TLDR Tech / InfoSec
What My Privacy and Security Stack Actually Looks Like
A privacy-focused journalist documents the practices she personally uses rather than recommends, anchored by a "vibes first" rule that treats a sense of pressure or urgency as a red flag and verifies via a separate channel, plus operational habits like meeting new contacts in public, using a PO Box, scrubbing her address with EasyOptOuts, and delaying event posts. The technical stack favors physical security keys (three YubiKeys with backups) over passkeys, two password managers (1Password and Bitwarden), Authy for TOTP with email MFA preferred over SMS, full-disk encryption, Mullvad VPN, Privacy Badger plus uBlock Origin, Google Advanced Protection, Apple Lockdown Mode, Google Fi for SIM-swap resistance, and iCloud Hide My Email aliases. She also avoids biometrics and AI-based browsers in her specific threat model, freezes her credit, uses Signal with disappearing messages, and monitors exposure via HaveIBeenPwned, framing the whole setup as a way to reduce unnecessary exposure without making life unworkable.
Read the full story