Watch out! Someone could be spying on you

When hackers broke into AP’s Twitter account earlier in 2013, their fake tweet about Barack Obama being injured in an explosion at the White House caused the US stock market to plunge. Just before the Twitter account was hacked, AP staffers had received an email asking them to click on a link that supposedly went to a Washington Post article.

Although it looked legitimate, the email was actually a phishing attack (view the email here). The fraudulent link redirected the recipients to a bogus site where they were asked for their login credentials. At least one person fell for the phishing email and gave the hackers, the Syrian Electronic Army, the password they needed to tweet in AP’s name.

In this case, the incident proved more embarrassing than damaging – the tweet was corrected immediately and the stock market recovered within minutes.

But falling for a phishing attack can have much more serious repercussions.

In Bahrain at least 11 people were imprisoned between October 2012 and May 2013 after the Bahraini government successfully phished their identities. All had allegedly written anonymous Tweets criticizing Bahrain’s King Hamad. The authorities identified the individuals by sending them fake links from Twitter and Facebook. When they clicked on the link, spy software noted the computer’s IP address allowing authorities to track the Twitter users down (read how the Bahriani government did this in an extensive report by Bahrainwatch.org).

Phishing attacks don’t just have to come from Twitter or email though; from sms to Skype, What’s App or even via the comments box on an online article, fake links can be embedded in any kind of communication.

What’s more, phishing doesn’t always involve a fake link. It might contain a downloadable file containing malicious software (or malware) that installs itself on your computer or smartphone without your knowledge.

Renowned security expert Jacob Appelbaum tweeted earlier this year about discovering spyware on the computer of an Angolan activist. Installed when an email attachment was opened, the spyware took shots of the victim’s screen and copied his files, automatically sending the information to remote servers.

This particular spyware wasn’t very high-tech but other malware can log keystrokes to steal logins and passwords, record visited websites or even activate the camera or microphone on the laptop to record what people are doing.

We journalist are used to receiving emails, tweets or Facebook messages with links to stories or documents. After all, being on top of the news is part of our jobs. But letting hackers, whether they are government authorities or criminals, steal our information can endanger not only our stories, but also ourselves, our colleagues and most importantly, our sources. That’s why it is essential to be aware of the problem.

Here are a few tips:

Mouse over the link. You can view a link’s URL by hovering over it with your mouse (but don’t click). If the URLs doesn’t look legitimate, or doesn’t match the one given in the email text, don’t open it.

Read the URL carefully. Fake links will often try to trick you into thinking the URL is real by using similar spelling to a real site, for example www.aljazera.com instead of the correct www.aljazeera.com. If you don’t look carefully, it’s easy to think you’re clicking on a legitimate link.

Check the domain name. The domain name is the part of the URL just before the first slash. For example, Deutsche Welle’s domain is www.dw.com. Genuine DW links have the domain name before the first slash – for example, http://akademie.dw.com/digitalsafety/ is still a genuine DW URL as the “dw.de” is before the first slash. A phishing URL to a fake DW site may look like this www.topstories.com/dw/globalization. Here’s a great spambusters post that tells lets you know more about checking links.

Use an URL checker. They aren’t foolproof but sites such as safeweb.norton.com are a good start.

Don’t open unverified attachments. All file types can contain malware. If in doubt, delete.

To find out more about avoiding hacking attacks, tune into the What’s in that message live online session with security expert Morgan Marquis-Boire on December 6 at 4pm CET. It’s just one of six online sessions happening during the “Digital Safety for Journalists” Open Online Workshop running from December 2-6. Other live sessions include mobile phone safety and using the Internet without being tracked.

Organized by DW Akademie together with Reporters Without Borders, the online workshop is free and open to anyone. For more information, visit the Digital Safety for Journalists website where you’ll also find daily posts on the topic starting from November 25.

Otherwise check out the Rory Peck Trust website which has fantastic online digital security resources written specifically for freelance journalists. For more about malware, see the entry How can I avoid malware.

Written by Kate Hairsine and edited by Kyle James

Interactive visualizations and info-graphics are gaining popularity in the media. More and more journalists are becoming interested in producing data-driven stories on their own or with the help of developers. So what do aspiring data journalists need to know? What do they need to keep in mind when working with developers, how much programming do journalists actually need to understand – and what are the best tools to get started?

DW Akademie’s Natalia Karbasova talked to the German visualisation architect and interactive news developer Gregor Aisch. Among other things, Gregor has worked on the development of Datawrapper, a tool that allows journalists to build simple interactive charts. He also develops visualizations for media organisations such as Deutsche Welle and Zeit Online.

“Journalists need to overcome their fear of the so called hackers,“, says Gregor. “This might sound funny to some, but many people still have these mental image of criminal suspects spending their days and nights writing viruses and trying to crack security systems of banks and governments”.

Gregor, you come from the technical side. Do you enjoy working with journalists?

Yes, I really like working with journalists. They usually have a clear understanding of the subject they’re reporting about, and do have lots of interesting ideas for how to tell stories. That’s something you cannot always expect when you’re working with the marketing guys or PR departments.

