š Our work protecting journalists and whistleblowers depends on you.
At a time like this, your help is vital.
Hereās what you can do:
- Sign up for our newsletters: freedom.press/newsletters
- Donate today (if you can): freedom.press/donate/
Posts by Freedom of the Press Foundation
Kala says It's imPAWssible to look bad while rocking a
@freedom.press bandana.
Grab one for yourself (and your furry friend) today!
freedom-press-store.myshopify.com/products/fpf...
Tl;dr: Dangerzone introduced a feature that allows users to auto-update the container used to do conversions.
Why that matters and how we implemented it:
- Attesting provenance of images
- Making them reproducible
- Signing them using an auditable system
Thatās about it!
There are lots of other challenges involved, such as doing the above in a cross-platform way, while also supporting air-gapped installations. If you encounter a bug or want to know more, please reach out!
Also, Dangerzone installations regularly poll the GitHub container registry, and once they detect a new image, verify it against our private key, and make sure the signature is recorded in the transparency log. Then, the new container image is downloaded and used for the next run.
Then, we sign our image locally using Cosign (from sigstore), which records this event in their transparency log. Hereās the signing event for our latest image:
search.sigstore.dev?logIndex=119...
This means no one can silently sign a malicious image.
Next, we get a fresh clone of our repo and rebuild the image locally.
We ensure it is bit-for-bit the same as the upstream one.
Read more about this:
First, we pick the latest nightly container image and verify the attestations about it, checking its provenance information.
This is answering questions like āWas it built indeed in GitHub actions?ā or āIs it from our repo?ā
If youāre interested in reproducible builds, transparency logs and software attestation, keep readingā¦
What if the update server is compromised? What if the signing key leaks? What if the developers are coerced somehow?
Hereās how we counter these risks:
ā” If you are a Dangerzone user, by now you may have encountered a prompt to download a sandbox update.
These are important to the softwareās stability, but come with their own risks.
š§µ Dangerzone is a free app developed by FPF that converts potentially dangerous PDFs, office documents, or images into a safe-to-open PDFs.
It converts docs into pixels, then reconstructs them as PDFs.
Read the thread for important details about our recent sandbox update ⤵ļø
Using a VPN may subject Americans to warrantless government surveillance.
We need much more transparency ā and stricter limitations on how the government can use this data to bypass Americansā privacy rights.
For journalists working on sensitive stories, location data can expose sources or tip off the agencies theyāre investigating.
Watch this video to understand the risks and how to reduce them, and read our full guide below: freedom.press/limit-location-tracking
By declaring the Presidential Records Act unconstitutional, the DOJ says the presidency has private ownership over the American story.
It doesnāt.
Plus: How many FOIAs does New Jersey think is too many? 14.
More in our secrecy newsletter:
"Localism is a Trojan horse Carr uses to legitimize his attack on the Constitution," writes FPF's Seth Stern for @theintercept.com:
Quote from FPF Chief of Advocacy Seth Stern that reads: āWe commend the film and television communities for their courage in speaking truth to power, and we hope that members of the press will follow their lead. āItās been widely reported that the current administration is steering this transaction to its political allies, the Ellisons, to further suppress free expression and control the public discourse. Thereās nothing biased or partisan about standing up for the First Amendment and the publicās right to know.ā
FPF statement on film and television professionals speaking out against Paramount-Warner merger
www.nytimes.com/2026/04/13/b...
š Want to learn more about @pressfreedomtracker.us's work?
Join West Coast reporter Briana Erickson for Gunston Hall's "History Bites," a monthly online miniseries about press freedom.
šļø April 15, 12:30 p.m. ET/9:30 a.m. PT
š
š¢ Journalism professors! Want to bring digital security into your classroom?
FPF is offering a free virtual training program this summer to help you teach our J-school Digital Security Curriculum ā no prior experience needed!
Sign up by April 15 š
š§āš» Curious about using AI safely as a journalist? We break down the risks of the most common ways you and your data are likely to interact with AI, in our new series of digital security guides.
First up: stand-alone tools like Claude, ChatGPT, and Otter:
Trump's DOJ wants to scrap the Watergate-era law making presidential records public ā effectively claiming the presidency owns the American story.
We cannot let that happen.
Watch @laurenleharper.bsky.social explain this bipartisan emergency, and find out how you can help: freedom.press/save-pra
š„ Read in our weekly newsletter (and sign up):
- No kings in DC, no compliance in LA
- Sources arenāt safe when surveillance is for sale
- Trumpās threat to jail reporters deserves bipartisan condemnation
- So-called āantifaā prosecutions endanger First Amendment, press
ā what weāre readingā¦
The press canāt be free if itās constantly under watch.
Check out our recent event to learn why Congress shouldnāt renew the spy law known as Section 702 of FISA without making reforms to protect journalists and Americans from warrantless surveillance.
Excessive government secrecy is growing.
The Classified Catalog by @Freedom.press helps you keep track of the administration's assault on our right to know so you can report, research, and fight back.
Check it out here:
The Espionage Act has been used for decades to target journalists and whistleblowers who expose wrongdoing.
Use our action center tool to tell lawmakers to pass the Daniel Ellsberg Press Freedom and Whistleblower Protection Act and reform the archaic law.
š„ Read in our newsletter:
- No kings in DC, no compliance in LA
- Whistleblower prosecution has nothing to do with natsec
- DOJ wants to scrap PRA
- Republican about-face on Qatari media funding
- Judge tells Pentagon to stop censoring journalists again. Think theyāll listen this time?
And more..
š„ Read in our weekly newsletter (and subscribe): Whistleblower prosecution has nothing to do with national security
The administration "is on its way to creating every authoritarianās dream: a centralized database containing intimate details about every resident of this country."
We're suing for docs behind the database.
FPF's @laurenleharper.bsky.social has more in @theintercept.com:
The U.S. Virgin Islands always deserve transparency but especially when they're at the center of national news like the Epstein case.
We spoke to journalist Shirley Smith about her efforts to fix the territory's archaic public records laws.
Freedom of the Press Foundation Executive Director Trevor Timm giving the opening remarks ahead of the screening of the documentary āSteal This Story, Please,āFriday at the IFC in NYC.
Panel discussion following the screening of the documentary āSteal This Story, Please,āFriday at the IFC in NYC.
FPF staff members
The IFC in New York
We were thrilled and honored to host the opening night of āSteal This Story, Please!ā at @ifccenter.bsky.social.
The documentary explores the life and career of @democracynow.orgās Amy Goodman.
Hereās our executive director, @trevortimm.bsky.social, giving opening remarks tonight in NYC.