[leavenotracks]

Despite its shortcomings, I value the attempt to generate this list and thank the author for it. Moreover, it's on Github so issues and pull-requests can be created, and the list can be improved.

Even though a ot of the advice will be sound for pretty much all-time, unless this kind of list is maintained in this way it would grow very stale very quickly.

[crispyambulance]

Yeah, I would expect a smug, persnickety dismissal from HN folks. But it's largely GOOD advice and we need more of this kind of thing going around.

When trying to find advice for personal cyber security by googling around, you get a wild range of material ranging from simplistic listicles, to paranoiac rantings, to BS marketing slick from entities trying to sell stuff. It's hard to find solid advice with actual reasoning behind it.

Would a normal person (who is not a target for nation-state actors) be in very good shape, cyber-security-wise, if they followed the "recommended" advice in that checklist? I say yes-- even if they put their 2FA backup codes in their password manager!