So it seems that an unpatched XP machine lasts less than a minute on the MIT network

Kernel 2.6 has support for writing NTFS partitions. Install the machine with the ethernet cable unplugged, and then boot into knoppix (for KDE fans) or gnoppix (for gnome fans) and download the patches safely. Here's more from our friends at O'Reilly. Tim, not Bill.