In my line of work, I often have to plug other people's thumbdrives into my SP2 and I hate the thought of that (lots of viruses/trojans spread through this route). What's the best way to protect against "catching" anything? I was thinking of running an obscure UNIX OS under VMWare and mounting the device that way. Is that overkill or does it still leave me vulnerable? For those that are going to suggest their favoritve antivirus program, are you that confident in your AV that you would plug in thumbdrives from multiple absolute strangers without fear? And for those that are going to say "Don't plug other people's USB drives into your Surface!", unfortunately given my particular use case, that is just not an option. Any other ideas?