Username or EmailPassword
Article is much more logical than the two previous. Good work.
As for the running of Win2k/XP without firewall - I have the same experience. It is not possible to install any of them without security updates pre-downloaded (at least not at my location). I got infected by Sasser and/or Blaster before I managed to download updates.