{"id":1902,"date":"2026-10-12T07:43:24","date_gmt":"2026-10-12T07:43:24","guid":{"rendered":"https:\/\/safenarratives.org\/?p=1902"},"modified":"2026-10-27T07:05:58","modified_gmt":"2026-10-27T07:05:58","slug":"elementor-1902","status":"publish","type":"post","link":"https:\/\/safenarratives.org\/index.php\/en\/2026\/10\/12\/elementor-1902\/","title":{"rendered":"You Received a Leak. Now What?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"1902\" class=\"elementor elementor-1902\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-236d4e7 e-flex e-con-boxed e-con e-parent\" data-id=\"236d4e7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-6178dd4 e-con-full e-flex e-con e-child\" data-id=\"6178dd4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f3ded9e elementor-widget elementor-widget-heading\" data-id=\"f3ded9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\"><h2 data-elementor-setting-key=\"title\" style=\"color: #F6F8EF;font-family: &#039;Montserrat&#039;, sans-serif;font-weight: 900;font-size: 45px;text-align: left;margin: 0\">\n    <strong>You Received a Leak. Now What? <\/strong>\n<\/h2><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3489d71 e-flex e-con-boxed e-con e-parent\" data-id=\"3489d71\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-263a94a elementor-widget elementor-widget-heading\" data-id=\"263a94a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">A practical guide to protecting your sources. And yourself<\/h2>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5c72d0c e-flex e-con-boxed e-con e-parent\" data-id=\"5c72d0c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a0a907e elementor-widget elementor-widget-text-editor\" data-id=\"a0a907e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Based on a presentation by Apostolos Pyrgiotis (<a href=\"https:\/\/freedom.press\/\">Freedom of the Press Foundation<\/a>) and Kolja Weber (<a href=\"https:\/\/flokinet.is\/\">Flokine<\/a>t), done for Dataharvest 2026.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Investigative journalism depends on sources who trust you with sensitive information. That trust has a technical dimension most journalists never learned about in school. This guide walks you through what happens before a tip arrives, what to do when it does, and how to publish without burning the person who came to you.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d62272b e-flex e-con-boxed e-con e-parent\" data-id=\"d62272b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4056d54 elementor-widget elementor-widget-heading\" data-id=\"4056d54\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Before the Tip - Setting Up Your Tipline\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6a0b1c6 elementor-widget elementor-widget-heading\" data-id=\"6a0b1c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How sources find you<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-58ff4bb elementor-widget elementor-widget-text-editor\" data-id=\"58ff4bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Your tipline must be public. Sources need to know it exists before they have something to share, which means advertising it everywhere: on your website, blended into articles, and yes, even in print. The Washington Post, for example, publishes its SecureDrop address prominently. If a source only discovers your tipline after deciding to leak, it may already be too late for them to act safely.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">For technical guidance on making the most of a SecureDrop tipline, see the official documentation: https:\/\/docs.securedrop.org\/en\/stable\/admin\/deployment\/getting_the_most_out_of_securedrop.html<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-283a962 elementor-widget elementor-widget-heading\" data-id=\"283a962\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What your IT team needs to get right<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f40c203 elementor-widget elementor-widget-text-editor\" data-id=\"f40c203\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">The page where sources learn how to contact you must itself be safe to visit. Concretely:<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\">No subdomains. Use newsroom.org\/tips, not tips.newsroom.org, subdomains are easier to block and flag.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">No analytics, no trackers, zero server logs. Every log is a record that could be subpoenaed.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"3\">Tor-friendly. No CAPTCHAs, no JavaScript that blocks Tor Browser users.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"4\">Trustworthy hosting. Use a provider that is censorship-resistant and keeps no logs.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-91390be elementor-widget elementor-widget-heading\" data-id=\"91390be\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What your sources need to know<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2311d07 elementor-widget elementor-widget-text-editor\" data-id=\"2311d07\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Before a source ever contacts you, they need to understand several things that no amount of good technology on your end can fix if they get wrong:<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\">Never use work devices or work networks. Corporate systems are monitored.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">Use public spaces. Caf\u00e9s, libraries, anywhere not associated with them personally.