I think you're miscalculating here. Most of the 'hacks' taking place are scripts scanning the entire internet looking for non-patched machines running knows vul

I think you're miscalculating here. Most of the 'hacks' taking place are scripts scanning the entire internet looking for non-patched machines running knows vulnerabilities. The risk of being targeted by one of these is near 100% on a long enough timeline. I'd _seriously_ advice you to never put a WinXP machine on the internet, even with a firewall in between. At least get the extended support thingy.