Advanced Plus Security ARandomBloke's day-to-day laptop config 2020

[rndmblk]

Just recently discovered the site - I got here looking for how to make the best use of the tools built into Windows so that's what I'm using currently for AV/firewall

 

[harlan4096]

@rndmblk:

In Backup and RollBack, You may add a full Image System BackUp solution: Macrium Reflect Free or AOEMI Backupper, both are free and reliable.

A PassWord Manager would be welcome also.

Please kindly reflect Your changes editing Your config, and announcing them here, thanks for sharing

 

[Gandalf_The_Grey]

While all those extension are great: noScript, HTTPS everywhere, Privacy Badger, Bitdefender Trafficlight.
You could loose some if you invest time in the blocking modes of uBlock Origin:

Blocking mode

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean. - gorhill/uBlock

github.com

New Update - uBlock0rigin in Medium mode for Lighter and Stronger Protection, with Less websites breakage and hassle

Why a seperate thread? I got a few questions of the uB0 settings I posted in Old School's uB0 tips and tricks. In stead of stealing that thread I thought it might be better to create a new thread to explain these settings. I also got a question how to apply this on other browsers, so I left out...

malwaretips.com

 

[ForgottenSeer 85179]

Nice to see another Windows internal security build

With Edge you can also take a look at my guide for isolate your surfing against shopping: Edge - Chromium-Edge "3-Browser-Profiles" Solution
This will increase your privacy and also can use better hardening in default profile without loosing comfort in banking profile

 

[rndmblk]

@rndmblk:

In Backup and RollBack, You may add a full Image System BackUp solution: Macrium Reflect Free or AOEMI Backupper, both are free and reliable.

A PassWord Manager would be welcome also.

Please kindly reflect Your changes editing Your config, and announcing them here, thanks for sharing

Thanks @harlan4096. I've implemented both suggestions with Macrium Reflect Free for system backup and Bitwarden as Password Manager.

While all those extension are great: noScript, HTTPS everywhere, Privacy Badger, Bitdefender Trafficlight.
You could loose some if you invest time in the blocking modes of uBlock Origin:

Blocking mode

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean. - gorhill/uBlock

github.com

New Update - uBlock0rigin in Medium mode for Lighter and Stronger Protection, with Less websites breakage and hassle

Why a seperate thread? I got a few questions of the uB0 settings I posted in Old School's uB0 tips and tricks. In stead of stealing that thread I thought it might be better to create a new thread to explain these settings. I also got a question how to apply this on other browsers, so I left out...

malwaretips.com

Thanks @Gandalf_The_Grey - I'll have a look through both links. Reducing the number of extensions while maintaining protection sounds good.

Nice to see another Windows internal security build

With Edge you can also take a look at my guide for isolate your surfing against shopping: Edge - Chromium-Edge "3-Browser-Profiles" Solution
This will increase your privacy and also can use better hardening in default profile without loosing comfort in banking profile

Thanks @security123 - I'll read through your guide

 

[rndmblk]

After reading about uBlock medium mode and some of the configs others are using I enabled uBlock Medium with NOOP filters for the main 'English speaking' TLDs. I removed noScript, HTTPS everywhere and Privacy Badger as I believe most of the functionality may be in uBlock Medium mode.

I'll see how the recent changes go with a mind to creating different Edge profiles. Don't want to introduce too many changes at once

 

[LDogg]

Extensions:
- definitely keep Bitdefender Trafficlight, fantastic browser addon for security, even works seamlessly when using DDG search engine
- done the correct thing removing them 3 for uBlock in Medium Mode

Firewall:
- think about applying a better way to control Windows Fw, off the bat if you don't know how to configure it's like cellophane wrapped on your computer, if you like notifications I would suggest using Malwarebytes Windows Firewall Control, or straight forward setup and forget w/out notifications is Tinywall, but make sure you setup the "Change mode" to Autolearn first (providing you know your computer is clean) and open up all important software that you use on a daily/monthly basis, or you will encounter problems

VPN (optional):
- for free feel free to use ProtonVPN or Windscribe, pros and cons are debated on both xD

PW Manager:
- Bitwarden, only one to recommend and its 100% FREE

Backup:
- I certainly can't hesitate enough to have more than one way to backup, you have cloud covered, maybe add something like Macrium Reflect as previous stated in other comments to backup straight to a HD or other removal drive

Everything else to me looks covered.

~LDogg

 

[rndmblk]

Thanks @LDogg

Firewall - I'll have a look at both of your suggestions. My initial gut feel is that 'set and forget' might win out!

VPN - I have to admit I've not really ever used one (apart from on my work PC where it's required to work from home)

PW Manager - Glad I chose a good one. I think it was a poll here on MT that pointed me to it.

Backup - Good point, I've added Macrium Reflect. I'm trying it with one of their default setups: I think it's Full once a month, differential once a week and incremental once a day. All to an external drive.

Edit: I've installed Tinywall. I put it in learning mode and started all the apps I use regularly then put it in normal mode.
Edit2: I've replaced Tinywall with Windows Firewall Control. I tried both and just prefer WFC for some reason, maybe the layout

 

[rndmblk]

I dropped my ConfigureDefender setting from MAX down to High. I found that I was getting more notifications than I prefer and I believe High is still a considerable improvement over the default settings. I'm just trying to find that balance between security and convenience/minimum number of notifications.

 

[Gandalf_The_Grey]

I dropped my ConfigureDefender setting from MAX down to High. I found that I was getting more notifications than I prefer and I believe High is still a considerable improvement over the default settings. I'm just trying to find that balance between security and convenience/minimum number of notifications.

High is the best balance between security and usability.

 

[Andy Ful]

It is good to read the FAQ from @askalan's website and General Help (<General Help> button in H_C's main window). The H_C may require also some learning:
Helpfiles - Hard_Configurator (hard-configurator.com)
The H_C manual is also available via <General Help><DOCUMENTATION> from the H_C application.

Some H_C users on MT prefer the Basic_Recommended_Settings that are less restrictive (allowed EXE and MSI files, restricted scripting and other file types). But, this can depend on installed software and user habits. The more restrictive settings, the more whitelisting will be required.
Be safe.

 

[rndmblk]

Have made some incremental changes over the week since my first post. Have read more about H_C and gotten some ideas from other people's configs and posts

 

[LDogg]

Still looking like a very good setup. Hope the change you've made are good.

~LDogg