I like to run ufw on all my machines but I’m also a tinfoil-hat wearing wacko who believes that no computer should ever really be trusted. Just trusted enough to do specific tasks.

If someone somehow busts into one of my VLANs, at least the other machines on that net will still have some sort of protection.

• sftp for quick shit like config files off a random server because its easy and is on by default with sshd in most distros
• rsync for big one-time moves
• smb for client-facing network shares
• NFS for SAN usage (mostly storage for virtual machines)

Publishers and companies will always want DRM

Developers should refuse to write malware.