Advanced Plus Security brod's Security Configuration (mid 2018)

[brod56]

Some notes:
- Minimalism is the main focus on the configuration
- Opera is my go-to browser due to being easier on the memory and having a nice UI
- HTTPS Everywhere is not used; I find it mostly pointless these days
- CCleaner is not used; stopped trusting it after the hack controversy (plus having found that the Registry Cleaner has a tendency to break Windows Search)
- Windows Firewall is manually set up to block outbound connections from untrusted apps
- No antiexecutables due to the tweaking of Windows permissions via SysHardener and Configure Defender
- Common sense always comes before any security program.

Any tips are highly appreciated

 

[slash/]

Nice configuration.

 

[Question]

Nice Config!
You can add Tools like CCleaner,WDC (Wise Disk Cleaner) or NepTune

Thanks for sharing

'dopse

 

[brod56]

Nice Config!
You can add Tools like CCleaner,WDC (Wise Disk Cleaner) or NepTune

Thanks for sharing

'dopse

Thanks for the tip. I left CCleaner after the hack controversy, and after having found that the Registry Cleaner breaks Windows Search. I use Windows Disk Cleaner rarely, to free up some space. No performance issues.
EDIT: Just updated the notes to state this.

 

[Question]

Thanks for the tip. I left CCleaner after the hack controversy, and after having found that the Registry Cleaner breaks Windows Search. I use Windows Disk Cleaner rarely, to free up some space. No performance issues.

I think Wise Disk Cleaner is safe. CCleaner is safe too

(You can edit what WDC should Clean)

 

[Ink]

CCleaner is safe too

Safe doesn't mean good.

It has mediocre performance, as I found out just before the announced compromised network controversy. Let's not forget the route Avast will take Piriform products.

 

[LDogg]

Optional software and aspects to add to your config:

Search engine: Change to either Startpage or DuckDuckGo - I hate to see people used for ad profit
Security: NVT OSArmor 1.4 can be supplemented alongside Syshardener & WD
On demand scanner(s): Emsisoft Emegency Kit can go alongside Zemana Portable

Opera extensions you could use:

• Netcraft - comprehensive PUP protection
• uBlock Origin - can be highly customised, low CPU usage, massive help on this forum, AdGuard isn't all all that good privacy wise
• Nano Adblocker w/ Nano Defender - (alternative you could try to the above & AdGuard)
• Cookie Auto-Delete - self explanatory within it's name
• Malwarebytes and/or Windows Defender Browser extension - online threats
• Privacy Possum - does a better job of stopping various referrer headers online
• Install Chrome Extensions - Exactly what it says
• Scriptsafe or Script Defender - manage scripts & privacy globally or per site basis

Rest of your config has the rest of the basics covered, well done for using @Andy Ful configure defender too.

~LDogg

 

[brod56]

Optional software and aspects to add to your config:

Search engine: Change to either Startpage or DuckDuckGo - I hate to see people used for ad profit
Security: NVT OSArmor 1.4 can be supplemented alongside Syshardener & WD
On demand scanner(s): Emsisoft Emegency Kit can go alongside Zemana Portable

Opera extensions you could use:

• Netcraft - comprehensive PUP protection
• uBlock Origin - can be highly customised, low CPU usage, massive help on this forum, AdGuard isn't all all that good privacy wise
• Nano Adblocker w/ Nano Defender - (alternative you could try to the above & AdGuard)
• Cookie Auto-Delete - self explanatory within it's name
• Malwarebytes and/or Windows Defender Browser extension - online threats
• Privacy Possum - does a better job of stopping various referrer headers online
• Install Chrome Extensions - Exactly what it says
• Scriptsafe or Script Defender - manage scripts & privacy globally or per site basis

Rest of your config has the rest of the basics covered, well done for using @Andy Ful configure defender too.

~LDogg

Thank you for the suggestions.
Privacy is not my main concern; I know it's almost inevitable that our data is collected for ads and other reasons. My main concerns are security and convenience. In spite of that, I will take a look at all the extensions you mentioned.
Regarding the scanners, I have seen many tests and sticked with Zemana. Having another one can't hurt, I agree. We all have our paranoid side

 

[TairikuOkami]

Extensions: I would add Avira Browser Safety or at least Netcraft.
That DNS though, I am sure you could do better, much much better.
UltraDNS (Neustar) for starters or 1.1.1.1 or 9.9.9.9, faster and safer.

