It’s the digital security training team at Freedom of the Press Foundation (FPF), with security news that keeps you, your sources, and your devices safe. If someone shared this newsletter with you, please subscribe here.

The U.K. wants Apple to share the keys to the kingdom

Under the Investigatory Powers Act of 2016, officials in the United Kingdom issued a secret order to Apple to create a backdoor for “blanket” access to encrypted data on its iCloud service for users worldwide. This may affect Apple’s Advanced Data Protection, which allows end-to-end encryption, meaning that not even Apple can read your photos or documents uploaded to iCloud when enabled. The Washington Post reported that this order will likely prompt Apple to discontinue its Advanced Data Protection offering in the U.K. Read more.

What you can do

  • According to Apple’s data request transparency report, the company has historically been highly responsive to law enforcement requests in the United Kingdom, so this invasive order is obviously out of proportion. While we think it’s likely that Apple will resist this order, this is a reminder to iCloud users that you should use Advanced Data Protection to take advantage of end-to-end encryption for your iCloud uploads, particularly if you have any sensitive reporting materials or source contact information on your phone. Learn how here. (As a longtime user myself, it feels virtually identical to using traditional iCloud.)
  • Read our former intern Kevin Pham's post on Advanced Data Protection and more steps you can take to secure your Apple environment. 
  • Don’t stop there. We have even more resources on how to secure your conversations, regardless of what kind of phone or computer you use.

Updates from our team

  • We're hiring a senior digital security trainer to help us grow our capacity to promote digital security education for journalists. Our office is based in New York, New York. Strong U.S.-based, remote candidates will also be considered. If this sounds like you, or if you know someone who you think would be great, please check out the job post.
  • We love security, which is why we collaborated with our friends at the Calyx Institute to put together some security-themed valentines just for you. Share them with the nerds you love.
  • My colleague Davis Erin Anderson wrote a new advice column on the topic of your iPhone’s Face ID feature. Does Apple keep a copy of your face? Is Tim Cook personally watching you through your camera? Spoiler: The answer is no, but give it a read to learn why.

Our team is always ready to assist journalists with digital security concerns. Reach out here, and stay safe and secure out there.

Best,
Martin

–

Martin Shelton
Deputy Director of Digital Security
Freedom of the Press Foundation