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"3\">Files carry fingerprints. A leaked document can be traced back to the specific printer or computer that produced it.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"4\">Follow the instructions. Your tipline should explain exactly how to use Signal, SecureDrop, or whatever channel you offer.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"5\">Never discuss the leak with anyone. Not friends, not colleagues, not people they trust.<\/li><\/ul><h4 dir=\"ltr\">\u00a0<\/h4><h4 class=\"Lexical__h4\" dir=\"ltr\"><b><strong class=\"Lexical__textBold\">A cautionary tale: Chelsea Manning<\/strong><\/b><\/h4><p class=\"Lexical__paragraph\" dir=\"ltr\">In 2010, Chelsea Manning was leaking classified documents and felt isolated. (Chelsea is an American activist and\u00a0whistleblower. She is a former\u00a0United States Army\u00a0soldier who was convicted by\u00a0court-martial\u00a0in July 2013 of violations of the\u00a0Espionage Act\u00a0and other offenses, after disclosing to <i><em class=\"Lexical__textItalic\">WikiLeaks<\/em><\/i>\u00a0nearly 750,000 classified, or unclassified but sensitive, military and diplomatic documents. She was imprisoned from 2010 until 2017, when President\u00a0Barack Obama\u00a0<a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/en.wikipedia.org\/wiki\/Commutation_(law)\">commuted<\/a>\u00a0her sentence. See more info posted on Wikipedia <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/en.wikipedia.org\/wiki\/Chelsea_Manning\">https:\/\/en.wikipedia.org\/wiki\/Chelsea_Manning<\/a>) She turned to Adrian Lamo, a former hacker, via encrypted chat, not to share information, as he was not a journalist, but for emotional support. She wrote: &#8220;but im not a source for you &#8230; im talking to you as someone who needs moral and emotional f****ing support.&#8221; Lamo replied: &#8220;i told you, none of this is for print.&#8221;<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">It was. And Manning&#8217;s identity was exposed.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Sources and journalists need to understand and always remember the human factor, the impulse or the need to confide in someone, to seek support, to share the pressure and letting in any third party which might undo every technical precaution.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-85e3986 elementor-widget elementor-widget-heading\" data-id=\"85e3986\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Hardening Your Phone - GrapheneOS and Signal<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a218163 elementor-widget elementor-widget-heading\" data-id=\"a218163\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Signal actually knows about you<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1f131e7 elementor-widget elementor-widget-text-editor\" data-id=\"1f131e7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Signal is end-to-end encrypted and stores remarkably little data. When the US government subpoenaed Signal for information on 37 phone numbers, here is what Signal was legally able to hand over: the account creation date, and the last connection date. Nothing else: no messages, no call logs, no contacts, no group memberships, no profile information.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Signal itself has stated: &#8220;We simply don&#8217;t have access to things like messages, calls, profile information, group information, contacts, stories, call logs, and many other kinds of content and metadata, and we cannot share data in response to valid legal requests that we never had in the first place.&#8221;<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">You can read every subpoena Signal has ever received at: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/signal.org\/bigbrother\">https:\/\/signal.org\/bigbrother<\/a><\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">(Thinking ahead and anticipating potential risks: for now Signal does not conduct any active traffic analysis, but that could change by a judge order and in that case then, the IP addresses and temporary cryptographic keys used during a session could theoretically help law enforcement build a picture of who communicates with whom, even without reading any messages. With that in mind, mitigating measures could be: download and install Signal from their website and not via Google, do not install both Signal and Whatsapp on the same phone used, and\/ or (if possible, depending on the European country), buy and use a SIM that does require registration with personal data.)<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9c364e7 elementor-widget elementor-widget-heading\" data-id=\"9c364e7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Signal settings every journalist should enable<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c382779 elementor-widget elementor-widget-text-editor\" data-id=\"c382779\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">These are not optional extras. They are baseline protections:<\/p><table class=\"Lexical__table\"><colgroup><col \/><col \/><\/colgroup><tbody><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\"><strong>Setting<\/strong><\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\"><strong>Why it matters<\/strong><\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Sealed sender<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Makes it harder for Signal&#8217;s infrastructure to track who is talking to