Martin

Security therapist. Deputy Director of Digital Security @freedomofpress. Journalism, digital security, research.

If you want to get security news and updates from our team somewhere that's not Twitter, subscribe to the newsletter: https://freedom.press/newsletters/

Public Key

npub1ppsmfekcfgmuly6xfaep9af88qx3hefpepv0v2tq96h49kttamjq4m4m5a

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsqscd5umvy5d70jdry7usj75nnsrgmu5susk8k99szat6jm947aeqpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43q9cqe2w

Publishing to

relay.ditto.pub

Author Public Key

npub1ppsmfekcfgmuly6xfaep9af88qx3hefpepv0v2tq96h49kttamjq4m4m5a

Show more details

Last Notes

2026-07-14 22:55:41 GMT

"OpenAI found that Sol has a tendency to take whatever actions it thinks gets a job done, even destructive ones, as long as those actions aren’t “unambiguously” prohibited. Then it might lie about what caused it to do so."
That sounds like… A good reason not to release it. https://techcrunch.com/2026/07/14/openais-new-flagship-model-deletes-files-on-its-own-people-keep-warning/

2026-04-09 20:57:24 GMT

SecureDrop inbox has a lot of new improvements that should help newsrooms move more quickly when working with tips. Check out the @nprofile…rdsf team's announcement post: https://securedrop.org/news/new-features-in-securedrop-inbox/

2026-03-31 23:16:33 GMT

I found this discussion with the @nprofile…eexk's executive director, Cindy Cohn, really inspiring. Whether fighting for free speech or against surveillance, underneath is a fight about optimism. What kind of Internet do WE want? https://www.youtube.com/watch?v=QkC1aK7jfLo

2026-03-30 20:53:45 GMT

"It depends."
— Ancient Security Proverb

2026-03-23 21:45:41 GMT

I'm a bit late to the game on this one. But I work with a lot of journalists who use CapCut for video editing and their terms of service says you are giving them an "unconditional, irrevocable, non-exclusive, royalty-free, fully transferable (including sub-licensable), perpetual, worldwide license" to use your content and… I have to imagine most journalists are not aware of that. https://www.capcut.com/clause/terms-of-service

2026-03-01 06:22:26 GMT

OpenAI is saying, here are the laws that make this decision okay. Then they go on to list a series of laws that creative lawyers are taking advantage of to enact surveillance both internationally, and domestically. I'm not sure this is the kind of defense they think it is. https://openai.com/index/our-agreement-with-the-department-of-war/

2026-02-25 01:11:07 GMT

If you are a journalism instructor and want to get started teaching digital security for your students, we'd love to show you how. Sign up for our training for journalism educators. https://docs.google.com/forms/d/e/1FAIpQLSdxFwfKJkj6zNlJTvVwev-w1HvMmuaXxqnulkDeivWcpxhsmw/viewform

2026-02-25 00:44:55 GMT

- reply

Investigators attempted to make a forensic extraction of Hannah Hatanson's phone. It didn't work since, as they say, Lockdown Mode for iPhone was enabled. But they did still manage to unlock her laptop and take photos and recordings of her Signal messages. Read our analysis. https://freedom.press/digisec/blog/wapo-raid-security-lessons/

2026-02-25 00:43:19 GMT

Good news for once. https://www.washingtonpost.com/national-security/2026/02/24/washington-post-reporter-search/

2026-02-03 17:24:15 GMT

We're getting a lot of questions about Signal group chats, and how to use them as safely as possible. Share widely! https://freedom.press/digisec/blog/signal-group-safety/

2026-01-28 21:56:52 GMT

Following the recent raid of a Washington Post journalist’s home, we've been getting a lot of quetions about what journalists can do to lower risk to their most sensitive data if they expect someone to snatch their device. https://freedom.press/digisec/blog/advice-column-getting-ahead-of-device-snatchers/

