Default threat model: Some malignant demon, who is at once exceedingly potent and deceitful, has employed all his artifice to deceive me

I am mostly concerned with tracking from the private sector; I see privacy as more of an ethical dilemma than an immediate threat, although the corporate surveillance business model is contributing to problems in the real world (data drives social media algorithms which brainwash and radicalise people, leading to increased violence and social chaos). If there is a better alternative to some privacy-invasive big tech app or service then I will make the effort to switch to that. I am willing to sacrifice convenience to support projects that I believe are doing things the right way, or at least putting some effort into being better. However the reality is that most people, whether it's my friends and family or just acquaintances, do not share my ethical concerns and/or are unwilling to make personal sacrifices and this means I will always need to remain open to compromise to avoid isolating myself socially.

When it comes to the public sector, I am mostly interested in circumventing the federal government's mandatory data retention laws. which were imposed by a conservative government I didn't vote for. Again, this is more of an ethical decision; I believe I should have the right to opt out and if the government won't allow me to do that then the next step is to use tools like VPNs to ensure that data is less personally identifying than it otherwise would be. And again, like data collection from the private sector, my attitude towards government data collection varies depending on whether I see a reason for it to exist. Mandatory data collection of lawful civilians for vague "national security" reasons is overreach and doesn't have an obvious practical benefit, but during the worst of the COVID years I was okay with the compulsory government tracking of where I had been and when. I saw the pandemic as an immediate challenge we needed to overcome as a society and I was willing to sacrifice my privacy to contribute towards the collective effort.

I'm an activist so yk I probably need a more strict model

EVERYONE AND I'M ALWAYS BEHIND THE CURVE

Seriously though the world is scary for privacy and freedom

i'm thinking long term - sure, right now google knowing everything about me isn't dangerous. but if a massive political slide to the right happens in countries that host services, suddenly all the saved data from many years ago can be used against me. and don't fall for the "end to end encrypted" bullshit either - all these services can flip a switch and have your encryption keys instantly. (or, if its an open source app that ACTUALLY keeps keys on the device only, which is extremely rare, it's one update away from happening, and you better read the whole diff every update and compile the app yourself.)

that's why i choose to self host everything. yes there's a risk of being hacked, or installing something malicious because i don't read every diff on every update. but i feel more confortable with it being my own responsibility, and my services are also all on seperate virtual machines to hopefully isolate any breaches.

No one person/company/entity can know everything about me.

Well, they could, but the price would be high and I suppose I'd end up dating someone who went through that level of effort to know me anyway. :P

I found the Anarcho-Texh security guide helpful in getting started thinking about this with more nuance. I’m including the link below but here’s a short summary

Are you an: Individual Journalist Targeted Activist

Are you annoying: Random assholes Assholes with resources The State

Each category has bigger security needs on one side and more powerful tools on the other. It’s kind of humbling to realize that I’m just an individual and the NSA has no special interest in me, but that makes me feel better using a separate browser without additional security to shop on sites that block a VPN etc

(Also tbh I’m not sure when this page was last updated and I have no involvement with the org. Just a cool resource)

https://github.com/AnarchoTechNYC/meta/wiki/Persona-based-training-matrix

Mainly it's similar to yours but recently I'm at an elevated risk of targeted attacks due to work. I don't think anyone will or has tried to hack me though except by trying random old leaked credentials, but that doesn't count.

(Aww yeah,)
Threat model: midnight
Makes all the trackers fail all right
From Apple to the Metaverse fall guy

Privacy to me is not the goal, not an end. Rather, it's means to an end.

My threat model resembles one of an activist.

If you're interested, here's a great framework for approaching privacy and security in a complex, systematic and consistent way: https://linddun.org/go/

It helped me and the people.

Other people. I don't care that much about corporations getting my data for advertising. I just want my accounts to be secure and not to be spied on by nosy people.

Scams, identity thefts, manipulation through targeted ads (eg Cambridge Analytica), malware delivered via ads

My online activities. I don't want the attacker to identify them with me. Well, it's never perfect, but yeah. I don't really care about personalized ads. m

I'd even prefer them over stupid semi-pornographic ads for the average person. I don't know other countries but nearly all Japanese websites are full of such semi-porns to the level I wouldn't screen-share my webbrowser...