whom<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Sealed sender \u2192 Allow from anyone<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Extends the above protection<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Disable link previews<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">When Signal generates a preview of a link, it contacts the server behind that link, revealing your IP address<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Registration lock<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Prevents someone from hijacking your account by taking over your phone number (SIM-swap attack)<\/p><\/td><\/tr><\/tbody><\/table><h4 class=\"Lexical__h4\" dir=\"ltr\"><b><strong class=\"Lexical__textBold\">The phishing attack on journalists, January 2026<\/strong><\/b><\/h4><p class=\"Lexical__paragraph\" dir=\"ltr\">In January 2026, dozens of journalists were targeted by a fraudulent account calling itself &#8220;Signal Security Support ChatBot.&#8221; The message read: &#8220;Dear User, this is Signal Security Support ChatBot. We have noticed suspicious activity on your device [&#8230;] To prevent this, you have to pass verification procedure, entering the verification code to Signal Security Support Chatbot. DON&#8217;T TELL ANYONE THE CODE.&#8221;<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">The goal: take over journalists&#8217; accounts to see who they communicate with and read their messages. Signal has confirmed: Signal will never contact you in any way via a two-way chat within the app. Never share your Signal PIN with anyone.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Source <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/netzpolitik.org\/2026\/phishing-attack-numerous-journalists-targeted-in-attack-via-signal-messenger\/\">https:\/\/netzpolitik.org\/2026\/phishing-attack-numerous-journalists-targeted-in-attack-via-signal-messenger\/<\/a>.<\/p><h4 class=\"Lexical__h4\" dir=\"ltr\"><b><strong class=\"Lexical__textBold\">The device itself: what happens when police seize your phone<\/strong><\/b><\/h4><p class=\"Lexical__paragraph\" dir=\"ltr\">In January 2026, the FBI raided the home of Washington Post reporter Hannah Natanson to gain access to her Signal contacts (over 1,169 current and former US federal employees). They seized her phone. What the court order revealed: &#8220;Because the iPhone was in Lockdown mode, CART could not extract that device.&#8221;<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Her Lockdown mode setting stopped the extraction. Source <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.404media.co\/fbi-couldnt-get-into-wapo-reporters-iphone-because-it-had-lockdown-mode-enabled\/%5D\">https:\/\/www.404media.co\/fbi-couldnt-get-into-wapo-reporters-iphone-because-it-had-lockdown-mode-enabled\/%5D<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6024d6c elementor-widget elementor-widget-heading\" data-id=\"6024d6c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How phone extraction tools work, and their limits<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d3b7a3 elementor-widget elementor-widget-text-editor\" data-id=\"8d3b7a3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Companies like Cellebrite sell devices to law enforcement that can extract data from seized phones. Understanding how they work helps you understand your defenses:<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\">BFU (Before First Unlock): The phone has just been switched on or rebooted. Encryption keys are not yet loaded into memory. Much harder to extract data from.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">AFU (After First Unlock): The phone has been unlocked at least once since last reboot. Encryption keys are in memory. Far easier to extract data from.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"3\">TPM (Trusted Platform Module): A chip built into the device that limits how many times a PIN can be guessed wrong before the device wipes itself. Available on iPhones and on Google Pixel phones (which run GrapheneOS).<\/li><\/ul><p class=\"Lexical__paragraph\" dir=\"ltr\">The practical implication: a phone that has been recently rebooted and not yet unlocked is significantly harder to extract data from than one that has been in active use. A phone protected by a strong passphrase (not a short PIN) is harder still.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Cellebrite tools have been documented in use against journalists and activists in many countries, including, but not limited to Serbia (prompting Amnesty International&#8217;s report), Kenya (against activist Boniface Mwangi, per Citizen Lab, February 2026), and Jordan (against pro-Gaza activists, per Citizen Lab, January 2026).