A hacktivist has scraped more than half-a-million payment records from a provider of consumer-grade stalkerware apps, because stalkerware makers don't give a shit about the security of their products. techcrunch.com/2026/02/09/h...

Every day my colleagues at @freedom.press kick ass — strategically. Most recently my colleagues filed a bar complaint against the prosecutor behind the raid on a Washington Post reporter’s home.

they pissed off the WeRateDogs guy enough from him to break character to directly tell them off, that's genuinely impressive levels of being an asshole

In the name of protecting the children, age verification is slowly killing online platforms for ordinary users. The result has been to shift users to other venues — sometimes less reputable ones.

Lockdown Mode has blocked some folks from messaging me over SMS, and occasionally fails to load images in Safari. That is kind of annoying. Other than that, everything pretty much works the same. If you feel at acute risk, or if you’re a security nerd, it’s worth trying it out.

INBOX: Washington Post Ukraine Correspondent Lizzie Johnson announces that she has been laid off in the middle of a below-freezing war zone without power, heat, or running water.

We at the @postguild.bsky.social are raising money for the hundreds of journalists the Post just laid off. This goes to the people who are hurting, not the Post. Or if you'd rather, go subscribe to an independent journalist. Support is hugely appreciated. www.gofundme.com/f/standing-t...

Dril presents without comment

Lockdown Mode has blocked some folks from messaging me over SMS, and occasionally fails to load images in Safari. That is kind of annoying. Other than that, everything pretty much works the same. If you feel at acute risk, or if you’re a security nerd, it’s worth trying it out.

Kind of amazed she had it turned on? I only turn it on when I'm crossing borders or am visiting a country controlled by a repressive regime ahhh shit

I personally do not think some rich man should be able to buy an institution like this like a toy and then break it when he doesn’t want to play with it anymore. bsky.app/profile/benm...

look at what hustle culture has done to us www.newsobserver.com/news/state/n...

We're getting a lot of questions about Signal group chats, and how to use them as safely as possible. Share widely: freedom.press/digisec/blog...

I was interviewed for this great lil piece on how to use Signal safely and responsibly by @steviebonifield.bsky.social for @theverge.com. TLDR Signal has NOT been hacked by the FBI but public groups are *public* "Chat, if you wouldn't say it in court, don't say it in here". tinyurl.com/bdx5affn

Here's our team's take on how to use Signal group chats safely from a digisec perspective.

We're getting a lot of questions about Signal group chats, and how to use them as safely as possible. Share widely: freedom.press/digisec/blog...

I suspect my journalist friends already know this, but the risk associated with protests — no matter how normie-coded they might be — is extremely dependent on a just few people making bad decisions that lead to unnecessary escalations.

New court record from the FBI details the state of the devices seized from Washington Post reporter Hannah Natanson: phone was on w/Lockdown Mode; personal laptop was off; work laptop was on w/Touch ID; several Signal chats used disappearing messages. storage.courtlistener.com/recap/gov.us...

Yusssss. www.eff.org/deeplinks/20...

Following the recent raid of a Washington Post journalist’s home, we've been getting a lot of quetions about what journalists can do to lower risk to their most sensitive data if they expect someone to snatch their device. freedom.press/digisec/blog...

WARNING, fellow journalists: As @nicoschmidt.io explains, attackers are trying to hijack reporters' Signal accounts by tricking people into handing over their 2FA codes. www.linkedin.com/posts/nicosc...

Following the recent raid of a Washington Post journalist’s home, we've been getting a lot of quetions about what journalists can do to lower risk to their most sensitive data if they expect someone to snatch their device. freedom.press/digisec/blog...

There are a lot of citizen journalists using these groups to learn where to document abuses. This is what you'd do if you wanted to intimidate them and suppress coverage. www.nbcnews.com/tech/interne...

