I can't tell if my hardware was not compromised (most likely it was not), but for the data I store on my SSD - I keep it fully encrypted with boot stored on hardware aes-256-encrypted USB drive. Laptop won't boot without the USB plugged in, and USB won't unlock unless correct key is provided. Not too sophisticated but enough for my humble needs (that is I'm the only one who can boot the laptop, and I know my data will be safely forgotten if my flat gets robbed or if I forget my laptop on the train etc.).
No comments yet.