Hacker News Reader

This is the way.

Close all avenues, then only open what you exactly need.

By default, Linux has way, way too much functionality, insufficient testing and proof of security correctness, and not enough security controls.