1. There is an INSECURE NSA key on MS WINDOWS, probably need to stop running windows.
2. Obviously you want avoid services using MS IIS as in how do you think NSA is getting those SSL keys?
3 We do not yet know whether NSA found a way to reverse the knapsack problem for encrypting and packaging keys.
4. Assume non open source crypto systems as having backdoors.
The biggest take away is to secure your end-point, if you can get off of MS Windows than you probably should. This NSA spying is driven by the Military Industry complex. This means that because they need money there will be mission creep and NSA will use it to spy on on NON Terrorist, namely you and me thus the danger is very real.