Complete project rebrand for better positioning in the press freedom and digital security space. FieldWitness communicates both field deployment and evidence testimony — appropriate for the target audience of journalists, NGOs, and human rights organizations. Rename mapping: - soosef → fieldwitness (package, CLI, all imports) - soosef.stegasoo → fieldwitness.stego - soosef.verisoo → fieldwitness.attest - ~/.soosef/ → ~/.fwmetadata/ (innocuous data dir name) - SOOSEF_DATA_DIR → FIELDWITNESS_DATA_DIR - SoosefConfig → FieldWitnessConfig - SoosefError → FieldWitnessError Also includes: - License switch from MIT to GPL-3.0 - C2PA bridge module (Phase 0-2 MVP): cert.py, export.py, vendor_assertions.py - README repositioned to lead with provenance/federation, stego backgrounded - Threat model skeleton at docs/security/threat-model.md - Planning docs: docs/planning/c2pa-integration.md, docs/planning/gtm-feasibility.md Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1.9 KiB
1.9 KiB
Emergency Reference Card
Audience: All FieldWitness users. Print, laminate, and carry in your wallet.
EMERGENCY DATA DESTRUCTION
Option 1: Pull the USB (Tier 1 -- fastest)
Remove the USB stick from the laptop. The laptop retains zero data.
Option 2: Software killswitch
In the browser: Fieldkit > Emergency Purge > type CONFIRM-PURGE > click Purge
From a terminal:
fieldwitness fieldkit purge --confirm CONFIRM-PURGE
Option 3: Hardware button (Raspberry Pi only)
Hold the physical button for 5 seconds.
DESTRUCTION ORDER
The killswitch destroys data in this order (most critical first):
- Ed25519 identity keys
- AES-256 channel key
- Session secrets
- User database
- Attestation log and chain
- Temp files and audit log
- Configuration
- System logs
- All forensic traces (bytecache, pip cache, shell history)
- Self-uninstall
On USB: the LUKS encryption header is destroyed instead (faster, more reliable on flash).
DEAD MAN'S SWITCH
If enabled, you must check in before the deadline or all data will be destroyed.
Check in: Browser > Fieldkit > Check In
Or: fieldwitness fieldkit checkin
If you cannot check in, contact your editor. They may be able to disarm it remotely.
KEY CONTACTS
| Role | Name | Contact |
|---|---|---|
| Admin | _________________ | _________________ |
| Editor | _________________ | _________________ |
| Legal | _________________ | _________________ |
| Technical support | _________________ | _________________ |
Fill in before deploying. Keep this card current.
REMEMBER
- Pull the USB = zero trace on the laptop
- Keys are destroyed first = remaining data is useless without them
- The killswitch cannot be undone
- Back up your keys regularly -- if the USB is lost, the keys are gone
- Never share your passphrase, PIN, or LUKS password over unencrypted channels