Java Script is the biggest vector out there for hijacking a PC and any browser which runs it is just waiting to be exploited. If someone wants in, there are plenty of zero day cracks for a W10 PC which are just one phishing email away.
You're talking random technobabble nonsense.
You’re talking random technobabble nonsense.
Possibly.
But the standard format of the zero day hackathons is you get presented with a fully patched OS and Browser and are allowed one URL, from which you have to gain privaledged access to the OS. Every browser fails every time from the ones I've read about.
I am guessing they use JS to escape the sand box the browser is supposed to be running in (I'd be very surprised if they achieve it using only html).
OP, nice job. And some very nice and helpful advice in this thread. As well as some hilarious stuff.
<span style="font-size: 0.8rem;">lowering the tone. on the Win7->Win10 step you found necessary, are you sure you were using the right mains cable? I understand from the speaker cable thread that long crystal OFC conductors cosseted in the right insulators could smooth the flow of electrons. Could this potentially ease the upgrade to Win10? Plus if you used Ethernet with the right cable you could optimise the digital flow. Or something. </span>
If the exploit requires a phishing email, then the major weakness is the human being who falls for the con. No OS is secure against that.
Win7 is no longer supported with security updates AFAIK. Win10 is. That alone makes Win10 much more secure.