I was going to ask y'all to donate to @signal.org but I had to do it first. Now that I have, please consider learning about Signal, and why privacy is important, even when you don't have anything to hide, then consider donating to help Signal continue their work. signal.org/donate

Between discontinuing security updates for Windows 10 and basically giving away BitLocker encryption keys, Microsoft seems like they are moving in the wrong direction on security. I hope they get their house in order.

According to its new privacy policy, TikTok now collects more data on its users, including their precise location, after majority ownership officially switched to a group based in the US. www.wired.com/story/tiktok...

Between discontinuing security updates for Windows 10 and basically giving away BitLocker encryption keys, Microsoft seems like they are moving in the wrong direction on security. I hope they get their house in order.

Do not store your Bitlocker encryption keys on Microsoft's servers if your threat model includes governments or law enforcement. As this article points out, this is the result of a design choice Microsoft made. It didn't have to be this way. www.forbes.com/sites/thomas...

I'll just leave this here… freedom.press/digisec/blog...

I'll just leave this here… freedom.press/digisec/blog...

The raid on the home of @washingtonpost.com’s @hannahnatanson.bsky.social is a reminder journalists need to be vigilant. We can’t stop government overreach — but we can help you secure yourself digitally. Watch @trevortimm.bsky.social share tips that can make a real difference for journalists.

I am so, so tired. www.washingtonpost.com/national-sec...

If you're a journalist looking for digital security advice, check our our great weekly @freedom.press newsletter from @mshelton.bsky.social. This week's is on how you can use AI in a much more privacy-focused way. Simple tips. Subscribe inside! freedom.press/digisec/blog...

Following the raid on the home of @washingtonpost.com reporter @hannahnatanson.bsky.social on Wednesday, here are concrete steps to take to safeguard yourself and your sources.

Photo by Pierre Lavie. Yes this is me. And I threw my Leica. It landed on the bass plate with hardly a scratch. Another Photographer grabbed it along with my phone and I was able to track him later. I was held face down tear gas deployed right in front of me and pepper sprayed directly into the eye.

On Friday, January 9, ICE arrested a member of our union, the Minnesota Newspaper and Communications Guild, as part of Operation Metro Surge. He has been transferred to a detention facility in Texas, where he is awaiting action on his petition for habeas corpus. newsguild.org/guild-member...

If you are a journalist who is not already using @signal.org or wants to learn more about digital security more broadly (for some reason) check out our guides. Thanks @evacide.bsky.social!

If you are a journalist who is not already using @signal.org or wants to learn more about digital security more broadly (for some reason) check out our guides. Thanks @evacide.bsky.social!

The FBI’s raid today on the home of @washingtonpost.com reporter @hannahnatanson.bsky.social is an alarming escalation in the Trump administration’s war on the press. Watch @trevortimm.bsky.social explain how the DOJ is not only attacking the First Amendment but also ignoring federal law.

The FBI raided the home of a Washington Post reporter, and seized a phone, Garmin watch and two laptops, including a personal laptop. pressfreedomtracker.us/all-incident...

I'm curious to see how this performs against something like ChatGPT. arstechnica.com/security/202...

We're hiring. If you or someone you know are looking for a role in HR/finance, @freedom.press is a great place to work. freedom.press/careers/job/...

I'm apparently just old enough to go, "Ah yes, Discord, it's like Slack, for the youths"

Names aren't classified, publishing a government higher-up's name is not "doxxing," and journalists are entitled to publish news, even if it is classified, as long as they don't break the law to get it. It's not the press's job to keep the government's secrets.

We've removed the paywall from this guide so everyone can access it. 👇 Stay safe.

What's stopping you from looking like this?

Y'all the brand contortion olympics are happening

“I want you to think of your printer as having a soul. Also, it loves you. This printer is ride or die.”

Newsrooms: We've made a lot of changes to our guide to confidential tip pages. The biggest change — informed by our research into common channels — is that we've actually cut WhatsApp from the list and added web forms. Check it out. freedom.press/digisec/blog...