Advanced Plus Security Aries91's Security Configuration 2026

[aries91]

hello everyone,
this is my configuration for this year.
In any case, any suggestions for further improvements are welcome.
thanks

aries91

 

[ForgottenSeer 123960]

Stop using your testing rig for banking. It is a massive security risk. You need to treat that machine as infected at all times, especially with those risky habits.

Go get a cheap, separate laptop for your finances.

 

[harlan4096]

Malware sample testing: I do participate in malware testing. See details about my testing environment below.
Environment for malware testing: N/A

So? Testing Environment details?

Log-in security

No Windows Hello PIN?

 

[Victor M]

Just so you know: A Hello PIN can only be used by sitting in front of the machine, not by remote attackers. Your 2020 machine has a TPM so you can set a PIN.

 

[aries91]

Stop using your testing rig for banking. It is a massive security risk. You need to treat that machine as infected at all times, especially with those risky habits.

Go get a cheap, separate laptop for your finances.

You right, I mistakenly chose the wrong option

So? Testing Environment details?


No Windows Hello PIN?

Yeah Now that you mention it, I set a 4-digit PIN instead of a password. I didn't know it was part of Windows Hello.

 

[Sampei.Nihira]

Hi.
These extensions are not necessary:

• click&clean
• smart https

 

[aries91]

Hi.
These extensions are not necessary:

• click&clean
• smart https

Click and clean is useful to me because with one click I can delete cache, history without closing Chrome or fiddling with Chrome menus. Maybe could u suggest me another way to do it?

 

[Sorrento]

IMO the less extensions we use the less there is to wrong or you be compromised...

 

[ForgottenSeer 123960]

You right, I mistakenly chose the wrong option


Yeah Now that you mention it, I set a 4-digit PIN instead of a password. I didn't know it was part of Windows Hello.

I would still recommend a separate device for these activities. Think of it as quarantining. Because these activities carry a higher risk of malware, you want to keep them far away from the device where you enter your credit card information.

Sharing and receiving files and torrents
Gaming
Gaming with third-party mods

 

[Sampei.Nihira]

Click and clean is useful to me because with one click I can delete cache, history without closing Chrome or fiddling with Chrome menus. Maybe could u suggest me another way to do it?

You can use the policy

SavingBrowserHistoryDisabled = 1

to not set the history.
See if it works with:

chrome://history

Or you can delete (also) your history when you exit the browser with this policy:

ClearBrowsingDataOnExitList

Chrome Enterprise Policy List & Management | Documentation

The same applies to the cache, which can be deleted when you exit the browser using the policy described above.

 

[aries91]

I would still recommend a separate device for these activities. Think of it as quarantining. Because these activities carry a higher risk of malware, you want to keep them far away from the device where you enter your credit card information.

I agree with the principle of separating the two activities using two different devices. The problem is that I only have one PC. At most, I can use my tablet or smartphone or an older PC with Windows 10 (not supported by the more recent Windows 11) for banking activities.

You can use the policy

SavingBrowserHistoryDisabled = 1

to not set the history.
Or you can delete (also) your history when you exit the browser with this policy:

ClearBrowsingDataOnExitList

Chrome Enterprise Policy List & Management | Documentation

The same applies to the cache, which can be deleted when you exit the browser using the policy described above.

The problem is that you can only clear the cache by closing the browser, which bothers me because I lose my open windows. I needed a quick way to do this cleaning without closing the browser.

 

[Sampei.Nihira]

I agree with the principle of separating the two activities using two different devices. The problem is that I only have one PC. At most, I can use my tablet or smartphone or an older PC with Windows 10 (not supported by the more recent Windows 11) for banking activities.

Yes, I understand you.
I also have (now) only one PC.
I don't even want to use two profiles.
Also because there is nothing in this universe that has the ability to overcome me (50%) + my browser + 2 adblocks (50%).

 

[Sampei.Nihira]

The problem is that you can only clear the cache by closing the browser, which bothers me because I lose my open windows. I needed a quick way to do this cleaning without closing the browser.

There is the Chromium Command Line Switch to prevent the disk cache from being set:

--disk-cache-size=0

List of Chromium Command Line Switches « Peter Beverloo

 

[ForgottenSeer 123960]

Yes, I understand you.
I also have (now) only one PC.
I don't even want to use two profiles.
Also because there is nothing in this universe that has the ability to overcome me (50%) + my browser + 2 adblocks (50%).

This statement is disingenuous as it omits several key variables.

This defense strategy relies exclusively on the Application Layer (L7), specifically browser-based filtering. While adblockers mitigate "Malvertising" and basic script execution, they are ineffective against fileless malware, sophisticated Session Token Theft (Pass-the-Cookie), and OS-level exploits that bypass the browser sandbox entirely.

 

[Victor M]

an older PC with Windows 10

you know you can install Win 11 on older PC's wiith the BypassTPMCheck and BypassSecureBootCheck method. Google for them. In case you object to fiddling with the registry, know that you are modifying the installer's runtime registry and not your PC's registry, and the modifications disappears after install is finished. .