By running OpenBSD as a workstation you already made sure what 99% wouldn't connect with you /redditmode This guide is partly Security 101, partly for a localh

By running OpenBSD as a workstation you already made sure what 99% wouldn't connect with you /redditmode This guide is partly Security 101, partly for a localhost admin. Things are different when you run an organization with a centrally managed catalogue. Or you are sane and have a clear picture of the attack vectors. Least privilege? Yes, of course. Drop inbound by default? Yes, of course and it's amazing how many self-titled Linux Administrators insist what the machine should be 'secure from start so no firewall is needed'. Also this guide implies a workspace which questions what exactly kind of malicious traffic a [single] OpenBSD machine in the network would receive. Drop outbound by default? Yes and BTW it's pretty easy on Windows, because the Windows Defender Firewall (what a mouthful) is pretty capable to filter by an application, not just by IPs and ports, so you don't need this SOCKS ersatz app firewall. > Live in a temporary file-system Now this is just ridiculous. As other said this is Silk Road level of paranoia. > Disable webcam and microphone Don't connect them in the first place? > Disabling USB ports See the temporary file-system. Good luck finding a notebook with PS/2 or serial ports. > auto-updating the packages and base system daily on a computer is the minimum that should be done everywhere Oh god. > 10.1. Specialized proxies § > It could be possible to have different proxy users, with each restriction to the remote ports allowed, we could imagine proxies like > Of course, this is even more tedious than the multipurpose proxy, but at least, it's harder for a program to guess what proxy to use, especially if you don't connect them all at once. Now this is what bugs me most of this guide. If you already allowed something to run on your machine then it is usually too late for security through obscurity exercises. Most of the things advised here would just make your life miserable and would lead to disabling or shortcutting them.