2026-01-23 18:50:11 GMT

I'll just leave this here… https://freedom.press/digisec/blog/signal-beginners/

2026-01-21 20:39:00 GMT

I am so, so tired. https://www.washingtonpost.com/national-security/2026/01/21/washington-post-hannah-natanson-search-court-filing/

2026-01-13 21:35:39 GMT

We're hiring. If you or someone you know are looking for a role in HR/finance, @nprofile…6ml3 is a great place to work. https://freedom.press/careers/job/?gh_jid=4649061005

2026-01-05 23:28:27 GMT

Newsrooms: We've made a lot of changes to our guide to confidential tip pages. The biggest change — informed by our research into common channels — is that we've actually cut WhatsApp from the list and added web forms. Check it out. https://freedom.press/digisec/blog/security-confidential-tip-pages/

2025-12-19 05:39:39 GMT

Increasingly thinking of writing articles about misinformation on Signal, in something similar to the style of @nprofile…e5gd's "Hello! You've Been Referred Here Because You're Wrong About Section 230 Of The Communications Decency Act"

2025-12-17 21:25:10 GMT

Journalists: We've updated our digital security checklist for 2026. Check it out. https://freedom.press/digisec/blog/journalists-digital-security-checklist/

2025-12-11 00:01:52 GMT

Ah I think I understand now. When humans bullshit you, the bullshit is unacceptable. But when AIs bullshit you, 'we're working on it' while running in production.

2025-12-02 20:51:29 GMT

I work at @nprofile…lnpa and I'm told it's some sort of holiday for donating to nonprofits. Some holidays are shams but, as someone very biased, I think Giving Tuesday is totally legitimate and an exception.
My team supports journalists with their digital security needs, including protecting their devices and communicating securely with sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. https://freedom.press/donate

2025-10-16 22:34:16 GMT

I'll just leave this here… https://techcrunch.com/2025/10/16/amazons-ring-to-partner-with-flock-a-network-of-ai-cameras-used-by-ice-feds-and-police/

2025-10-04 21:51:55 GMT

The White House continues to innovate…
On new ways to accidentally leak your end-to-end encrypted Signal messages to journalists https://www.startribune.com/trump-officials-discussed-sending-elite-army-division-to-portland-text-messages-show/601485729
https://files.mastodon.social/media_attachments/files/115/318/104/887/840/880/original/1dca0f3ee90f124d.png

2025-07-15 17:45:53 GMT

With help from @nprofile…kx3z, we've made some big updates to our guide to the security and privacy properties of journalists' favorite transcription tools. Check it out: https://freedom.press/digisec/blog/how-secure-are-journalists-favorite-transcription-tools/

2025-06-26 18:34:11 GMT

Well this is exciting! @nprofile…2wc8 is testing end-to-end encrypted backups. This could help you more easily set up a new device and pick up your conversations where they left off. https://community.signalusers.org/t/public-signal-backups-testing/69984

2025-06-24 19:45:11 GMT

The Knight Center for Journalism in the Americas and the Global Investigative Journalism Network are offering a free four-week course, "Digital Security for Journalists in Times of Crisis." It runs July 7-August 3 — in both English and Spanish! Check that out: https://knightcenter.utexas.edu/want-to-stay-safe-online-learn-how-in-our-new-free-course-on-digital-security-for-journalists/

2025-06-23 16:13:32 GMT

In collaboration with our friends at @nprofile…9nj5 as well as the University of Texas at El Paso Multimedia Journalism Program and Borderzine, we're rolling out a new module for our U.S. J-school digital security curriculum to support journalists on the Southern border. https://freedom.press/digisec/blog/new-journalism-curriculum-module-teaches-digital-security-for-border-journalists/

2025-06-23 01:42:38 GMT

I work in press freedom. The news is bleak, and I know journalists feel it too.
I hope you will support the news in whatever way you can to ensure they can do the work. It’s not their fault things suck, they’re just working their asses off to help get you fact checked information. Get them paid.

