key ideas

security vs privacy vs pseudonymity vs anonymity

security - the ability to trust the hardware and software you use
           & parties are who they say they are

privacy - only the people you want to see your data see it

pseudonymity - your actions and data not being tied to you
               but being tied to each other

anonymity - your actions and data not being tied to you or each other

Important

anonymity requires privacy and privacy requires security

common threats/types of attacks

targeted - attempts to gain access to your data or devices specifically

de-anonymization - attempts to undercover your identity specifically

supply chain - exploit inserted into software via a 3rd party dependency

passive - aimed at many people at once (malware, data breaches, etc.)

service providers - your isp or the providers of other services snooping

mass surveillance - govs, websites, & services collaborating to track you

surveillance capitalism - ad networks & data harvesters like google & meta

public exposure - info you make public being combined to dox you

censorship - limiting your access to information or limiting your speech

threat modeling

think about what measures you can take that fit these questions:

1. what it is you are trying to protect
2. who you are trying to protect those things from
3. how likely and severe is the threat
4. how much inconvenience will you accept to avoid the threat