This thread is for internet privacy and security tips. In theory, I will maintain the OP as a curated list of the resources surfaced by the thread. As a preface: Security measures should be custom tailored to your holistic threat profile and cost-benefit analysis. To understand security in general, start at Schneier. I live in China. My primary security need is to avoid the machine-learning intelligence of the Great Wall of China. I use two of the three top anti-GFW proxies for this purpose, and also rent a Digital Ocean droplet for $5/mo, on which I run the open source proxy script Streisand. The NSA may have compromised any or all of those hosts. If you would like to hard-stop NSA surveillance of your browsing activity, I would recommend routing your TOR traffic through a Streisand instance installed on a server in Russia. (This is just an offhanded suggestion, since I'm not currently attempting to solve this problem.) For zero-knowledge offsite compressible data storage, I recommend Tarsnap. For encryption, GPG.