<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Sources: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.amnesty.org\/en\/latest\/news\/2025\/02\/cellebrite-halts-product-use-in-serbia-following-amnesty-surveillance-report\/\">https:\/\/www.amnesty.org\/en\/latest\/news\/2025\/02\/cellebrite-halts-product-use-in-serbia-following-amnesty-surveillance-report\/<\/a><\/p><p class=\"Lexical__paragraph\" dir=\"ltr\"><a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.business-humanrights.org\/en\/latest-news\/alleged-abuse-of-cellebrites-forensic-extraction-technology-against-kenyan-activist-raises-human-rights-and-corproate-accountability-concerns\/\">https:\/\/www.business-humanrights.org\/en\/latest-news\/alleged-abuse-of-cellebrites-forensic-extraction-technology-against-kenyan-activist-raises-human-rights-and-corproate-accountability-concerns\/<\/a><\/p><p class=\"Lexical__paragraph\"><a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/citizenlab.ca\/research\/from-protest-to-peril-cellebrite-used-against-jordanian-civil-society\/\">https:\/\/citizenlab.ca\/research\/from-protest-to-peril-cellebrite-used-against-jordanian-civil-society\/<\/a><\/p><h4 class=\"Lexical__h4\" dir=\"ltr\"><b><strong class=\"Lexical__textBold\">Quick wins for your phone<\/strong><\/b><\/h4><table class=\"Lexical__table\"><colgroup><col \/><col \/><\/colgroup><tbody><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\"><strong>Setting<\/strong><\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\"><strong>Why it matters<\/strong><\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Lockdown mode (iPhone)<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Blocks the attack surface used by extraction tools; stops many spyware entry points<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Advanced Protection (Android)<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Equivalent hardening for Android devices<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Remove the SIM card (newsroom devices dedicated to tips)<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Many zero-day exploits (software vulnerabilities sold to governments) specifically target SMS and MMS<\/p><\/td><\/tr><\/tbody><\/table><p class=\"Lexical__paragraph\" dir=\"ltr\"><br \/><br \/><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cd858b8 elementor-widget elementor-widget-heading\" data-id=\"cd858b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">GrapheneOS: a hardened Android for high-risk situations<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a076733 elementor-widget elementor-widget-text-editor\" data-id=\"a076733\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">GrapheneOS is a modified version of Android designed for security. It runs on Google Pixel phones. It is not a replacement for your everyday phone, it is a dedicated device for receiving sensitive tips. Its additional protections beyond standard Android include:<\/p><table class=\"Lexical__table\"><colgroup><col \/><col \/><\/colgroup><tbody><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\"><strong>Setting<\/strong><\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\"><strong>Why it matters<\/strong><\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Auto-reboot<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">If the phone is not unlocked within a set number of hours, it automatically reboots, returning to the harder-to-extract BFU state<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Disable USB port on lock screen<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Closes a physical attack vector used by extraction tools<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Sandboxed Google Play<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Runs Google&#8217;s services in an isolated container, limiting what they can access<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">User profiles<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Separate environments &#8211; personal, tips, archived files &#8211; each with its own password and apps<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Hardware attestation<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Protection against &#8220;evil maid&#8221; attacks (someone tampering with your device while you&#8217;re away from it)<\/p><\/td><\/tr><tr dir=\"ltr\"><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">Duress password<\/p><\/td><td class=\"Lexical__tableCell\" dir=\"ltr\"><p class=\"Lexical__paragraph\" dir=\"ltr\">A second password that, if entered under physical intimidation, wipes the device<\/p><\/td><\/tr><\/tbody><\/table><p class=\"Lexical__paragraph\" dir=\"ltr\"><br \/><br \/><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0cb9b86 elementor-widget elementor-widget-heading\" data-id=\"0cb9b86\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Physical Security - What the Room Knows<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fb3b342 elementor-widget elementor-widget-heading\" data-id=\"fb3b342\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Walls have ears. Literally<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c45df3e elementor-widget elementor-widget-text-editor\" data-id=\"c45df3e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Two tools are worth knowing about for high-risk environments:<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\"><b><strong class=\"Lexical__textBold\">Rayhunter<\/strong><\/b> &#8211; An open-source device that can detect IMSI catchers in your vicinity (https:\/\/efforg.github.io\/rayhunter\/).<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">Faraday bag &#8211; A pouch that blocks all radio signals to and from a device inside it. Useful when crossing borders, attending sensitive meetings, or storing devices long-term.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-de0dbae elementor-widget elementor-widget-heading\" data-id=\"de0dbae\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What is an IMSI catcher?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2cff6a0 elementor-widget elementor-widget-text-editor\" data-id=\"2cff6a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">An IMSI catcher (also called a &#8220;<b><strong class=\"Lexical__textBold\">Stingray&#8221;<\/strong><\/b>) is a device that impersonates a mobile phone tower. Law enforcement and intelligence agencies use them in crowds and at specific locations. They can:<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\">Collect records of which phones were in the same area as a specific person.