The disturbing indictment against journalist Tim Burke reportedly arises in part from Burke’s dissemination of outtakes from a 2022 Tucker Carlson interview with Ye. Federal prosecutors accuse Burke of “scouring” the internet for news and failing to obtain express authorization before accessing information posted on public websites. Requiring journalists to get permission to report news is, obviously, problematic. Read more in our newsletter.

The High Court in London is hearing arguments this week on whether to extradite Julian Assange to the United States to face charges under the Espionage Act for obtaining and publishing secret documents from a source — also known as journalism. We’re doing everything we can to urge the Department of Justice to drop the Espionage Act charges against Assange ahead of his potential extradition. You can help.

Next week, the High Court in London will consider whether Julian Assange should be extradited to the United States to face charges under the Espionage Act for obtaining government secrets from a source and publishing them. Even if you don’t like Assange, or don’t think he’s a journalist, his case poses an existential threat to the First Amendment rights of the journalists you do like.

As unlikely as it sounds, Republicans and Democrats are putting their differences aside to support the most important press freedom legislation in modern times — the PRESS Act.

Former IRS contractor Charles Littlejohn received the maximum sentence of five years’ imprisonment on Monday, after pleading guilty to leaking Donald Trump’s returns to The New York Times. Littlejohn also leaked a tranche of ultrawealthy Americans’ tax documents to ProPublica. It’s sadly ironic that Littlejohn is being harshly punished for exposing billionaire tax evasion while billionaire tax evaders themselves continue to be afforded leniency by the judiciary.

The PRESS Act -– which passed the House last week with no opposition — is the most important press freedom legislation in modern history. It would finally put an end to retaliatory surveillance of journalists who embarrass officials, as well as court orders requiring journalists to choose between burning their sources and risking jail time. As it heads to the Senate, we answer some of the common questions we’ve seen asked about the act. Topics range from the substance and scope of the bill to what you can do to help get it through the Senate.

The House of Representatives passed the PRESS Act by unanimous consent on Jan. 18, 2024. The act is a bipartisan reporter’s shield bill that would protect journalists from being forced to name their sources in federal court and would stop the federal government from spying on journalists through their technology providers. It’s the strongest shield bill we’ve ever seen — and also the one with the best chance of becoming law. Now it’s up to the Senate to finish the job.

Our U.S. Press Freedom Tracker documented 11 prior restraints against journalists in 2023, the most since it started tracking them in 2017. The Supreme Court has called prior restraints — or government orders not to publish information — the “most serious” First Amendment violation. They are almost never constitutional. And yet, courts keep entering prior restraints with little regard for the law, leaving journalists censored while often slow-moving appellate processes play out.

It’s been more than seven months since the May 2023 FBI raid of Florida journalist Tim Burke’s home newsroom, after Burke found and publicized Fox News interview outtakes where rapper Ye made antisemitic remarks. Yet the government still hasn’t explained the basis for the raid or returned all of Burke’s seized equipment and information.

Plus: how you can help preserve federal data at risk of being deleted

Both in the U.S. and abroad, governments are capturing encrypted connections that pass over the public internet and saving them for later use. Within years or decades, post-quantum computers could meaningfully shorten the amount of time required to unscramble encryption, allowing attackers to read previously private messages. So a growing number of organizations, including Apple, are preparing for attacks like these with post-quantum encryption. Read more in our newsletter.

Aye hearties, gangway — the Avast cor-pirates are walking the plank. That’s because the company sold user data without consumers’ knowledge, according to the Federal Trade Commission, which ordered U.K.-based Avast Limited to pay $16.5 million and will also bar the antivirus company from selling or licensing browser data for advertisements. Read more in our newsletter.

This week, security nerds are dancing in the streets because Signal, the encrypted messaging app, is finally rolling out usernames. Signal has previously required users to provide their phone number as an identifier, but with this most recent update, users may instead use a username. Read more in our newsletter.

Hundreds of data brokers aggregate and sell access to personal data, such as phone numbers, emails, addresses, and even purchasing habits collected through loyalty card programs, social media sites, apps, trackers embedded in websites, and more. Mozilla has a new monthly subscription service which automatically scans for your personal data on data broker websites, but there are other ways to make your data less easily searchable. Read more from the Digital Security Team.

Instead of traditional passwords, where you log into a website with credentials that you know or store in a manager, a passkey is a credential that you store on your device, registered with an online account. Read more in our newsletter.

Mercenary spyware firm NSO Group’s Pegasus spyware, designed to remotely access targeted smartphones, is marketed to governments around the world for the purposes of law enforcement and counterterrorism. But in the wild, we’ve seen governments repeatedly abuse this and similar spyware tools to infect journalists, spying on their most sensitive files, communications, and sources.

Thieves don’t just steal iPhones for the hardware — they may also want access to banking apps and Apple Pay to facilitate fraudulent transfers and purchases. One thing that works in thieves’ favor is that people often use short passwords that are easy to shoulder surf and to memorize — typically only six digits. To minimize this risk, instead of typing in passcodes, where possible and practical consider opting for Face ID or Touch ID when unlocking the phone in public spaces.

If you have found your email in a data breach and the affected account is still active, you’re going to want to change the password for the relevant service right away.

On Jan. 9, 2024, the U.S. Securities and Exchange Commission’s account on X, formerly known as Twitter, was hijacked and used to post about the approval of a Bitcoin exchange-traded fund. This could have happened to anyone, whether an individual or a well-resourced organization. Learn how to mitigate similar attacks in this week's edition of our digital security digest

Two-factor authentication (2FA) is great because it helps harden your account security. The strongest 2FA option commonly available today depends on a piece of hardware, a security key — a little device you can plug into your USB port to help log in.

On all major browsers, research suggests many users overestimate the privacy promises of private browsing mode, with many believing that it allows them to hide their IP address, encrypt their web traffic, browse anonymously, and more. That’s why you’ll want to read about what private browsing mode does and doesn’t do.

Canvas breach, Instagram account hijacking via chatbots, and more

A revamped digital security 101 module is coming soon!

Want to learn how to teach “digital security 101” in your J-school? Of course you do!

Check out the latest updates to our digital security 101, authentication, and malware modules.

We’ve made updates to our “Digital security 101” module, and more.

Check out the new resource pack for our “Digital security 101 — Crossing the US-Mexico border” module.

On the heels of our new module focused on U.S. southern border journalism, we are happy to announce a range of additional updates to modernize the rest of the J-school curriculum.

We’re thrilled to announce a new module focused on U.S. southern border journalism

Well, at least there’s a lot of stuff to talk to your class about

We’ve added new slides to our Malware module to help instructors get started sharing the good word about Dangerzone.

Hello again!It’s Martin, principal researcher at Freedom of the Press Foundation (FPF), with our regular update on the U.S. Journalism School Digital Security Curriculum.J-school security curriculum highlightsTo account for new username and privacy options in recent versions of Signal, we made some small changes to the …

Hello again!It’s Martin, principal researcher at Freedom of the Press Foundation (FPF), with our regular update on the U.S. Journalism School Digital Security Curriculum.Before we jump in, I want to share that we’re hiring a Monitoring, Evaluation, Research, and Learning (MERL) consultant to help us develop a …