QUESTION
Short Statement
How much of a protection against Windows 7's zero-day vulnerability after its 'end of life' (scheduled for January 2020) would I get if I
- host a Windows 10 virtual machine in a Windows 7 physical machine and
- 'confine' Internet activities to the VM?
Long Statement
If you can answer the question as above, you don't have to read what's below. I provide it for those who prefer to consider a concrete situation.
The hypothetical setup is as follows.
- Install to the physical machine only the following: Windows 7, all of its security updates (released by 'end of life'), device drivers (and whatever else is needed to 'run' the machine), and a version of VMware Workstation.
- Create a W10 VM.
- When I turn on the physical machine, I don't do anything with it except to turn on the VM. I only 'use' the VM. If I have to install any program I do it to the VM. If I have to use the Internet, I do it in the VM.
- There is no other machine in the LAN.
Of course I realize that 3 above does not exactly 'confine all internet activities' to the VM because the traffic must go through the physical machine. The more correct thing to say might be that my doodling will be confined.
An ideal answer might be in the following form.
- Break down the zero-day vulnerability to its major components.
- Say which of those components the setup above will be good against (i.e. as good as simply installing and using W10 on the physical machine).
- Say which of the risk components the setup will be helpless against.
Another way to conceptualize the question would be say: Where between the following will the setup land me?
- Full vulnerability of using W7 after 'end of life' and
- the full protection of using W10.
I don't mean that W10 will give me 'full' protection. I just mean 100% of the protection of switching to W10, however great or small that may be.
I gave VMware Workstation, only for concreteness. If this is not the best choice, please mention what may be.
BACKGROUND
I am providing the following realistic situation for those who like to know 'where the question is coming from.' You don't have to read it if you don't need it.
I have been lazy and done nothing about the looming end of life, and now am really up against it. Unfortunately my W7 machine has got a lot of tweaking to it, and it would take a long time to replicate that in a new W10 machine (not like I have no other responsibilities in life).
As a stopgap, therefore, I want to set up a W10 VM and start doing at least the obviously 'dangerous' things there, e.g. going online, installing new software. I would continue to use the W7 for 'safe' things, e.g. playing music on software after disabling updates and otherwise doing what I could to keep it within firewall (obviously I don't mean that it's really safe) until I have managed to create a W10 system for the physical machine or decided that I would switch to Linux and keep W10 to a VM.
Realistically, there will be other machines in LAN.
Thanks very much!