Digital Security Articles & Newsletters

All Articles

    eacdc00a-2f14-6ac5-145d-cc785b592406

    Bill expands US spying powers

    Newsletter

    Last week, Congress reauthorized a controversial surveillance authority, Section 702 of the Foreign Intelligence Surveillance Act. While legislators considered reforms to FISA that would restrain the federal intelligence and law enforcement community’s abilities to spy on American communications without a warrant, they in fact expanded these surveillance powers to subject more electronic communications service providers, such as U.S. cloud computing data centers, to data collection.

    Dr. Martin Shelton
    3414dff9-26c5-b870-35f2-aeefe3836d2c

    Apple warns iPhone users of targeted malware

    Newsletter

    On April 10, Apple sent users in 92 countries warning of mercenary malware attacks targeting the iPhone. The notification did not provide details about the identities of the attackers. According to TechCrunch, Apple warned, “This attack is likely targeting you specifically because of who you are or what you do. Although it’s never possible to achieve absolute certainty when detecting such attacks, Apple has high confidence in this warning — please take it seriously.”

    Dr. Martin Shelton
    Reporting from a presidential election

    Preparing for election-related security issues

    Newsletter

    Throughout this year, our digital security training team will share our thoughts on navigating security issues during the 2024 election season. Elections around the world experience distinct security issues that may change from year to year, but in the U.S. we look to 2020 for lessons on how to get ahead of likely issues, from surveillance of our sensitive communications to perennial phishing attacks and harassment for political reporting.

    Dr. Martin Shelton
    1712174489970

    Google to delete old Chrome Incognito data

    Newsletter

    Following a class-action lawsuit over Google’s handling of user data in its Chrome browser’s “Incognito” private browsing mode, the search company will expunge “billions of event-level data records that reflect class members’ private browsing activities” improperly collected before January 2024. It also updated its Incognito landing page to highlight that even Google can discern your activities in private browsing mode. Additionally, the company will be required to delete data that makes users’ private browsing data personally identifiable, such as IP addresses.

    Dr. Martin Shelton
    ea0eaa31-e10d-25c7-1bae-513b73402919

    DOJ sues Apple, spotlighting iMessage

    Newsletter

    The U.S. Department of Justice filed an antitrust lawsuit against Apple, claiming the company engages in monopolistic practices over the smartphone market, preventing competitors by degrading the experience of communicating with non-Apple users in its products. iMessage features prominently in the suit, with the DOJ alleging consumers are disincentivized to leave its “walled garden” and so miss out on unique features built into the iMessage protocol, including end-to-end encryption between Apple users.

    Dr. Martin Shelton
    Blue lattice behind three ornate keys_credit Electronic Frontier Foundation

    Post-quantum iMessage

    Newsletter

    Both in the U.S. and abroad, governments are capturing encrypted connections that pass over the public internet and saving them for later use. Within years or decades, post-quantum computers could meaningfully shorten the amount of time required to unscramble encryption, allowing attackers to read previously private messages. So a growing number of organizations, including Apple, are preparing for attacks like these with post-quantum encryption. Read more in our newsletter.

    Dr. Martin Shelton
    A dumpster on fire with a pink background

    Avast caught selling browsing data

    Newsletter

    Aye hearties, gangway — the Avast cor-pirates are walking the plank. That’s because the company sold user data without consumers’ knowledge, according to the Federal Trade Commission, which ordered U.K.-based Avast Limited to pay $16.5 million and will also bar the antivirus company from selling or licensing browser data for advertisements. Read more in our newsletter.

    Dr. Martin Shelton
    Header image with a graphic of Signal's "speech bubble" logo, with a pattern of silhouettes of phones in the background.

    Signal usernames are here!

    Newsletter

    This week, security nerds are dancing in the streets because Signal, the encrypted messaging app, is finally rolling out usernames. Signal has previously required users to provide their phone number as an identifier, but with this most recent update, users may instead use a username. Read more in our newsletter.

    Dr. Martin Shelton

Get Notified. Take Action

Sign up to stay up to date and take action to protect journalists and sources everywhere.

See all newsletters

Thanks for subscribing to Freedom of the Press Foundation's mailing list. We'll send you opportunities to take action on combating government secrecy, protesting mass surveillance, and protecting reporter's rights.

A woman holding a Yes to Free Press sign