DAZ Studio and creating a secure PC environment

contedesfees

I've had some issues with PC security and it occurred to me that the following might offer a solution. Buying an inexpensive laptop and a wireless router and using them for my email and my connection to the internet. Meanwhile, my desktop would remain unconnected and safe from the hackers. What I've read of routers suggests that I would be able to transfer files between the two PCs whenever necessary and I suppose it would be occasionally necessary to briefly connect my desktop to update and upgrade my OS and my programs. Most of the time, however, my precious desktop and its precious files would remain offline and inaccessible to even the most zealous of hackers, and I would still have email and a connection to the web sites I like to visit through the laptop.

It sounds promising, but it occurs to me that DAZ Studio seems to require a direct connection to the internet. A user doesn't have to connect (you can choose to work offline), but when launched DAZ Studio prompts the user to connect DAZ3D. Which raises the question: Can I successfully install and run DAZ Studio on a PC that is not connected to the internet?

I'd really appreciate some input on this issue. Thanks to one and all.

fixmypcmike

If you configure DS to not automatically log in it doesn't need an internet connection.  I don't think you need to be connected when you first install it in order to change that setting, but if it's already installed I would change it before disconnecting just in case.

fixmypcmike

Also make sure you don't have the "Participate in DS Improvement Program" ticked.

Ivy

well being offline is one way to protect your PC but not very practical  if you use that decktop a lot for 3d on the internet .  I would recommend investing in a good white list anti-virus protection App.  I like to use Kaspersky. they are a little fussy sometimes and tend to be annoying by asking your permission all the time for this and that. but it has blocked a lot of attempts at my system very successfully.   A white list AV only allows apps to run you have given permission to on your computer. if its not been been granted permission from the PC Administrator then the apps can't run.Its kind of a pain in the butt . But its one of the best defenses from getting cypto-locker or ransomware. Nothings is perfect from hackers accept from staying off line totally though & thats not very pracitcal if you want to upload your art work or videos . So a good white list AV with your security set at max is really the best way to go. like I said I use Kaspersky , But there are many other av's as good or better  . I would not recommend using one of those free AV's either like Avast or AVG , you get what you pay for . that is my 2 bits

contedesfees

Thank you both, fixmypcmike and Ivy for something to consider. It's appreciated.

meganappstate

DS works just fine wihout conecting to the 'net.

I do exactly you're contemplating. My Daz computer has never been connected to the internet  or my home network and never will be. System, driver, and app updates and new content are downloaded to a laptop, scanned for malware, and ransferred by sneaker-net.

Been doing it this way for going on three years and DS has never missed a beat.

contedesfees

Well, don't that beat all. An encouraging word! Thank you very much, meganappstate. I read once that the safest and simplest PC security is denying hackers access to the PC. I've a little more research to do before I'm sure it's wise to take the plunge, but it's good to know that I'm not being an extravagant looney-tune.

namffuak

I've been doing this  for years - primarily because my home internet access was dial-up until two years ago, when I switched to a mobile wi-fi hotspot with a 15 GB per month cap.So I' take my laptop to Starbucks and download to an  external USB drive. I have two directories on the drive - one is dedicated to Daz Install Manager downloads, the other is for all other downloads (updated software, youtube videos of interest, drivers, and anything else of interest).

When I get home I hook the USB drive to the main system and run IM in off-line mode to install whatever I've downloaded. Then the drive goes to a third system (a refurb Dell 7010 that I use for watching videos, music, running my scanner - and some backups) and run a backup of the two directories to other external USB drives.

By keeping all the downloads on the external drive and using IM to do the downloads I get notifications of updated products.

TheMysteryIsThePoint

contedesfees said:

I've had some issues with PC security and it occurred to me that the following might offer a solution. Buying an inexpensive laptop and a wireless router and using them for my email and my connection to the internet. Meanwhile, my desktop would remain unconnected and safe from the hackers. What I've read of routers suggests that I would be able to transfer files between the two PCs whenever necessary and I suppose it would be occasionally necessary to briefly connect my desktop to update and upgrade my OS and my programs. Most of the time, however, my precious desktop and its precious files would remain offline and inaccessible to even the most zealous of hackers, and I would still have email and a connection to the web sites I like to visit through the laptop.

It sounds promising, but it occurs to me that DAZ Studio seems to require a direct connection to the internet. A user doesn't have to connect (you can choose to work offline), but when launched DAZ Studio prompts the user to connect DAZ3D. Which raises the question: Can I successfully install and run DAZ Studio on a PC that is not connected to the internet?

I'd really appreciate some input on this issue. Thanks to one and all.

If you're really serious about security, don't use WiFi at all. Look on the CERT site for how many alerts concern WiFi. In every Incident Response course I've ever taken, one of the first attacks analyzed is always tricking the WiFi router into connecting the wrong physical address. It is so easy that specialized Linux distros have canned apps that do it automatically. Once an attacker is connected, there are lots of other techniques to spoof a bonafide TCP connection, and at that point, the only thing between a hacker and your system is the quality of your individual internet apps, a losing proposition.

Seriously, if you don't absolutely need WiFi, shrink your attack surface by just using plain Ethernet.

contedesfees

Thanks for yours, namffuak and TheMysteryIsThePoint. I appreciate your observations and words of wisdom. Stay healthy.