I just assume that if any nation-level actor wants to "get" me, it can. I really don't include spy agencies in my threat models because I feel like it's a battle already lost before I even begin. If they put a gun at my head, I'll tell them my password anyway. Nothing in my hard drive --- or my head --- is worth my life.
As long as my devices can fend off the generic attacks, like script kiddies, port scanners, DNS hijacking at public wifi, I'm content.
That said, my defeatist attitude is at least partly because I'm a nobody. For high-value targets, they must have their own method of protection that doesn't rely simply on a promise to be neutral.
As long as my devices can fend off the generic attacks, like script kiddies, port scanners, DNS hijacking at public wifi, I'm content.
That said, my defeatist attitude is at least partly because I'm a nobody. For high-value targets, they must have their own method of protection that doesn't rely simply on a promise to be neutral.