Please please please take your cyber security seriously even if you don’t consider yourself a high risk person. Here are a few easy things to start with. 1/n

Switch from WhatsApp to Signal and enable disappearing messages. Most of us cannot stop using WhatsApp entirely but at least turn off back ups to Google Drive or iCloud. 2/n
Do not have private conversations using the messaging service on any social media platform like Facebook, Instagram or Twitter. 3/n
Switch from Gmail to ProtonMail or any other secure email service provider. 4/n

https://t.co/lQfyjLnu4B
Switch from Google Docs to CryptPad or RiseUp Pad. 5/n

https://t.co/c4WJr8ilRs

https://t.co/DSbnZkAUAM
Get yourself a trustworthy VPN. 6/n

https://t.co/TjgylNbjKn
Want to share documents securely? Use Onion Share. 7/n

https://t.co/HKbPZyD6kj
Stop using weak ass passwords and get yourself a password manager which will generate and remember secure passwords for you. 8/n

https://t.co/gL55SsqNec

https://t.co/zJQvYv3XId
There is a lot that can't be covered in a Twitter thread and you should always do your own research. Here are some guides by actual technical experts unlike this thread written by a well-intentioned lawyer. 9/n

https://t.co/TXiOwURsA3
https://t.co/ntvh1Sgq7p

You May Also Like

The entire discussion around Facebook’s disclosures of what happened in 2016 is very frustrating. No exec stopped any investigations, but there were a lot of heated discussions about what to publish and when.


In the spring and summer of 2016, as reported by the Times, activity we traced to GRU was reported to the FBI. This was the standard model of interaction companies used for nation-state attacks against likely US targeted.

In the Spring of 2017, after a deep dive into the Fake News phenomena, the security team wanted to publish an update that covered what we had learned. At this point, we didn’t have any advertising content or the big IRA cluster, but we did know about the GRU model.

This report when through dozens of edits as different equities were represented. I did not have any meetings with Sheryl on the paper, but I can’t speak to whether she was in the loop with my higher-ups.

In the end, the difficult question of attribution was settled by us pointing to the DNI report instead of saying Russia or GRU directly. In my pre-briefs with members of Congress, I made it clear that we believed this action was GRU.