> Don't shit where you eat 1) Chromebook for web, social media. Separate profiles for personal trusted (banking), personal untrusted (browsing and social media

> Don't shit where you eat 1) Chromebook for web, social media. Separate profiles for personal trusted (banking), personal untrusted (browsing and social media), office/client work. 2) Separate laptop as VM host for development. Never pollute the host with third-party libraries or anything downloaded from the web, all that happens in disposable guests. 3) ssh and sftp from Chromebook to VMs as needed.