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">Intercept calls and data.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"3\">Act as radio jammers, blocking communications.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"4\">Downgrade a phone&#8217;s connection to older, weaker protocols like 2G or 3G, which are easier to intercept.<\/li><\/ul><p class=\"Lexical__paragraph\" dir=\"ltr\"><u><span class=\"Lexical__textUnderline\">GrapheneOS includes protections against protocol downgrade attacks<\/span><\/u>. Standard Android and iPhone do not, to the same degree.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e0b889e elementor-widget elementor-widget-heading\" data-id=\"e0b889e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Compartmentalization: Qubes OS and SecureDrop<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eacd341 elementor-widget elementor-widget-text-editor\" data-id=\"eacd341\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h4 class=\"Lexical__h4\" dir=\"ltr\"><b><strong class=\"Lexical__textBold\">What happened to the Washington Post reporter&#8217;s laptop<\/strong><\/b><\/h4><p class=\"Lexical__paragraph\" dir=\"ltr\">The FBI did not only seize Hannah Natanson&#8217;s phone (Hannah is a narrative enterprise reporter for Washington Post who won a Pulitzer Prize in 2026). They also seized her MacBook, a portable hard drive, and an audio recorder. Unlike the phone, they <b><strong class=\"Lexical__textBold\">gained access to the laptop<\/strong><\/b>. From it, they were able to photograph and record her conversations and attachments, because they noticed disappearing messages were turned on and moved quickly by raking pictures of the messages.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">The consequences: the FBI then knew the display names and avatars of her Signal sources. They could theoretically work backwards and subpoena Signal for the phone numbers linked to those identities. Bear in mind also that in many countries the phone numbers are linked to ID cards (required for registration of the phone number) which increases the risk significantly.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Source <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/freedom.press\/digisec\/blog\/wapo-raid-security-lessons\/\">https:\/\/freedom.press\/digisec\/blog\/wapo-raid-security-lessons\/<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0094e61 elementor-widget elementor-widget-heading\" data-id=\"0094e61\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">SecureDrop: a fundamentally different system<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-09c475e elementor-widget elementor-widget-text-editor\" data-id=\"09c475e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">SecureDrop is designed for sources with a higher threat model than Signal, situations where even knowing that a specific person contacted a newsroom would be dangerous.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">How it works for sources: A source visits a special Tor-only website (not accessible from a normal browser). They receive a long, randomly generated codename. They can send messages and files. They can only receive a reply by visiting the site again and checking. There is no notification, no push alert, nothing that leaves a trace on their device.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">How it works for journalists: Traditionally, journalists accessing SecureDrop needed two separate laptops and four USB drives, creating a cumbersome workflow. This is where Qubes OS addresses a real practical problem.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0dd960e elementor-widget elementor-widget-heading\" data-id=\"0dd960e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Qubes OS: everything isolated, on one machine<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f480994 elementor-widget elementor-widget-text-editor\" data-id=\"f480994\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Qubes OS is a Linux-based operating system where every activity runs in a separate virtual machine (VM), a self-contained computer environment that cannot see or affect the others. Think of it as running several completely separate computers simultaneously on one physical device, with different colored window borders to tell them apart at a glance.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Qubes OS is not a daily driver for ordinary work. It is a dedicated, special-purpose machine. Its value for SecureDrop is that it can replace the two-laptop setup while maintaining the same security separation: your personal environment, your work environment, your tips environment, and your secure file vault are all isolated from each other. A malicious file opened in one environment cannot reach the others.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-54a7a87 elementor-widget elementor-widget-heading\" data-id=\"54a7a87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">After Verification - Storing, Sharing, and Publishing Without Burning Your Source<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fdec0d2 elementor-widget elementor-widget-heading\" data-id=\"fdec0d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Storing sensitive files offline<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69ee9ab elementor-widget elementor-widget-text-editor\" data-id=\"69ee9ab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">VeraCrypt is free, open-source software that encrypts a USB drive. It works on Windows, macOS, and Linux, with third-party support on Android and iOS.