The ports are closed for safety reasons. If it's inconvenient, call 8080, and everything else is closed.

Of course, the less service, the better. Now the third party is doing a better job of updating software. You can trust third-party software to update problems, and you should make an exception to this aspect of the agreement service.

Remote ports and services are shut down, which may be useless.

Guests, the less account management, the better

Firewall, there is a hardware firewall if you have money, but there is no money. In any case, the port is closed.

Vulnerabilities include third-party software such as 360. Super rabbit, as long as the operating system is genuine, there is no problem.

Optimization, if this thing wants to be safe, it is best not to do it.

Anti-virus, watching hobbies, and throwing cold water on the country are not the best, not to say that the ability is not good, mainly

The timeliness is not good After all, software killing is used to kill old viruses, and timeliness is the most important.

Backup, I'm lazy, and I never back up for two reasons: 1 Now software patches emerge one after another. Unless it is backed up every two days, it will take half a day to patch it. I really didn't expect that there was anything to back up in my machine. If you really need backup, you can use dual-system backup without daos partition when partitioning.

The last and most important point, which you didn't mention, is the human factor. If you want absolute security, don't let anyone near your computer. You can drive whatever others can. To put it bluntly, put a knife rest around his neck and tell him what he wants to know.