Basic Security brod's minimalistic config (2018)

[brod56]

Just a minimalistic security configuration for my old PC. No default-deny solutions here; common sense is my best weapon against threats.

 

[Paul Lee]

Caution seems appropriate for this config. (Sarcasm)

 

[brod56]

Caution seems appropriate for this config. (Sarcasm)

Yeah, pretty strange, I guess they were looking for some Voodoshield or Hard Configuration kind of stuff which I don't find necessary for normal usage. Still respect their opinion though.

 

[harlan4096]

Tagged temporally as Caution, sorry maybe a bit paranoid here

Let's see what other power users have to advice

 

[bribon77]

Well, I see it well . Thanks for sharing.

 

[Danielx64]

Well, I wouldn't use the password manager that is in Chrome, I would get a real one like KeePass or Stickypasswords.

 

[brod56]

Well, I wouldn't use the password manager that is in Chrome, I would get a real one like KeePass or Stickypasswords.

I have tried Last Pass, interesting product, but the need to pay to use the real time functionality on Android kept me away. The advantage of the Chrome one is that is synced with no problem.
Also, no sensitive passwords there, just some chess sites and fancy stuff.

 

[JHomes]

Your backup strategy doesn't make any sense. OneDrive is not a data backup tool, it's a cloud based storage service. So let's assume that you will move data over there, that means you are potentially putting a lot of data there, which could be costly.

When are you scheduling Macrium Reflect?

I think this is a recipe for disaster. There's no way all of your data will fit on OneDrive without upgrading storage space. Better off going to a snapshot tool like Rollback Rx for your data backup. Do a daily backup with the free Home Edition, then do a weekly backup with Macrium Reflect. This will be more secure and it's more cost effective as well.

 

[JM Safe]

Add EEK or NPE.

Add HTTPS Everywhere.

Thanks for sharing.

 

[Deletedmessiah]

I recommend to try NoVirusThanks OSArmor once it supports secure boot.

 

[brod56]

Your backup strategy doesn't make any sense. OneDrive is not a data backup tool, it's a cloud based storage service. So let's assume that you will move data over there, that means you are potentially putting a lot of data there, which could be costly.

When are you scheduling Macrium Reflect?

I think this is a recipe for disaster. There's no way all of your data will fit on OneDrive without upgrading storage space. Better off going to a snapshot tool like Rollback Rx for your data backup. Do a daily backup with the free Home Edition, then do a weekly backup with Macrium Reflect. This will be more secure and it's more cost effective as well.

A recipe for disaster? Lol. I have Office 365 annual subscription for my whole family so I have 1 TB of online storage.
Im doing monthly backups with Macrium Reflect, just in case, I don't even think I will ever need to restore one system image.

Add EEK or NPE.

Add HTTPS Everywhere.

Thanks for sharing.

I actually already had HTTPS Everywhere, just forgot to add it to the extension list.
Thanks for commenting.

I recommend to try NoVirusThanks OSArmor once it supports secure boot.

I appreciate your suggestion. As already said in the original post, I'm not using any default-deny solutions on purpose, mainly because the PC is quite old and Voodooshield slowed it quite a bit.
Might try NVT one day though.

Just to clarify, the point of this config is to be as simple as possible. If I wanted to setup a locked-down system I would, just check my 2017 config, it's way more complex, with powershell/wscript executables disabled via Hard Configurator, and Voodooshield Pro on AutoPilot. Here, I just wanted to keep it simple and quick for my old PC.
IMHO, this setup is clearly secure if coupled with common sense, I can't understand the rating.

 

[Malware Person]

add https everywhere and use a different password manager. If an attacker compromises the browser, then you're in trouble

 

[Andy Ful]

Just my minimalistic config for the new year.
I have learned a lot of things since I posted my first config back at the start of this year, I tried many solutions, from default-deny ones to sandbox solutions, and just came into this! Simple and fits my needs (no torrenting at the moment).
Happy new year

It is a good config for normal use, for no-'happy clicker' user. One should also know SmartScreen limitations (archives, pendrives, etc). The weak point may be macros/script/scriptlets embedded in several ways in Office documents (macros, DDE, ActiveX, OLE, OnClick and OnMouseOver actions). Some of those techniques may work even for non-'MS Office' applications. So, one should know how to avoid spam in the first place or use online Office solutions.

 

[brod56]

It is a good config for normal use, for no-'happy clicker' user. One should also know SmartScreen limitations (archives, pendrives, etc). The weak point may be macros/script/scriptlets embedded in several ways in Office documents (macros, DDE, ActiveX, OLE, OnClick and OnMouseOver actions). Some of those techniques may work even for non-'MS Office' applications. So, one should know how to avoid spam in the first place or use online Office solutions.

For sure. I usually check unknow files from mails/prendrives via VirusTotal, I know it is important given the fact that I have no Voodooshield (or other effective anti-ransomware solution) in this machine.

 

[brod56]

So I've just put my laziness away, and updated the thread fields with proper, more complete information.
Also implemented Hard Configurator recommended restrictions.
Thanks for your comments and sorry if I was a bit rude answering to y'all, I was kinda pissed off with the Caution rating.
Merry Christmas to all the MT community

 

[harlan4096]

No prob read this post and the following

RISKY - ichito's setup for Vista

 

[Exterminator]

Secure Windows 10 config! Thanks for sharing it with us