When Your Threat Model Is "Everything": Defensive Security in Modern Newsrooms
summary
Modern newsroom security treats people as the primary asset and defends against phishing, malware, subpoena pressure and device exploits by enforcing mandatory 2FA, rolling out password managers and full-disk encryption, offering border-crossing consultations, and using air-gapped VMs and Tails/Tor/Signal for sensitive intake. A case with hundreds of leaked documents required burning media, house VMs, and a custom internal collaboration tool with VPN+alerts; the process yields publishable stories (e.g., Tiger Swan) while containing legal and operational risk.
AI-written summary · about
chapters (33)
- 0:00Introduction
- 0:30Lead Security Architect
- 0:56Activists
- 3:26History
- 4:10Leaks
- 5:37usable security
- 7:05organizational security
- 7:46teaching computing science
- 9:04working with people
- 11:34what are my assets
- 14:24legal threats
- 15:42insider threats
- 16:46technical threats
- 17:17acoustic crypt analysis
- 17:34solutions
- 20:49border crossing consultations
- 21:50air gaps
- 22:13team integration
- 25:00technical challenges
- 27:10psychological challenges
- 29:29case study
- 32:58technical questions
- 34:47solution
- 35:50TigerSwan
- 37:05Shoutouts
- 37:21Do you have great data
- 39:42Trends in attribution
- 40:55Attacker as a true address
- 41:53Culture of security
- 44:31journalistic tradecraft
- 45:55other countries
- 47:23threat assessments
- 48:27postit notes
related talks
44mSecuring Journalists in 2022
43mSecuring Journalists
44mBuilding a Culture of Security at The New York Times
03mBuilding a culture of security at the New York Times
48mSecurity from zero
05mEnterprise security: A new hope
01h 03mBe your own Threatbuster!
40mTotal Security: Investigative Perspectives from Public to Private Sector