Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Every computer can have two hard disks, one which will store the OS and related files and will not be accessible to other code. The OS HDD will only be able to connect to a secure server for updates and nothing else. All the c@ap software will go on the other HDD.

share|improve this question

closed as too broad by random Aug 24 '13 at 17:27

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

    
And how do you intend to make files on disk 1 'not accessible to other code' ? –  spuder Aug 24 '13 at 15:39
1  
Yes it will make your computer safe from malware. It will also make your programs 'safe' from usage. –  user1167442 Aug 24 '13 at 15:50
    
@spuder Maybe by using something similar to SELinux. I don't know if there is a windows equivalent, though. –  user49740 Aug 24 '13 at 15:54
    
Questions in SU should be about practical, not theoretical, problems. This being said, It would depend entirely on how applications need to access the kernel and what permissions it allows to the processes. On how it is written, it is too broad of a question to be clearly answered. –  Doktoro Reichard Aug 24 '13 at 15:54
add comment

2 Answers 2

up vote 1 down vote accepted

If the operating system and the current user(s) can access the drive, then the number of drives does not increase security.

Even with two drives, one for the operating system, and another for storage and applications, there is no increased security. There is increased uptime in the event of malware though. Only the core of the server would need to be rebuilt, thus making recovery time less.

share|improve this answer
add comment

Yes, multiple hard drives can increase security provided that you have only a single internal hard drive exclusively for the system and all others external removable drives.

  1. Use the smallest possible SSD for the system (say 32G) and 1T USB3 drives for the others.
  2. Clone the system drive so that you can quickly restore if you do catch something.
  3. Keep one USB drive exclusively for connection to the internet.
  4. Use all others only when off-line.
  5. Virus check all software before installing.

I can't remember when I last had a virus, must be many years ago.

see also

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.