XSS and CSRF attacks notwithstanding, the real problem is that it's casual web surfing and email that pose the risk of infection, so we're really talking about all the OTHER web use (i.e. everything that's not logging in to your bank or other high-target sites) that it would really benefit the average user to run the Live CD for. Windows would be fine to use for banking sites if that's *ALL* you were ever use to it for.
For the above-average savvy, an Ubuntu/Fedora/whatever desktop install, fully patched and running, say, VirtualBox with 2 VMs, one for casual web surfing/email and one for online banking/etc. is about as good as one can do. Bonus points for read-only guest disk images and FF/noscript.
Slashdot Mirror
XSS and CSRF attacks notwithstanding, the real problem is that it's casual web surfing and email that pose the risk of infection, so we're really talking about all the OTHER web use (i.e. everything that's not logging in to your bank or other high-target sites) that it would really benefit the average user to run the Live CD for. Windows would be fine to use for banking sites if that's *ALL* you were ever use to it for. For the above-average savvy, an Ubuntu/Fedora/whatever desktop install, fully patched and running, say, VirtualBox with 2 VMs, one for casual web surfing/email and one for online banking/etc. is about as good as one can do. Bonus points for read-only guest disk images and FF/noscript.