it can be done but it's not easy to do it without tracable attribution as samzidat requires
Digitally it should be easier than ever. Just use gpg/pgp and have a keystore out of jurisdiction or on an onion address. But anyways what matters in this case is that stuff works