Re: If a nation-state agency wants you --
"To me, naive fule that I are, it seems that running a write-protected thumb-drive OS configured to use a VPN into TOR -- of course using a no-JavaScript browser, Disconnect or similar plug-in, etc -- might be current best practice for staying unnoticed. (Going from your ISP into a VPN is less attention-getting than going directly to TOR, I believe.)"
Except you forgot about the secrets in your hardware, probably embedded into your Ethernet/WiFi controller chip where you can't avoid it.
Biting the hand that feeds IT
