Lesson learned: None. You use the same machine for development of commercial, closed source software and video transcoding for most probably private use. Your

Lesson learned: None. You use the same machine for development of commercial, closed source software and video transcoding for most probably private use. Your postmortem can be summarized as "[advertisement]". I get that real security is too hard for most people. But even a few precautions can make a big difference. In order of effectiveness (least effective first): * Don't have sensitive data mounted automatically (yes, ubuntu, your encrypted home directory is a joke). * Don't have sensitive data on the OS-drive. Even if you are limited by archaic USB2, RAM is cheap and so is a virtual memory backed disk. Pushing your closed source into it won't take more than 30s. * Work hard and party hard. But keep that separated. One computer for fun, one for work. The one for work should not even think about talking to external devices until it's sure the environment is friendly. PS: I do drink my own kool-aid - I always carry 2 laptops that run 4 operating systems. My development and sysop environment is not even capable of playing a movie. Edit: "too hard for most people" may sound harsh, but it is not meant like this. I teach OPSEC to activists in developing countries, work for a non-profit with real privacy concerns in a first world country and make real money doing audits for rather large companies. When I say "for most people" it should probably have been "in most circumstances".