I agree with the above post--I can't even count all the times I've seen people bring in a corporate laptop (complete with an asset tag and call if lost sticker--that's just begging for theft attention) at a public coffee house left unattended. If you are going to bother using a VPN 2-factor token and privacy screen, please keep your laptop in your custody and view at all times. Ideally, work from a private executive or home office if you're a remote worker, or on-site at the company. If you must work at a coffee shop, please be sure you don't have PII easily accessible or valuable financial data waiting to be pried (that includes being on a VPN that can potentially have access to such data).

re: "asset tag and call if lost sticker".

I think it's also a great idea to not have your user and hostname set to be "johnbigbucks@bestinvestconsulting" but something more generic or randomized. I use something like this to randomize my hostname.

  awk 'length==6' /usr/share/dict/words | grep -v '[^[:alpha:]]' | shuf -n 1 | tr '[:upper:]' '[:lower:]'

because i'm somehow compelled to golf such things (like unnecessary use of cat):

    egrep '^[[:alpha:]]{6}$' /usr/share/dict/words | shuf -n 1 | tr A-Z a-z

Yep, that's elegant. It's so easy to write bad bash scripts that I do it all the time. So much to learn on my end.

Thanks for your post btw, I did not know about this tool `shuf`. My equivalent involves `sort -r | head -1`