Nothing however beats blackholing a work box at the firewall, as the old saying goes, but that no longer applies to win10, which *specifically* uses the LAN to share data as well, so if you have one LAN boxen that isn’t blackholed from the WAN, you’re wide open to “telemetry” and any as yet undisclosed spook back doors.

I firmly believe the future will take us back to acorn and riscos, where the OS is on EEPROM, it still doesn’t protect us from spook backdoors of course….. which brings us back to an active stateful firewall.

This is why I was so interested in the celeron based brix, it has the cpu power to be a stateful firewall unlike my drayteks, but first I have to soak test it as a dedicated work pc and see how it goes.

Say someone has a wind turbine generator, and more power than they can store/sell back. Does it make sense to mine Bitcoin/Ethereum/a basket of the million shitcoins out there, using that cryptowallet as a virtual battery?

Another pro tip, don’t post 4MB jpegs, the “save for web” feature in photoshop!

What is Windows 10 LTSB? From reddit:

“Take everything we loved about Windows 7, add the under-the-hood improvements of Windows 8 and 10 but none of the marketing/cloud/phone app/user-tracking crap, and what do you get? Windows 10 Enterprise LTSB edition.
No pre-installed nonremovable junk “apps” (Like Paint 3D, Xbox, Mixed Reality Portal,…) that waste storage space & resources by running in the background, no Edge, no Store, no Cortana.
Default built-in tools like calculator are the same that were in Windows 7.
More control over updates and upgrades; Windows Update is security and hotfixes only – no lame marketing-features being force installed.
No upselling. No “suggested apps”, no “Get Skype” button on the start menu that can’t be removed, no notification spam to “Try Office 365”.
Local account by default
The “telemetry” spying garbage can be completely disabled because LTSB is based on Windows 10 Enterprise”

It’s funny how “no telemetry” is considered an enterprise feature!

If lightweight mattered you’d go embedded CE and roll your own drivers etc IMHO

My 2c, YMMV etc

If you need all microshaft domains to blacklist, here they are.

And the best tool to customize/integrate stuff into Windows is NTLite.

Just fyi, cheers!