2. best practices are things most HN concerned people are doing... pass manager, tracker blocker, not everything in a single cloud, vpn, etc. the most interesting thing our Blur product does is let you "compartmentalize" key credentials for each 3rd party you exchange data with. meaning: Blur gives you unique emails, phone, and credit cards as well as passwords, stores them locally, and has a proxy server to route between your private credentials, and the new ones you generate. you can use gmail as your "private mail"
lastly, i'd stress: these things help a bunch to make it harder to correlate your identity cross-domain. that said, anonymity is - and has long been - very difficult to attain and expensive to maintain. don't kid yourself on the difference :)