to be Tara Miran using a fake email the other day https://phishingquiz.withgoogle.com and https://shira.app plus another where you can test sus URLS https://urlscan.io

• if you've never been on here before, always good to check your personal email security https://haveibeenpwned.com this is also built into firefox in the menu under passwords.

• this tool which looks useful for social media mining – and can also be used to check your own online identity – it shows a scary amount of info https://lampyre.io

• Crypt pad, which is a secure open-source Google drive alternative, not practical for the whole Cable to use but if media team set up an account then we could use it to store supporting docs for stories etc allowing us to collaborate better and make confidential material available to one another – which could be extremely useful for example if someone is away from work https://cryptpad.fr

Tor Browser

Want to browser websites with out being tracked? https://www.torproject.org/projects/torbrowser.html.en

Firefox

Sounds like a conspiracy but Chrome by default saves all of your search history and mines your information to pay for the browser, which could give a person the shivers! If you find Tor too slow then http://getfirefox.com/! Highly recommend the privacy badger and ublock orgin as addons

1. uBlock Origin - stop trackers and adverts

2. privacy Badger - eats tracking cookies as it goes

3. facebooks container - keep facebook from running in none facebook tabs

If you use these sort of plug-in in chrome it's a bit useless as google all the time are making new ways of tracking that circumvents the plugins that it runs!

Tails

This is particularly useful if you don't have an open source operating system like macosx or windows and need to research something securely. Tor browser makes it hard to be spied on, Tails makes it very very hard to be spied on. Best ran from a usb, see: http://tails.boum.org/

General

Want generalised help with something specific i highly recommend privacytools.io it's great!

Security Guides

• CIJ manual for journalist

• https://securityinabox.org/

• http://en.flossmanuals.net/tech-tools-for-activism/index/

• https://riseup.net/en/security

Security testers

http://www.uk-osint.net/privacy.html

https://panopticlick.eff.org/

has my email address and password been stolen?

https://haveibeenpwned.com/