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Its most important feature for journalists is plausible deniability: a VeraCrypt drive can contain two separate encrypted volumes inside the same file.<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\">Outer volume: Visible when you enter the first password. Fill it with plausible but non-sensitive files like old tax records, previous published investigations, anything credible.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">Hidden volume: Visible only when you enter a second, different password. This is where sensitive material lives.<\/li><\/ul><p class=\"Lexical__paragraph\" dir=\"ltr\">If someone compels you to hand over your password under duress, you give them the outer volume password. They see the decoy files. They cannot prove a hidden volume exists.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fbd316f elementor-widget elementor-widget-heading\" data-id=\"fbd316f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Making physical storage tamper-evident<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2eee8f7 elementor-widget elementor-widget-text-editor\" data-id=\"2eee8f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">If you need to ship a USB drive, cross a border with one, or store one for a long period, you need to know if someone has physically accessed it without your knowledge.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">One documented method: wrap the USB drive in plastic wrap, place it in a vacuum bag with a mix of dried beans or lentils, seal it, and photograph both sides. The randomness of the bean pattern cannot be reproduced. On retrieval, compare the current pattern against your photograph using an app called BlinkComparison (Android). Any physical interference will have disturbed the pattern.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Note: tamper-evident bags are commercially available, but if your threat model includes law enforcement, they may have methods to defeat standard commercial bags (demonstrated with a syringe of acetone).<\/p><p class=\"Lexical__paragraph\"><a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/dys2p.com\/en\/2021-12-tamper-evident-protection.html\">https:\/\/dys2p.com\/en\/2021-12-tamper-evident-protection.html<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-acef594 elementor-widget elementor-widget-heading\" data-id=\"acef594\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Storing files online<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3d5fa99 elementor-widget elementor-widget-text-editor\" data-id=\"3d5fa99\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Proton Drive offers end-to-end encrypted cloud storage. For higher-risk situations, it is possible to create an anonymous Proton account using Tor Browser, meaning no IP address is linked to the account at registration.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb2c743 elementor-widget elementor-widget-heading\" data-id=\"eb2c743\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Sharing files with others, safely<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1175e9 elementor-widget elementor-widget-text-editor\" data-id=\"d1175e9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Receiving a file securely in Qubes OS or GrapheneOS does not make it safe for others. Files must be sanitized before being shared \u2014 stripped of metadata and any hidden payloads. The tool for this is Dangerzone.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Also worth noting: not every whistleblower is genuine. Since April 2025, Chinese state actors have been impersonating whistleblowers to target ICIJ journalists \u2014 sending emails with links to supposed &#8220;confidential records&#8221; that were actually credential-harvesting attacks. [Detailed account: <a class=\"Lexical__link\" dir=\"ltr\" href=\"http:\/\/www.icij.org\/investigations\/china-targets\/fake-journalists-cyber-spies-china-targets-reporters\/\">www.icij.org\/investigations\/china-targets\/fake-journalists-cyber-spies-china-targets-reporters\/<\/a>]<\/p><p class=\"Lexical__paragraph\"><a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/citizenlab.ca\/research\/how-chinese-actors-use-impersonation-and-stolen-narratives-to-perpetuate-digital-transnational-repression\/\">https:\/\/citizenlab.ca\/research\/how-chinese-actors-use-impersonation-and-stolen-narratives-to-perpetuate-digital-transnational-repression\/<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-89a6c3c elementor-widget elementor-widget-heading\" data-id=\"89a6c3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Publishing: the eight ways you can burn a source<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-09c430c elementor-widget elementor-widget-text-editor\" data-id=\"09c430c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Even after safe receipt and verification, publication itself can expose a source. There are eight documented categories of risk:<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">A. Simple metadata in photos and multimedia. Photos contain EXIF data &#8211; GPS coordinates, camera model, time of capture, sometimes the author&#8217;s name. Publishing a leaked photo without stripping this data can