A question for you IT guys...

[Scott Douglas]

My wife is asking about getting the Windows ESU for her computer.

Here is the situation.

She has two computers, one that can go on-line and one that doesn't.
Her on-line one is running Win 10. She has numerous programs for her sewing machines to make designs etc, that aren't compatible with Win 11. A number of years ago I found a program that won't allow Win to automatically update itself to Win 11 and it's worked so far.

She does our banking on this computer and her tablet and her phone too for all I know.

What is your advice re: Security Updates.

She just told me she has to go on-line for some of her sewing programs, so isolating her on-line computer isn't an option.

Should I be setting up yet another computer that is a full blown Win 11 protected machine that can go on-line for our banking etc?

Thanks for any help with this.

[John Rogers]

well Scott you are lucky to have a "computerized" wife but when you start to worry about security it can become a tremendous headache! Since you have banking, business apps AND Pelican on a PC if it were me, I would go like this:

1. I didn't see anything about backups so first I would buy at least 2x 8TB hard drives and set them to backup once or twice a week. Amazon sells a very good external drive enclosure.
2. I imagine your internet service comes into a password protected box of sorts so if you don't have your own router....buy one then set it so only your computers, phones and flat screens+Roku boxes have their MAC addresses allowed in. Also change PW every 6 weeks or so.
3. I would buy a 3rd computer to use as a TEST machine such as image your wife's PC and try running her apps after an upgrade to Win11. You can run them in compatibility mode to see if the work. This can be a low price laptop you but at Amazon or Walmart on black Friday.
4. Check to see if you BOTH are logged in as administrators on any computer you use and if not change that ASAP.
5. If you don't have a battery backup for your PC/router/ETC I would suggest getting one. Again, Amazon has them fairly cheap especially on black friday.

Granted this costs some $$$$ but the router will be good for several years and the computer and drives will pay for themselves if another computer fails.

John Rogers the oldracer

[rwest]

A couple things from a computer stupid guy... my computer showed an option to pay for security upgrades for Win 10 for I think another year; don’t know the cost for it though.

Now keep in mind my qualifications, but could you get a Win 11 computer and she could download patterns to it and then transfer the files via memory stick to the old computer?

Just some thoughts that hopefully can get the gurus here saying good idea or I should get an abacus.

[flipper35]

You can also get another year on 10 if you use your MS account.

Do you have a tablet or something you can do the banking on? Otherwise a cheap laptop would be a rout for that.

If your router has the option for vlan or guest networks you can segregate that sewing computer.

John, why would they want to be a local admin on the computer? Or did I read that incorrectly?

You stated: "4. Check to see if you BOTH are logged in as administrators on any computer you use and if not change that ASAP."

[John Rogers]

Good question about being an admin. There are times when you want to run an app as "administrator" such as command window or doing an image back up including the files for the computer's operating system.

As for Windows security, since almost every hacker in the world will know how to get by it, I would recommend using the router as your firewall or security blanket. As I noted change passwords frequently.

One thing you can do in Windows is to periodically run the "Task Manager" and click on the Users button and hopefully YOUR name is the only one showing!

John Rogers the oldracer

[Scott Douglas]

Mr. Rogers,
Thank you for your input. It is most appreciated.

I will admit, I had a heck of a time getting my wife's two computers to share the same monitor/keyboard/mouse and printer, but I got it done, though some years ago.

I know security can be a major headache. I have one now, but not because of computer security issues, the weather must be changing.

I will look into getting our system up to snuff per your suggestions. I haven't delved into our computers since getting our latest ones some years ago.

Just as an illustration, here is what I'm running now:


I think I have another one of these stashed in the garage as my wife didn't like the way it worked when it went to sleep. (I bought two at the same time way back when)

I never let mine sleep during the day when I'm using it so it doesn't bother me.

I may have to get some RAM for the one in the garage as I think I robbed peter to pay paul when I went to 32gb.

As to back up drives, I robbed our old DVR boxes of their drives when we cut the TV cable cord and they didn't want them back. I'll look at using one for a backup of her machine.

What are your thoughts on random password generators?
My wife hates the ones that come up since they aren't memorize friendly so hers are not that strong, unfortunately.

Again, thanks for the input, it is helpful and appreciated.

[flipper35]

Something like Dashlane or BitWarden create passwords and remember them so you don't have to.

[John Rogers]

I am glad I woke up some memories of things from the past. Here are a couple more tidbits:

Go into the Windows system app and somewhere in the menus is one for sleeping, power on/off, and security stuff. I turned that stuff off and as I mentioned use your router to only let your computers, flat screens and phones on to your internal network.
To do that is easy, start the router admin software then pull up help and look for setting access by MAC Address. That means all your stuff has to be on the network to see their MAC Address. This is not as terrible as it sounds, not to worry. Once you get that terrible looking string of letters and numbers copy them to a text file and use it to reference who should be on your network when you check it every few days.

