3 ms·
I routinely prune /home of sensitive info, and often move secrets into a Cryptomator or Veracrypt vault. I also compartmentalize my workflow. One for NSFW stuff
by vmoore 4y ago
I routinely prune /home of sensitive info, and often move secrets into a Cryptomator or Veracrypt vault. I also compartmentalize my workflow. One for NSFW stuff, another for work, another for playing games, and the list goes on...I do this because a compromise of one system does not mean a compromise of my entire system. Virtual machines are great for this alongside Chrome/Firefox profiles for different things. How you slice and dice up your own system(s) is entirely up to you.
- uxcolumbo 4y agoHow do you compartmentalize? With VMs or setting up different profiles?
- nickjj 4y agoI think there's varying degrees depending on what your goal is. Besides VMs you could have a different user login for each compartment which means things like browser profiles, shell history and other things will get their own settings. I record a lot of videos and wrote a little script[0] to help backup and restore my shell history to avoid auto-complete and CTRL + r searches from showing sensitive info (client work, etc.) while recording. I only use one browser for recording which has its own history too. For my use case that's enough separation, for others it might not be. For example I still need to be careful about running commands like `docker image ls` on video because it has potential to show client work. I just remember to black out sensitive info during editing if it happens to come up. [0]: https://github.com/nickjj/dotfiles/blob/0076e508403c9981e39320299b10b2053576a884/.config/zsh/.aliases#L50-L102 https://github.com/nickjj/dotfiles/blob/0076e508403c9981e393...