What do journalists need to know to tell compelling data-driven stories?

Getting a good feeling for the scope, time frame and limitations of web based data visualizations is very helpful in the day-to-day work with data journalism. After all, designing interactive visualization is not unlike software development, so you need to be good in managing expectations and resources to ensure the final result is delivered in time. Otherwise lots of frustration is inevitable.

What do journalists need to keep in mind when teaming up with developers?

It’s a lot like with any other project management. It’s a good idea to talk to each other on a regular basis, especially in the beginning of a new project. The big challenge is to develop a common vision of something that is just not yet there. Hand-drawn sketches are really powerful for communicating ideas in such early stages.

How much programming do journalists actually need to understand?

First of all, journalists need to overcome their fear of the so called ‘hackers’. This might sound funny to some, but many people still have these mental image of criminal suspects spending their days and nights writing viruses and trying to crack security systems of banks and governments. Regular meetings such as the Hacks/Hackers meeting in Berlin are helping in ‘building bridges’ between hacks (journalists) and hackers (developers).

For the day-to-day work with datasets, I find that it is really helpful to learn some basic scripting. The initial learning curve is steep, but after one or two days you’ll be impressed what you can achieve. Often, writing a few lines of code can save us from repeating simple tasks over and over again. In an environment such as online journalism where deadlines are usually short and critical, time-saving is crucial.

And, as said above, it would be very helpful if journalists would get a feeling for what is doable and how long things take. I don’t think that every journalist need to be able to create full interactive data visualizations, since it takes several years to get there, but they should keep an eye on the possible solutions.

What visualization possibilities do journalists have in case they can’t program?

Excel, LibreOffice, Tableau Public, ManyEyes, Datawrapper, QuantumGIS: all these tools provide visualization modules that enable anyone to create rich data visualizations and maps in a short time. The tools are either free downloadable, or already installed on most computers or accessible via web browsers, so it’s easy and cheap to get started. But of course, it takes some time to learn new software.

What should journalists interested in data reporting start with?

I would consider working with a spreadsheet software as the first step for doing data journalism. Most data-driven stories start with a simple data table, so you need to be able to perform simple computations, such as dividing the number of fatalities by the total number of car accidents in all the districts of your country. For those who get confused by the strange user interface of Excel, I clearly recommend working with the free alternative LibreOffice Calc. This is spreadsheet as simple and powerful as it gets.

There are a number of data visualizations out there and this has produced a lot of hype, but what are some of the mistakes made in these visualizations?

First of all, I love data visualization, so I like them being used more and more in reporting. One of the worst mistakes I have seen are poorly labeled charts. If you solely rely on tooltips you can be sure that you’re doing it wrong.

What are your favourite visualizations and why?

This example by the New York Times shows a ‘scatterplot’ with the college graduation rate on the horizontal axis and the percentage of black, Hispanic and Asian students among the freshman on the vertical axis. You can clearly see that at the top colleges with high graduation rates, the rates of black students are significantly lower. For instance there are only 8.8% black students among last year’s freshman at Harvard university which has a graduation rate of 97%.

The topic is big in US right now, as more states are now banning the ‘affirmative action plans’. Going back to the Kennedy/Johnson administration of the 1960’s, these plans required universities to reach certain quotes for different races. Now more and more Republican states are aiming to ban these plans because such a quote would not be lawful.

In a follow-up piece a few weeks ago the NYT showed the effect of previous bans in states such as California. Here they compared the percentage of freshmen of certain races with the total percentage of college-aged residents of that race. Especially in California, the ban of the affirmative action plan was followed by a dramatic drop of enrollment of Hispanic and black students.

As a third example I would like to point to an excellent piece done by Matthew Bloch and Hannah Fairfield. In an interactive Venn diagram they showed how diseases of the elderly are overlapping. A total of 9% of 700,000 people in assisted living centers have a combination of heart disease, high blood pressure and Alzheimer’s disease, which is extremely difficult to treat.

All of these example come from the New York Times. What’s so special about the way they approach data journalism?

Amanda Cox has once put it this way: you need to take the reader by the hand and guide him through the graphic. Without this annotation layer, any graphic is just a matter of “here you go, now figure it out yourself”. The other thing I think the NYT is doing right is to hire the right kind of people (graphic editors, cartographers, 3D animators and interactive developers) and bring them together in one single place. In a lot of newsrooms in Germany you can still see the graphic teams for print or television separated from the online teams, making it a lot harder to create high quality interactive graphics.

What data visualization resources you’d recommend to keep an eye on?

I’d recommend this list of data visualizations, the blog by Alberto Cairo, this resource from the Mozilla Open News, this collection of pieces of code for different visualizations and the website “Informations Aesthetics”.

What are the books every aspiring data journalist should read?

The Wall Street Journal Guide to Information Graphics,

The Functional Art: An introduction to information graphics and visualization and Data Visualization: A successful design process.