Title: I&#x27;ve always wanted to start writing a life journal for myself. But there have always been one nagging reason that kept me from doing so: the fear of not securing it properly, and having it <i>leaked</i>, so to speak. Naturally, a journal will contain intimate thoughts that I&#x27;ve kept from anyone else. And I intend to store more data than paper journal normally does: images, knowledge etc. A wiki about myself.<p>Now, I&#x27;m just another run-of-the-mill mid 20s programmers, I&#x27;m not on any list that I&#x27;m aware of. And you can never say anything about life, but I&#x27;m not particularly intend to join any list of a three digits agency, either ;).<p>That said, I&#x27;m not sure if my paranoid is grounded or not. My answers to the two basic questions on threat modeling: &quot;What&#x27;s the likelihood of a threat against the journal would be?&quot; and &quot;What would happen if the threat actually happen&quot; would be &quot;I don&#x27;t know&quot; and &quot;I hope I&#x27;m old enough&quot;. On one hand, I&#x27;ve no reason to believe that my info would be of anyone interest. On the other hand, I&#x27;d rather not find out whether anyone does.<p>I&#x27;ve been thinking about it for a bit, and the most secure way seems to be getting a secondary machine without network access, and just write the journal there. This approach has several problems:<p>- Collecting data: I&#x27;d have to actually transfer data I got from another machine to this one, via some air gap methods. This seems way overboard to me.<p>- Backup: regular backup won&#x27;t be a viable options, especially for redundancy in term of geography.<p>All in all, I&#x27;d prefer to have some security&#x2F;encryption scheme that I can use on a normal machine. Of course, the trade off will be security. I&#x27;m willing to accept that if I managed to be a named target of a 3 letter agency on a 20 person lists, they will successfully mount an attack for the data (I wouldn&#x27;t be able to stop them, either way). But beyond that, I&#x27;d like the data to be as secure as possible. How would I accomplish such objective?
Upvote: