Don't connect to the internet (hack threat) but connect to get antivirus and OS patch

[DanceswithUnix]

/Note to self - get butt in gear and do this.

It's an excuse to buy a new Pi 4, which are pretty awesome (as if you need an excuse to buy a Pi ).

[Saracen999]

It's an excuse to buy a new Pi 4, which are pretty awesome (as if you need an excuse to buy a Pi ).

Exactly. I just need to get a round tuit.

[Dashers]

New build instructions:
1. Install latest version of OS you can
2. Ensure local/personal/OS firewall is running
3. Disable IPv6
4. Connect to a trusted/clean network with a standard NAT router
5. Run OS update
6. Go directly to http://www.mozillia.org and download Firefox (or whatever browser you use)
7. Go directly to <insert company name> and download whatever AV product you're interested in
8. Re-enable IPv6.

Probably waaay over kill, but that keeps you pretty tight. A standard NAT router will prevent all IPv4 connections being established, which is effectively meaning you're not connecting directly to the Internet. It's different with IPv6 though as NAT isn't a thing, your computer is directly connected to the Internet and if your router isn't also firewalling, then all traffic can come through (not that I'm aware of a domestic router that has IPv6 support and not firewalling).

In terms of stuff getting your computer locally, it's drive-by stuff. Going directly to sites of the software you need means you're not exposed to advertising, and can download the latest browser which is the main attack vector these days.

[DanceswithUnix]

6. Go directly to http://www.mozillia.org and download Firefox (or whatever browser you use)

Ironically you spelled that URL wrong, who knows what nastyness you could pick up from that site

If only there was some sort of Windows store that you could trust...

[Zak33]

ref Windows Defender and a fully up to date Win10 install

https://bit-tech.net/news/tech/softw...-benchmarks/1/

Best you can get, by all accounts