Since 1995, when installing ANY OS or checking out new gadget/laptop:
1) Disable every kind of autorun.
2) Check all installed browser application settings that they only offer to download, never open, AND ask where to save. It only makes sense to use them for actual real web content. Anything else is a potential security hole or a frozen browser. If installing SW disable download/install of any browser plugins (PDF readers, Skype etc).
3) Install alternate to MS Browser with script blocking such as noscript, ublock or uMatrix. Disable 3rd party cookies.
4) Make email NEVER loads remote content or give a delivery receipt.
|