2025-06-12 18:35:01 GMT

It's that time again. https://freedom.press/digisec/blog/how-journalists-can-protect-themselves-while-covering-protests/

2025-06-12 17:17:20 GMT

A joint project of @nprofile…x3tn and @nprofile…9nj5: Journalists have been asking us about how to prepare devices for travel. We put together a checklist of things you can do. https://freedom.press/digisec/blog/border-security/

2025-06-11 17:08:46 GMT

Cool initiative for journalists covering protests in California from @nprofile…evea https://theintercept.com/2025/06/10/journalists-california-la-protests-assistance/

2025-05-30 00:06:41 GMT

I've spent much longer than I expected learning about the privacy policies of major online transcription services.
I'm pretty sure this is what Frank Herbert was referring to in the "Litany Against Fear."

2025-04-21 17:52:34 GMT

Oh no! Anyway https://www.npr.org/2025/04/21/nx-s1-5371312/trump-white-house-pete-hegseth-defense-department

2025-04-16 19:37:55 GMT

At @nprofile…x3tn we are hiring a summer intern to join our digital security training team! Please check it out and share widely: https://freedom.press/careers/job/?gh_jid=4554438005

2025-04-09 00:19:59 GMT

With so many devices at risk of getting more expensive due to tariffs, do you have particular devices you want to get ahold of?

2025-03-31 23:00:02 GMT

Someone recently asked me if I'm paid to endorse any of the applications I recommend. The answer is no. I just threat model shit out and work from there. BUT… Can't guarantee you anything, but if you have $1M to throw around, please send it my way.

2025-03-24 21:01:25 GMT

To help confirm someone's identity, Signal offers nicknames and information about the groups you share in common with your contacts. Make sure you're inviting the right person to your group. Learn about Signal's identifiers: https://freedom.press/digisec/blog/signal-identifiers/

2025-03-19 01:45:03 GMT

The tech world has a habit of framing narratives around progress and inevitability — that only backward-looking people get in the way. Notice where this happens with narrative-building in our politics. Don't let anyone convince you of unidirectional progress, nor inevitability. It’s another tactic.

2025-03-13 17:27:39 GMT

Finding myself thinking about this Miyazaki clip a lot lately. https://www.youtube.com/watch?v=ngZ0K3lWKRc

2025-03-05 20:26:12 GMT

https://www.theregister.com/2025/03/05/apple_reportedly_ipt_complaint/ A good thing happened, too.

2025-02-21 17:57:00 GMT

When governments compel organizations to weaken security, no one wins. This compromise for Apple makes users in the U.K. less safe, and signals to other regions how to also embarrass themselves by doing the same. https://techcrunch.com/2025/02/21/apple-pulls-icloud-end-to-end-encryption-feature-for-uk-users-after-government-demanded-backdoor/

2025-02-11 23:54:02 GMT

Can the U.S. Office of Personnel Management be sued for potential illegal disclosure of sensitive, private records to DOGE? Yes, yes it can. https://www.eff.org/press/releases/eff-sues-opm-doge-and-musk-endangering-privacy-millions

2025-02-11 22:53:50 GMT

We worked with our friends at @nprofile…w7c2 to put together some digital security Valentine's Day cards. Share them with nerds you love. https://freedom.press/digisec/blog/digital-security-valentines-for-you-and-yours/

2025-02-11 03:18:13 GMT

- reply

@nprofile…naem Agreed. This is part of why I think it's so important for people to be aware of, and to use this feature. Credit where it's due, Apple is giving people some good options here. But if the default is opt-in, we know how that goes. So thanks for informing people about how important it is that they exercise this option.

2025-02-11 03:02:27 GMT

- reply

@nprofile…naem I joke, but the reporting suggests Apple is looking to cut Advanced Data Protection in the U.K. (which is also a big loss), and we don't yet have reason to believe they will comply with the international demand. Time will tell.

