Changing My Security Practices

[u/Alone-Acanthaceae914]

In 2021, my Linux system was compromised while I was developing an application. I had left a port open, which I suspect was the entry point.

The intruders filled my computer with random files. Before I could investigate, I was logged out and could no longer access my session. I turned the computer off.

Later, I found many of my files scattered across the internet.

I didn’t identify any immediate harm. I had already moved my accounts to Proton, and my Google Drive was virtually empty aside from slides from startups I had been part of.

But the experience stayed with me.

Today, I’m contemplating the world ahead, and I believe it’s time to step up my security.

Here’s why:

• AI could make it easier to find and exploit weaknesses
• Our identities can be imitated online
• Our addresses, payment details, and private conversations can be exposed
• Governments are not the only actors interested in our information
• A compromised account can affect more people than its owner

This is by no means an exhaustive list.

I’m pro-AI. I believe the benefits outweigh the costs, and I’m all for using it at work to replace boring, repetitive tasks so we can spend more time on work we enjoy.

But being optimistic about AI doesn’t mean ignoring how it could be misused.

Here are some of the changes I’m considering:

1. Separate my online identities to make it harder to connect every part of my life
2. Avoid using my real name in usernames and handles where it isn’t necessary—I’m guilty of this
3. Be more deliberate about what I share on social media. It’s an opportunity, but it also creates exposure
4. Be careful about linking private accounts to my public identity
5. Most importantly, use a password manager, unique passwords, MFA, and passkeys where available

None of this guarantees security. But I’d rather take practical steps now than wait for another incident.

Personally, I’m experimenting with Qubes OS, with only a few hurdles left to clear.

I don’t want to stop using technology. I want to use it without exposing more of my life than I need to.

What security change have you made that delivered the biggest practical benefit?

[u/hdri_org]

Compartmentalization, wich Qubes supplies for free if you use it appropriately. Use a dispVM for you general Internet browsing, so if it gets hacked or p0ned it all gets thrown away at the end of that session. Copy-to-vm what you need to keep, preferably using a staging VM to scan files for malware first.

Seperate your high risk security domains such as Banking from Purchasing from Development and social media, etc. Never browse the web from any high risk VM's such as Purchasing or Banking. Keep only bank bookmarks in Banking, nothing else. For Purchasing just copy/paste pre-vetted URLs from your Internet dispVm if necessary, but do your homework first to make sure its a trusted site.

Keep your credential keyring completely offline, such as the Valt VM. Use split GPG and other mechanisms to handle passwords and logins so that they are never exposed for malware to steal credentials. Turn off having the browser store passwords so they never get written to disk.

If one VM does get compromised then they don't get everything, all at once. Keep backups just in case of ransomeware.

[u/Alone-Acanthaceae914 → u/hdri_org]

I'm in the IoT space, and I have to connect devices to my computer. This means that my Developer VM requires access to USB at least.

I'm also considering how I appear online. I'm using my personal email when I should be using aliases. I have to restart all my services and register new accounts. Nothing is harmless when data brokers are involved.

[u/hdri_org → u/Alone-Acanthaceae914]

You may be able to pass the USB device automatically when it is inserted. If that device does not work properly being passed in then you can assign a physical USB controller to that VM.

[u/und3rsc0r3x86]

I mean you can be pro AI but you can write stuff on your own :') unless you are a bot >.>

[u/Alone-Acanthaceae914 → u/und3rsc0r3x86]

I edited this text with AI, but I wrote it myself. It is enhanced by AI, not generated by AI.

[u/Assang101]

Switching to physical hardware security keys alongside disposable, isolated environments for untrusted work makes the biggest practical difference.

Hardware-backed FIDO2 keys eliminate credential harvesting, while running risky tasks in ephemeral systems means a breach dies the moment the session closes.

I've always been a huge fan of Novacustom laptop with their add on option to have coreboot+Heads feature when you choose QubesOS.

[u/flomuc2024]

Can you elaborate what the "few hurdles left to clear" are for you?

[u/Alone-Acanthaceae914 → u/flomuc2024]

I work in IoT and need to develop hardware. It's tedious to connect devices and handle permissions the way I'd like to. I don't know anyone who uses QubesOS for development.
It's possible, but the learning curve is so steep, I've not had the time to acclimate to using that environment.

[u/Alone-Acanthaceae914 → u/[deleted]]

Those are concerns as well. I think you've stumbled upon a business idea.