Good luck John Rogers the oldracer

[John Rogers]

While doing the last reply the computer started talking to me for some reason? Has anyone ever had this happen before and what caused it? Never mind it was Microsoft Edge!

John Rogers the oldracer

[id10t]

Assuming you are behind NAT and have no ports forwarded internally, and you arent browsing dodgy websites, running lord known what random downloads etc then you are gonna be fairly well protected

I would isolate other machines on your network from it too if any they are used for any of the above ...

[vash]

nothing intelligent to add. except IT was Stephen kings sickest book to me. soooooo gooood.

gave me goosebumps, and effed up my sleep pattern for a month.

[Scott Douglas]

@rwest, that is what got my wife asking about all this. She got some sort of message about it or read about it on-line some place.
I think it costs @$30 for one year for individuals.

@id10t - I'm not familiar with NAT, what is that?

We use MS Defender or whatever their name is for our 'defense'.
I don't know how to get into our router as an admin, it's supplied by Frontier who is our internet provider at this time.

All this along with the rat problem we now have in the garage has really got me worn out.
I have no one else to blame for the rat as I left the garage door open just a little over night last week when I was working out there during the afternoon but wanted some air to circulate so I raised it just enough to get the breeze in but not the sun.
That won't happen again.

[John Rogers]

Hummm, if your only router is the one supplied by your service provider, that could allow anyone to get into your network. My AT&T box acts as a router too but I added my own router inside the IP address of that box. I would suggest getting your own router and use that for security.

Generally routers have an IP address such as 192.168.1.50 or similar and this runs in your web browser such as Edge or other application. Generally the user name is Administrator and with the box I have is case sensitive. Password can be anything you want but change it frequently.

One last item is to be wary of Chinese sourced routers as many have a "back door" built in as the ones sold some years ago in the San Jose and San Francisco area and the FBI busted a wide ranging computer theft ring with counterfit boxes!

John Rogers the oldracer

[Scott Douglas]

I'm not sure if Frontier would allow an unidentified router not supplied by them onto their network.

[stealthn]

You could also run virtual box on a windows 11 pc and run a windows 10 virtual machine with all her older programs on it.

[KFC911]

As a former IT networking infrastructure guru, and systems programmer responsible for bigly $$$ OS updates, etc. ....

I do things differently ....

I haven't had a "real computer" in over 15 years...

I use a native browser (chrome) on a phone with ZERO apps and ZERO updates .... EVER.

This is how "I" roll ... banking, brokerages, taxes, etc. ... you name it.

2FA authentication and I've never had an issue .... ever.

"Geeks" ... always leave a backdoor open .... even on routers that cost nearly 7 figures ...

Don't trust "network guys" ... or IT geeks ... they know how to "get around" stuff

I am quite comfortable with my approach to online security ... others will disagree.

Sooo.,. just use a phone and let yer sewing stuff mingle online with "others" on the net... exposed?

I don't sew btw

KISS .... not just a band ... it's a conundrum

[John Rogers]

Hummm Scott, if I remember correctly once the various parts are connected AFTER or inside the box your service provider then that LAN is yours and to do with it as you wish? Might be different depending who you have as your access company and if that is the case then if it were me I'd get a new service provider. For example my connections are like this:

AT&T Internet (fiber or wires, DNS Server) -> AT&T Router (phone, Internet, TV) -> My Internal Router (gets IP address from AT&T) -> Main PC/3 iPhones/1 Printer/2 ROKU boxes/1 signal extender).

The machines I have all have their MAC address listed inside my own network so only these can get access. If my daughter comes to visit for a week or two, I add her laptop and phone and then remove them when she goes home.

John Rogers the oldracer

[KFC911]

I had a long post typed ... lost it ...

Soooo....

Winblows

[KFC911]

"Everyone thinks they are a communications expert" - Someone else - circa 1984

John, with all due respect ... you are not even in the same league as Steve (and he knows a LOT) ... there is some SERIOUSLY bogus networking info in your posts .

Stick to racing, Oracle, rifles ... and Windows .

This stuff was my career ... protecting mega-banks and world-wide networks with a major presence in China ... from EVERYONE.

I do things "my way" now.... and KIS ... to each their own way tho'.

"The biggest threat to one's online security is not really understanding how stuff works" - Me

Lotsa ways to skin....

[KFC911]

Originally Posted by rwest

A couple things from a computer stupid guy... my computer showed an option to pay for security upgrades for Win 10 for I think another year; don’t know the cost for it though.

Now keep in mind my qualifications, but could you get a Win 11 computer and she could download patterns to it and then transfer the files via memory stick to the old computer?

Just some thoughts that hopefully can get the gurus here saying good idea or I should get an abacus.

Sometimes a cheap $neakernet is a lot better than ANY other 'net... and always has been....sometimes.

A box is not a sphere ... thinking outside of the orb is OK too