Yup! My approach to security is based on administrator Law #2: It’s the easiest form of security for me as the administrator and me as the user. Administration takes practically no time at all and it provides me with complete immunity from network attacks and as long as I’m not inadvertently stupid or sloppy, also from any other attack. The administrative tasks that I do perform are few and far between and can be done when I have the time or inclination. I’ve been using it since the days of Win NT and results from the weeks I spent learning how and then recovering from a virus that wiped my hard drive. I decided there were better ways I wanted to spend my time. (I know, as a CyberSecurityPro, you are probably saying to yourself “isn’t that cute! One attack!”). But as a one-man operation I really don’t have a lot of time to devote to security issues and even if I did they wouldn’t occur often enough to keep me proficient without a lot of ongoing study, and I’m not in a position to find a trustworthy pro and pay him/her to stay on top of a network connected system. Therefore: Offline it is!
As you seem very experienced perhaps you would help me with a question that I’ve wondered about ever since MS started doing online updates (a little off topic, but perhaps you will indulge me if you can): Does MS update service take exclusive control of the network connection so that it is not possible for an attack to take place while the update is downloading?
Thanks for all your help. Now i just need to find the time to update to W10. And learn the differences from W7.