 

[LDogg]

Extensions: I would add Avira Browser Safety or at least Netcraft.
That DNS though, I am sure you could do better, much much better.
UltraDNS (Neustar) for starters or 1.1.1.1 or 9.9.9.9, faster and safer.

The DNS suggestion I agree with, however with Avira Browser Safety I do not, it's essentially a Hogware, takes up way to much CPU and someone else said on the forum they've seen it take up as much as 600mb. Which is why Malwarebytes Browser Extension or Norton Web Safe/Web Search would more of an ideal extension to use.

~LDogg

 

[TairikuOkami]

however with Avira Browser Safety I do not, it's essentially a Hogware, takes up way to much CPU and someone else said on the forum they've seen it take up as much as 600mb.

Yes, but I think it was running on Chrome. Opera might be different, not to mention, that the leak could be caused by a security software.
I would probably recommend K9 instead, it is better, but it might be too much to handle, rules have to be polished, before it becomes usable.

 

[brod56]

Extensions: I would add Avira Browser Safety or at least Netcraft.
That DNS though, I am sure you could do better, much much better.
UltraDNS (Neustar) for starters or 1.1.1.1 or 9.9.9.9, faster and safer.

I have tested Avira extension a while back and it slowed the navigation a bit too much for me. If I wanted to get a hardened web filtering extension, I'm sure I could use custom uBlock filters and just let it do all the work for me. For now, I'm sticking with the convenience of AdGuard.
About the DNS, I completely agree with you. I only started using a custom DNS recently, and I didn't do a proper research on the best ones yet. Will look into it for sure.

 

[Question]

I have tested Avira extension a while back and it slowed the navigation a bit too much for me. If I wanted to get a hardened web filtering extension, I'm sure I could use custom uBlock filters and just let it do all the work for me. For now, I'm sticking with the convenience of AdGuard.
About the DNS, I completely agree with you. I only started using a custom DNS recently, and I didn't do a proper research on the best ones yet. Will look into it for sure.

With the DNS you can use DNSJumper
You just click test and it find the fastest DNS for you!

Download here: Click Me

 

[brod56]

With the DNS you can use DNSJumper
You just click test and it find the fastest DNS for you!

Download here: Click Me

Thank you for that awesome little tool!
My fastest DNS is Norton ConnectSafe Basic. Any thoughts on it?

 

[Question]

Thank you for that awesome little tool!
My fastest DNS is Norton ConnectSafe Basic. Any thoughts on it?

I think Norton is good. But check for yourself I just used the DNS which is near to me (DNSWatch DE)

 

[Question]

I think Norton is good. But check for yourself I just used the DNS which is near to me (DNSWatch DE)

Ah I found a Thread at MalwareTips: Click Me

 

[oldschool]

Nice & simple config.! @illumination will like it for sure. You might try TinyWall to harden and control WF unless you configure the latter directly. Very lightweight and non-intrusive.

 

[brod56]

Nice & simple config.! @illumination will like it for sure. You might try TinyWall to harden and control WF unless you configure the latter directly. Very lightweight and non-intrusive.

Thanks! TinyWall is now on learning mode, will switch to Normal Mode after using the PC for a couple of days.
EDIT: I ended up playing a bit with Windows Firewall advanced settings instead, guess it does the same

 

[brod56]

UPDATE 1 (15/07/2018)
- Replaced OpenDNS with Norton ConnectSafe DNS
- Added VirusTotal context menu uploader
- Added Emsisoft Emergency Kit and HitmanPro
- Added Process Explorer

 

[Question]

UPDATE 1 (15/07/2018)
- Replaced OpenDNS with Norton ConnectSafe DNS
- Added VirusTotal context menu uploader
- Added Emsisoft Emergency Kit and HitmanPro
- Added Process Explorer

I like your Config very much! You can (optional) use WDC Portable + Privacy Eraser Portable. I think you like it for sure.
Privacy Eraser: Click To Download
Wise Disk Cleaner: Click To Download

You can use your own WDC Settings or my Settings: Click Me

ѕнarιng ιѕ carιng
'[̲̅d̲̅][̲̅o̲̅][̲̅p̲̅][̲̅s̲̅][̲̅e̲̅]