3 ms·

It’s quite different. A report spam function wouldn’t include (or shouldn’t include!) the identity of a person. If it does then it’s going over and above a spam

It’s quite different. A report spam function wouldn’t include (or shouldn’t include!) the identity of a person. If it does then it’s going over and above a spam filtering service. Reporting a number as spam should then just result in future recipients seeing a “Probably Spam” or “Spam” etc based on reported levels on Spam vs Non-Spam reports for the number. But I do agree that the journalist should have practiced better opsec and advised her sources that they probably don’t want her name to show up on their phone if she calls them at an inopportune time such as when around the very people she is investigating. Also, disabling outbound caller ID would have helped. Lessons learned all around.

CaptainZapp 7y ago
But I do agree that the journalist should have practiced better opsec and advised her sources that they probably don’t want her name to show up on their phone if she calls them at an inopportune time such as when around the very people she is investigating. How do you secure against something that you're not even aware exists? Maybe outsourcing operational security? But how can a journalist aford that?
- yardstick 7y ago
  You quoted my example about the journalist calling the source while the source is around the people she is investigating. That’s a situation the journalist should be well aware of. I would expect journalists to have some opsec training by their newspaper/publisher given maintaining confidentiality is a given in this line of work. Even if they didn’t have such formal training, I’d expect them to pick up a few things like this with experience.
  - CaptainZapp 7y ago
    I would expect journalists to have some opsec training by their newspaper/publisher given maintaining confidentiality is a given in this line of work. I agree. But I still think it's a tall order to expect a journalist to know every service and every app, which may violate their privacy and protect against such entities. And then there are things, which you just can't control, even being aware of them. As a for example: How do you, as a journalist, prevent that your pictures are tagged by others on Facebook? Edit: Slight clarification

CaptainZapp 7y ago

But I do agree that the journalist should have practiced better opsec and advised her sources that they probably don’t want her name to show up on their phone if she calls them at an inopportune time such as when around the very people she is investigating. How do you secure against something that you're not even aware exists? Maybe outsourcing operational security? But how can a journalist aford that?

yardstick 7y ago
You quoted my example about the journalist calling the source while the source is around the people she is investigating. That’s a situation the journalist should be well aware of. I would expect journalists to have some opsec training by their newspaper/publisher given maintaining confidentiality is a given in this line of work. Even if they didn’t have such formal training, I’d expect them to pick up a few things like this with experience.
- CaptainZapp 7y ago
  I would expect journalists to have some opsec training by their newspaper/publisher given maintaining confidentiality is a given in this line of work. I agree. But I still think it's a tall order to expect a journalist to know every service and every app, which may violate their privacy and protect against such entities. And then there are things, which you just can't control, even being aware of them. As a for example: How do you, as a journalist, prevent that your pictures are tagged by others on Facebook? Edit: Slight clarification