reveal where and when it was taken, and with what device. [Example: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.wired.com\/2012\/12\/oops-did-vice-just-give-away-john-mcafees-location-with-this-photo\/\">www.wired.com\/2012\/12\/oops-did-vice-just-give-away-john-mcafees-location-with-this-photo\/<\/a>]<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">B. Complex metadata in documents. PDFs and Microsoft Office files contain nested metadata: embedded photos with their own EXIF data, tracked changes showing edit history, author names, and organization names stored in file properties. A document that looks clean on screen may carry identifying information in layers invisible to the reader. [Example: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.theregister.com\/on-prem\/2008\/05\/30\/metadata-ruins-googles-anonymous-ebay-australia-protest\/1285606\">www.theregister.com\/on-prem\/2008\/05\/30\/metadata-ruins-googles-anonymous-ebay-australia-protest\/1285606<\/a>]<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">C. Redactions that do not work. Placing a black box over text in a PDF does not remove the text; it covers it. If the redaction is a layer rather than a permanent alteration, anyone can remove it. Always flatten and verify redactions. [Example: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.theverge.com\/2023\/6\/28\/23777298\/sony-ftc-microsoft-confidential-documents-marker-pen-scanner-oops\">www.theverge.com\/2023\/6\/28\/23777298\/sony-ftc-microsoft-confidential-documents-marker-pen-scanner-oops<\/a>]<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">D. Physical watermarks (printer dots). Printed documents often contain invisible yellow dot patterns placed by the printer. These patterns encode the printer&#8217;s serial number and the time of printing. The FBI used exactly this method to identify Reality Winner in 2017. [Example: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.theatlantic.com\/technology\/archive\/2017\/06\/the-mysterious-printer-code-that-could-have-led-the-fbi-to-reality-winner\/529350\/\">https:\/\/www.theatlantic.com\/technology\/archive\/2017\/06\/the-mysterious-printer-code-that-could-have-led-the-fbi-to-reality-winner\/529350\/<\/a>]<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">E. Digital watermarks. Organizations that share sensitive documents with a limited group of people may embed invisible, unique watermarks in each copy, different for each recipient. If the document is leaked, the watermark identifies who leaked it. If your source is the only person who received that specific copy, there is no technological defense. [Example: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/theintercept.com\/2022\/12\/15\/elon-musk-leaks-twitter\/\">https:\/\/theintercept.com\/2022\/12\/15\/elon-musk-leaks-twitter\/<\/a>]<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">F. Canary tokens. A canary token is a hidden element in a document (an image, a link, a tracking pixel) that &#8220;phones home&#8221; (it contacts a remote server) when the document is opened. This tells the document&#8217;s creator that the file was opened, when, and from what IP address. Most secure document viewers block these silently. Microsoft Office asks users to enable macros (enabling macros triggers the token). Adobe Acrobat asks permission to connect to a site. One click is all it takes. [Example: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/blog.amartinsec.com\/blog\/canary\/\">https:\/\/blog.amartinsec.com\/blog\/canary\/<\/a>]<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">G. Fingerprinting (cameras, microphones, and writing style). Camera sensors have microscopic manufacturing imperfections that create a unique &#8220;noise pattern&#8221;, a fingerprint that can be extracted from photos and matched to a specific camera. Microphones can be similarly fingerprinted. Additionally, an individual&#8217;s writing style like word choice, sentence structure, punctuation habits is a fingerprint that can be analyzed computationally (this is called stylometry). Unlike watermarking, fingerprinting requires a second known sample to compare against.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">H. The surrounding environment. Cameras and microphones capture more than the intended subject. Reflections in eyes or glasses have been used to identify locations. Background sounds, visible landmarks, reflective surfaces, all can inadvertently reveal where and who.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-56f0098 elementor-widget elementor-widget-heading\" data-id=\"56f0098\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The tool that addresses most of this: Dangerzone<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a702ff5 elementor-widget elementor-widget-text-editor\" data-id=\"a702ff5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Dangerzone is a free, open-source desktop application maintained by the Freedom of the Press Foundation. It converts potentially dangerous documents into safe ones by: opening the original file in an isolated environment, rendering it to pixels (as if printing it to a flat image), and rebuilding a clean PDF from those pixels, stripping all metadata, all embedded code, all hidden layers, all canary tokens.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">It supports over 20 file types: PDFs, Word documents, Excel files, images, and more. It runs on Windows, macOS, Linux, Tails, and Qubes OS.