#Linux for Bitcoiners. 🐧🐧🐧

1. Enable the firewall. This limits all incoming connections, forcing you to explicitly allow connections (ex: incoming Bitcoin core peers) as they're needed.

2. Install and enable Opensnitch, an application firewall that limits all outgoing connections, forcing you to explicilty audit every binary's attempt to communicate out to the internet. This will make visible all the network traffic on your machine and snitch on programs

3. Install and periodically scan for malware usijf clamav, rkhunter, and chkrootkit. This will give you a sense of whether your machine has been pwned by a known exploit.

4. Use a minimal Linux distro like Zorin Lite. Remove all unused apps. Install needed apps through Snap/Flatpak (built in). Install OS with full disk encryption enabled.

5. Neuter hardware backdoors in your BIOS by flashing your machine with Libreboot or Coreboot. For extra bonus points, install HEADS to cryptographically detect evil maids.

6. Dump Firefox LibreWolf. Use Tor when anonymitiy is needed. Use LibreWolf + Mullvad/iVPN when a whitelisted IP is needed.

7. Isolate your #Bitcoin usage (savings) to a dedicated machine away from your daily driver. Consider running your entire Bitcoin stack (node+coordinator) enclosed on one machine. If leaving machine on to sync blocks, use Sparrow to keep your wallet encrypted at rest.