Here is a wonderful writeup of several ways to securely communicate with Zack Whittaker, who is a Security Editor at CBS.
Leaking is a double edged blade. Leaks obviously catch authorities doing wrong. It also can release information “too early”. From the article:
How to contact me securely – Zack Whittaker – Medium
If you see something, leak something. Telling the world holds people in office accountable, no matter how big or small it may be.
There are a number of ways to contact me securely, in ranking order.
Encrypted calls and texts
You can reach me at +1 646-755–8849 on Signal or WhatsApp.
I will get back to you as soon as possible if I don’t immediately respond.
Encrypted instant messaging
You can also contact me using “Off The Record” messaging, which allows you to talk to me in real time on your computer. It’s easy to use once you get started. This helpful guide will show you how to get set up.
You will need a Jabber instant messaging account. There are many options to choose from. For anonymity, you should create an account through the Tor browser.
You can reach me at: email@example.com during working hours.
When you verify my fingerprint, it’s this: 914F503C 03771A5F A9E2AC91 95861FDA 9B3A7EAD.
Send me PGP email
My email address is firstname.lastname@example.org (remove the dot for PGP).
PGP, or “Pretty Good Privacy,” is a great (but tricky-to-use) way of emailing someone encrypted files or messages. PGP works on almost every email account and computer, but using it on your work or home email address won’t hide who you are, or the fact that you sent a reporter an email.
If you want to remain anonymous, go somewhere that isn’t your home or work network. Then, you should use the Tor browser, which hides your location, to access a free email service (like this one, which allows PGP).
The EFF has a set of easy-to-use tutorials on how to get started.
You will need my public PGP key to email me securely, available here.
You can also verify my PGP fingerprint to be sure it’s me: 4D0E 92F2 E36A EC51 DAAE 5D97 CB8C 15FA EB6C EEA5.
You can also get this information on my Keybase profile.
When all else fails…
You can always send me things through the mail. My work address is:
Zack Whittaker c/o CBS,
28 E. 28th Street,
New York, NY 10016,
United States of America.
(Updated: January 14 with additional Keybase details.)
(Updated: April 30 with new Jabber fingerprint.)