<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Download: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/dangerzone.rocks\/\">https:\/\/dangerzone.rocks<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0bfa940 elementor-widget elementor-widget-heading\" data-id=\"0bfa940\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">OPSEC works - documented cases<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b1b11f5 elementor-widget elementor-widget-text-editor\" data-id=\"b1b11f5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Two recent cases demonstrate that careful operational security actually protects sources:<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">KRIK (Serbia): Prosecutors demanded that the investigative newsroom hand over the original recording of an incriminating conversation, threatening journalists with fines. KRIK refused \u2014 specifically, they did not provide the original recording, protecting the forensic trail that would have identified their source. [Source: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.occrp.org\/en\/news\/serbian-prosecutors-threaten-krik-with-fine-if-it-fails-to-submit-recording-of-a-conversation\">https:\/\/www.occrp.org\/en\/news\/serbian-prosecutors-threaten-krik-with-fine-if-it-fails-to-submit-recording-of-a-conversation<\/a><\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">Radio New Zealand: An investigation into a budget leak interviewed over 40 people. The investigator specifically asked to speak to the RNZ journalist to determine &#8220;the file format and version of the Budget Report disclosed to him.&#8221; The journalist and RNZ&#8217;s lawyers declined. Without knowing the file format, investigators could not determine which specific copy had been leaked and could not identify the source. [Source: <a class=\"Lexical__link\" dir=\"ltr\" href=\"https:\/\/www.rnz.co.nz\/news\/education\/574602\/ministry-of-education-s-20-000-inquiry-fails-to-find-budget-leak-to-rnz\">https:\/\/www.rnz.co.nz\/news\/education\/574602\/ministry-of-education-s-20-000-inquiry-fails-to-find-budget-leak-to-rnz<\/a>]<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-70fc0ad elementor-widget elementor-widget-heading\" data-id=\"70fc0ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Instead of conclusions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ecf4a80 elementor-widget elementor-widget-text-editor\" data-id=\"ecf4a80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"Lexical__paragraph\" dir=\"ltr\">Protecting a source is not a single decision. It is a chain of decisions across the entire lifecycle of a tip, from the moment a source decides to come forward, to the moment you publish. Every link matters:<\/p><ul class=\"Lexical__ul Lexical__ul--depth-1\"><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"1\">Advertise your tipline &#8211; sources need to find it before they have something to share.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"2\">Sources must act safely &#8211; public devices, public locations, no conversations about the leak.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"3\">Use Signal correctly &#8211; Registration Lock, Sealed Sender, no link previews.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"4\">Harden your device &#8211; Lockdown mode, dedicated tip-receiving phone, consider GrapheneOS.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"5\">Store carefully &#8211; VeraCrypt with hidden volumes, offline when possible.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"6\">Sanitize before sharing &#8211; Dangerzone removes what you cannot see.<\/li><li class=\"Lexical__listItem\" dir=\"ltr\" value=\"7\">Publish carefully &#8211; strip metadata, verify redactions, understand watermarks, never describe the file you received.<\/li><\/ul><p dir=\"ltr\">\u00a0<\/p><p class=\"Lexical__paragraph\" dir=\"ltr\">The tools exist. The cases show they work. The question is whether you use them before you need them, because by the time you need them, it is too late to set them up.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-09f9915 e-flex e-con-boxed e-con e-parent\" data-id=\"09f9915\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>You Received a Leak. Now What? A practical guide to protecting your sources. And yourself Based on a presentation by Apostolos Pyrgiotis (Freedom of the Press Foundation) and Kolja Weber (Flokinet), done for Dataharvest 2026. Investigative journalism depends on sources who trust you with sensitive information. That trust has a technical dimension most journalists never [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1882,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[52,54],"tags":[],"class_list":["post-1902","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-safe-guard-en","category-stay-safe-en"],"_links":{"self":[{"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/posts\/1902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/comments?post=1902"}],"version-history":[{"count":7,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/posts\/1902\/revisions"}],"predecessor-version":[{"id":1909,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/posts\/1902\/revisions\/1909"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/media\/1882"}],"wp:attachment":[{"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/media?parent=1902"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/categories?post=1902"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/safenarratives.org\/index.php\/wp-json\/wp\/v2\/tags?post=1902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}