This is the Digital Security Training team at Freedom of the Press Foundation (FPF), with security news that keeps you, your sources, and your devices safe. If someone has shared this newsletter with you, please subscribe here.

It’s Kevin Pham, intern on the Digital Security Training team, taking over the newsletter this week.

In the news

Russian state telecommunications and censorship agency Roskomnadzor has blocked access to Signal, ostensibly to prevent the use of messaging apps for “terrorist and extremist purposes,” Russian news agency Interfax reported. BleepingComputer confirmed that Russian internet service providers have started blocking the encrypted messenger application for private use. This contrasts with an earlier ban in March 2023 that prohibits the use of foreign messengers for government employees. The latest move means that the app has been removed from Google Play and Apple App Store in Russia. Current Signal users cannot send messages without enabling its anti censorship setting.

Since 2022, Roskomnadzor has restricted the Tor Network and over 25 virtual private network apps, leading Apple to delist major VPN providers like Proton from its App Store. Without private communications software, independent journalists are at risk of censorship and arrest by the Russian government. Read more here.

What you can do

Despite these restrictions, there are still viable methods to install and use the Android app if you are in Russia or have Russian colleagues. This applies to other countries where Signal is also blocked (e.g., Venezuela). Unfortunately, this process is much more complex on iPhones and requires significant technical ability.

Consider these following steps on your Android device:

• If you are a current Signal user, make sure to enable its built-in censorship circumvention setting. To do so, click on Signal Settings (the circle icon at the top left) > “Privacy” > “Advanced” > “Censorship circumvention.” Read Signal's documentation for specific instructions for your device.
• If you do not have Signal installed, you can download an .apk file on its official website and verify it according to its instructions. An .apk file allows you to install an Android application outside of the Google Play store. We do not recommend this kind of sideloading with any other apps unless you are confident about the legitimacy of the source. Read this guide to understand the importance of verifying software.
• To access the Signal website in Russia, you will need access to the Tor network through the Tor Browser. Within the Tor Browser, you would need Tor “bridges” to bypass censorship. Alternatively, if you have access to a working VPN service, you can also visit Signal’s website. If not, follow the instructions on this document from the Tor Project to install the Tor Browser.
• If you are living outside of Russia but have colleagues there without Tor and Signal, you can send the above document to them. Once they have the Tor Browser installed, they can install Signal directly from their website. Although we usually discourage Telegram, you can use its “Secret Chat” feature for this purpose.

Updates from our team

• We are hiring a Monitoring, Evaluation, Research, and Learning (MERL) consultant to help us develop a monitoring and evaluation framework for our digital security training courses. We will close the application before long, so check out the job description and please share it widely.
• We’ve made some updates to our guide to digital security for journalists covering protests. Check it out.
• Our digital security team spoke with our director of advocacy, Seth Stern, about the recent expansion of Section 702 surveillance authorities in the U.S. and what this means for journalists during this election year. Read our team’s second election roundtable discussion.

Our team is always ready to assist journalists with digital security concerns. Reach out here, and stay safe and secure out there.

Best,

Kevin

–

Kevin Pham
Digital Security Training Intern

Freedom of the Press Foundation