490f9d4a1d
Complete project rebrand for better positioning in the press freedom and digital security space. FieldWitness communicates both field deployment and evidence testimony — appropriate for the target audience of journalists, NGOs, and human rights organizations. Rename mapping: - soosef → fieldwitness (package, CLI, all imports) - soosef.stegasoo → fieldwitness.stego - soosef.verisoo → fieldwitness.attest - ~/.soosef/ → ~/.fwmetadata/ (innocuous data dir name) - SOOSEF_DATA_DIR → FIELDWITNESS_DATA_DIR - SoosefConfig → FieldWitnessConfig - SoosefError → FieldWitnessError Also includes: - License switch from MIT to GPL-3.0 - C2PA bridge module (Phase 0-2 MVP): cert.py, export.py, vendor_assertions.py - README repositioned to lead with provenance/federation, stego backgrounded - Threat model skeleton at docs/security/threat-model.md - Planning docs: docs/planning/c2pa-integration.md, docs/planning/gtm-feasibility.md Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
80 lines
1.9 KiB
Markdown
80 lines
1.9 KiB
Markdown
# Emergency Reference Card
|
|
|
|
**Audience**: All FieldWitness users. Print, laminate, and carry in your wallet.
|
|
|
|
---
|
|
|
|
## EMERGENCY DATA DESTRUCTION
|
|
|
|
### Option 1: Pull the USB (Tier 1 -- fastest)
|
|
|
|
Remove the USB stick from the laptop. The laptop retains zero data.
|
|
|
|
### Option 2: Software killswitch
|
|
|
|
In the browser: **Fieldkit** > **Emergency Purge** > type `CONFIRM-PURGE` > click **Purge**
|
|
|
|
From a terminal:
|
|
|
|
```
|
|
fieldwitness fieldkit purge --confirm CONFIRM-PURGE
|
|
```
|
|
|
|
### Option 3: Hardware button (Raspberry Pi only)
|
|
|
|
Hold the physical button for 5 seconds.
|
|
|
|
---
|
|
|
|
## DESTRUCTION ORDER
|
|
|
|
The killswitch destroys data in this order (most critical first):
|
|
|
|
1. Ed25519 identity keys
|
|
2. AES-256 channel key
|
|
3. Session secrets
|
|
4. User database
|
|
5. Attestation log and chain
|
|
6. Temp files and audit log
|
|
7. Configuration
|
|
8. System logs
|
|
9. All forensic traces (bytecache, pip cache, shell history)
|
|
10. Self-uninstall
|
|
|
|
On USB: the LUKS encryption header is destroyed instead (faster, more reliable on flash).
|
|
|
|
---
|
|
|
|
## DEAD MAN'S SWITCH
|
|
|
|
If enabled, you must check in before the deadline or all data will be destroyed.
|
|
|
|
**Check in**: Browser > **Fieldkit** > **Check In**
|
|
|
|
Or: `fieldwitness fieldkit checkin`
|
|
|
|
If you cannot check in, contact your editor. They may be able to disarm it remotely.
|
|
|
|
---
|
|
|
|
## KEY CONTACTS
|
|
|
|
| Role | Name | Contact |
|
|
|---|---|---|
|
|
| Admin | _________________ | _________________ |
|
|
| Editor | _________________ | _________________ |
|
|
| Legal | _________________ | _________________ |
|
|
| Technical support | _________________ | _________________ |
|
|
|
|
Fill in before deploying. Keep this card current.
|
|
|
|
---
|
|
|
|
## REMEMBER
|
|
|
|
- Pull the USB = zero trace on the laptop
|
|
- Keys are destroyed first = remaining data is useless without them
|
|
- The killswitch cannot be undone
|
|
- Back up your keys regularly -- if the USB is lost, the keys are gone
|
|
- Never share your passphrase, PIN, or LUKS password over unencrypted channels
|