I’ve had my VPS exposed to the internet for a while and never been pwned. No professional experience. Use SSH keys, not password authentication. Use FDE if physical access is in your threat model. Use a firewall to prevent connection on internal-only ports.
Vaultwarden will store your passwords encrypted (obviously) so even if your database does get stolen, the attacker shouldn’t be able to read your passwords without your master password.


















There’s a lot of hardware enshittification, eg removing a lot of commonly used ports from laptops. Also I don’t like the form factor of all these Macbook rip-offs.
I haven’t noticed similar issues with desktop computing, but for laptops, I do prefer older laptops.
Also, so many older devices go to e-waste when they’re perfectly usable. I like to salvage devices when other people don’t want them anymore.