I am using Windows 10 with Defender. I follow all the ground rules when dealing with the internet and staying secure. I work in IS so I'm pretty familiar with the various threat-vectors and do a good job at protecting myself from them.
But we all know there is no fool-proof way. Plus, there are other folks that use the family computer so there are a lot of uncontrolled variables.
I have a Debian server at home running NextCloud and hosting a few CIFS/Samba shares. It is backed up, with versions, to a public cloud provider. On my Windows 10 I use the NextCloud client to sync my Documents with my NextCloud server and then I have a few of the CIFS/Samba shares mounted.
If I do get a Ransomware virus I'm not worried about my laptop as long as my Debian server is fine. So I got to thinking how I could protect myself -- particularly the data hosted by the CIFS/Samba shares.
Even if my
C: is encrypted, the NextCloud client would sync the encrypted files, not the virus, to my Debian server. And, even if it synced to my server, it would still have to somehow execute. And the files are backed up so I'm safe from this angle.
My worry is that the Ransomware virus will also encrypt my CIFS/Samba share mounts. The only true solution is to either only mount as read-only or not use them.
Am I missing anything and/or some angle I'm not seeing?