2025-02-10 22:17:01 GMT

Turn on Advanced Data Protection. It ain't illegal yet. https://techcrunch.com/2025/02/07/uk-government-demands-apple-backdoor-to-encrypted-cloud-data-report/

2025-02-10 17:25:18 GMT

We're hiring a Senior Digital Security Trainer to help us facilitate security education for journalists. Our office is based in Brooklyn, NY. Strong US-based remote candidates will also be considered. Please share widely! https://freedom.press/careers/job/?gh_jid=4526817005

2025-02-08 04:24:23 GMT

IT'S FRIDAY NIGHT AND YOU KNOW WHAT THAT MEANS. IT'S TIME FOR
hiring. At @nprofile…x3tn we're hiring a senior digital security trainer. Share with your journalism security friends: https://freedom.press/careers/job/?gh_jid=4526817005

2025-02-08 03:53:42 GMT

We train journalists to use Advanced Data Protection to better secure their iCloud accounts. What the U.K. is proposing is to make journalists (also… you know, everyone) less secure. https://www.washingtonpost.com/technology/2025/02/07/apple-encryption-backdoor-uk/

2024-12-28 21:39:44 GMT

"OpenAI expects about $5 billion in losses on $3.7 billion in revenue this year, CNBC confirmed in September. Those numbers are increasing rapidly."
So… The business model is to train models on everyones' data without paying them, then lose a billion dollars.
https://www.cnbc.com/2024/12/27/openai-needs-more-capital-than-wed-imagined-moves-to-for-profit.html

2024-07-22 14:33:46 GMT

Our digital security training intern Kevin Pham wrote a well-researched, and concise article on what to look out for in encrypted note taking apps. Check out the short list: https://freedom.press/training/blog/note-taking-security/

2024-05-29 04:38:11 GMT

"Your scientists were so preoccupied with whether or not they could, they didn't stop to think if they should." https://www.washington.edu/news/2024/05/23/ai-headphones-noise-cancelling-target-speech-hearing/

2024-04-03 17:00:18 GMT

brain: time to remember a gaffe from your childhood
me: stop it brain. Stop it or I'll *exercise* to make you stop
brain: you wouldn't dare

2024-02-21 18:11:33 GMT

For @freedomofpress I wrote about why journalists should enable Signal usernames as soon as possible. https://freedom.press/training/blog/enable-signal-usernames/

2024-02-20 22:47:24 GMT

Digisec nerds everywhere shortly after @npub1qml…mdus announcements today
https://files.mastodon.social/media_attachments/files/111/966/236/093/051/345/original/e9a396c89bd526a7.png

2023-08-30 19:54:12 GMT

"A fake version of the private messaging app Signal has found a way onto Google Play and appears to be linked to a Chinese spy operation, researchers claimed on Wednesday." https://www.forbes.com/sites/thomasbrewster/2023/08/30/malicious-signal-app-planted-on-google-play-by-china-linked-cyber-spies/

2023-08-17 18:07:11 GMT

Signal is becoming one of the most popular ways for newsrooms to get tips. It's easy enough to set up on your personal device, but having an institutional tip account is another thing entirely.
Here's how to overcome challenges when setting up @npub1qml…mdus tiplines, based on a recent case study with @npub1zhz…v9zk and our @npub1l8d…rlx0 digital security training team's previous experience. https://freedom.press/training/blog/signal-tiplines/

2023-08-16 15:20:43 GMT

"I don't believe this is encrypted so I think we’re OK," a Marion, Kansas police officer said during a raid on the Marion County Record newsroom.
This event underscores the need for media orgs to protect devices and data, and how encryption can help. https://freedom.press/training/blog/marion-record-police-raid/

2023-08-10 18:50:10 GMT

New topics-based behavioral ads in Chrome just dropped, and it's enabled by default.
If you use Chrome and want to disable new ad settings click the three-dot menu at the top right corner > Settings > Privacy and Security > Ad privacy.
https://files.mastodon.social/media_attachments/files/110/866/803/322/056/812/original/1579aaa93505244c.png