With things like NSA or state sponsored attack, it seems that no one is safe from a technical point of view. Is there any efficient method or strategy to protect against them?
My guess is that relying on technologies is the worst method, as it is very hard (even at large corp) to be better than state sponsored employees.
A method I can think about: I often use a physical layer between network, for example, a computer is connected to the network, but if there is important information, I use a USB to copy data from that computer to another computer that is disconnected from internet, or between them. Work and data on that disconnected computer is quite safe, isn't it?
The data may be exposed in connected computer for a very short time, but may be encrypted before that. Password can be transmitted with a different route, e.g. phone or in physical device. The USB may be compromised but it is a much easier problem. Also desktop computer is quite safe as it doesn't have any wireless connection that may be turned on without alerting user.
From a defensive mindset, what can you do?