I favor using tools that already exist. On my router, I block traffic from all the sites listed here: https://github.com/CHEF-KOCH/NSABlocklist For a password manager, I’ll use Bitwarden, built on Debian 9. Works just like last-pass or 1password or Chrome password vault - except all data is saved and encrypted on my own hardware. For browsing, I’ll use a commercial VPN product, but I’ll understand the functional limitations of such a product - which means that I know enough about how it works to know what is still available to be sniffed, what third parties are still able to get, and what not to search up. For searching, I’ll use DuckDuckGo. Self-explanatory. For my accounts, I’ll routinely purge them, delete them, recreate them. For email, I used to have a custom-built mail server but that was too much administration. Now I have Tutanota with a custom domain. For all my accounts and service, I have MFA enable. This is the best tool out of all of these, and the easiest to set up. Your bank, your trading account, all social media, email, etc. should all be using MFA. No exceptions. And, most importantly, I understand the limitations of each, and what information in a transaction/transfer/exchange/packet is still available for bad guys to sniff. There is no such thing as perfect security, but you can definitely go a lot further than the default settings. Signed, a cyber security engineer

I just wish NVidia would be nicer to Linux environments. Lack of drivers, for Linux, in 2020? It’s crazy to me.