OK, so on a (hypothetical) air-gapped laptop you just blu-tak the microphone port and stick a jack in the headphone output. Then for complete tin-foil control,

OK, so on a (hypothetical) air-gapped laptop you just blu-tak the microphone port and stick a jack in the headphone output. Then for complete tin-foil control, you just open up the case and disconnect the speaker cables.