Helping reporters in Australia to protect their data and information sources. General overview of threats to journalists and their work.

2. Privacy for Journalists
• https://privacyforjournalists.org.au
• @PrivacyJournAU
Community for helping reporters protect their
information sources from:
• Metadata collection and retention
• Targeted surveillance
• Corporate hacking

3. Threat Modeling
Systematic approach to analyse:
• Who you adversary is?
• What they can do?
• How you can protect yourself?

4. Adversaries
The Government
Corporate Hackers
Cyber Criminals
Casual Eavesdroppers

5. What they are after?
The Government
• Finding your info
sources
• What you talk
about with your
info source
Corporate Hackers
• Finding your info
sources
• What you talk
about with your
info source

6. What they are after? (II.)
Cyber
Criminals
• Bank details,
passwords
Casual
Eavesdropper
• Opportunistic
(e.g. lost USB
drive)

7. Different approaches
required
The Government
• Finding your info sources
• Hiding the metadata
• What you talk about with
your info source
• Encrypt everything
Corporate Hackers
• Finding your info sources
• What you talk about with
your info source
• Compartmentalisation
• Protect your computer
from malware
• Two-factor auth

8. Different approaches
required (II.)
Cyber Criminals
• Bank details,
passwords
• Anti-malware
• Two-factor auth
Casual
Eavesdropper
• Opportunistic
(e.g. lost USB
drive)
• Drive
encryption

9. Further Reading
https://privacyforjournalists.org.au/
threat-modeling-for-journalists