Serious Discussion Build the MOST secure setup with ONLY 3 tools

For novice or average users, the best baseline setup is to stick with the default Windows security settings, install uBlock Origin Lite on their browser, and help them pick and set up a reliable password manager.

On top of that, it's a great idea to share a few quick tips on everyday habits, like making sure they back up their files and taking a second to double-check links before clicking.

Implementing measures beyond this baseline introduces unnecessary friction and risks security fatigue, significantly reducing the likelihood of long-term user compliance.
 
  • Like
Reactions: piquiteco, Sorrento, Zartarra and 2 others
Divergent said:
For novice or average users, the best baseline setup is to stick with the default Windows security settings, install uBlock Origin Lite on their browser, and help them pick and set up a reliable password manager.

On top of that, it's a great idea to share a few quick tips on everyday habits, like making sure they back up their files and taking a second to double-check links before clicking.

Implementing measures beyond this baseline introduces unnecessary friction and risks security fatigue, significantly reducing the likelihood of long-term user compliance.
Click to expand...

I thought the question was how to protect Windows, not how to protect a browser. Ublock origin and Bitwarden will not prevent malware, or infections of any kind because they only effect the browser. Even worse, MV2 is larely going away and will make uBo irrelevant.
 
  • Like
Reactions: Sorrento, Zero Knowledge, RoboMan and 2 others
n8chavez said:
I thought the question was how to protect Windows, not how to protect a browser. Ublock origin and Bitwarden will not prevent malware, or infections of any kind because they only effect the browser. Even worse, MV2 is larely going away and will make uBo irrelevant.
Click to expand...
A few quick clarifications. First, I specifically recommended uBlock Origin Lite, which is built entirely on Manifest V3, so the MV2 phase-out doesn't impact it. Second, the original prompt explicitly stated, 'An extension counts as a tool.'

Finally, this was answering the bonus prompt for non-technical family members. For an average user, the browser is the primary attack vector. Blocking malvertising, malicious scripts, and phishing attempts at the browser level, before they ever reach the OS, while letting Windows Defender handle the baseline executable scanning is by far the most practical defense.
 
  • Like
Reactions: piquiteco, Sorrento and RoboMan
n8chavez said:
Ublock origin and Bitwarden will not prevent malware, or infections of any kind because they only effect the browser
Click to expand...
If not using cracked software and only donwloading software from official websites, I'm only left with browser to get infected (phishing, malvertisement, ...).

NB: not using someone else usb storage units.
 
  • Like
Reactions: Sorrento, Zero Knowledge and RoboMan
Divergent said:
A few quick clarifications. First, I specifically recommended uBlock Origin Lite, which is built entirely on Manifest V3, so the MV2 phase-out doesn't impact it. Second, the original prompt explicitly stated, 'An extension counts as a tool.'

Finally, this was answering the bonus prompt for non-technical family members. For an average user, the browser is the primary attack vector. Blocking malvertising, malicious scripts, and phishing attempts at the browser level, before they ever reach the OS, while letting Windows Defender handle the baseline executable scanning is by far the most practical defense.
Click to expand...

I hope you're right, and that the only thing that can access any external data and also access your system is the browser. The, and only then, will you be covered.
 
  • Like
Reactions: Sorrento, Zero Knowledge, RoboMan and 1 other person
n8chavez said:
I hope you're right, and that the only thing that can access any external data and also access your system is the browser. The, and only then, will you be covered.
Click to expand...
This is the most realistic setup for standard, non-technical users without their own personal admin. It has a proven track record, I’ve configured several novices this way over the years, and regular check-ins confirm they’ve remained 100% virus-free. While I know this forum loves a bulletproof, overkill approach and agonizing over endless 'what-ifs,' this simple method actually works perfectly fine in the real world.
 
  • Like
Reactions: Sorrento, Zero Knowledge and piquiteco
So, every product that exists other that at the browser chokepoint is snake oil? If browser security was the only way to get your system messed up there you be no need for anything else. Oh wait. That's noy true. Well it's not like Microsoft uses a basis of a browser that it makes into its OS, regardless of what browser the user chooses to use. Oh wait. It's not like email isn't going to be affected by uBo. Oh wait. It's not like infected USB drives could ever infect a system. Oh wait. It's not like anyone could ever wardrive a network. Oh wait.

The point being, there are many ways that a system can be messed up. There is no one single chokepoint, and assuming there is a single entry point is foolish
 
  • Like
Reactions: Sorrento, piquiteco, Zero Knowledge and 1 other person
When you look how many times SWH / HardConfigurator / ConfigureDefender is mentioned to up/increase security without losing usability or limiting functionality, I would like to thank @Andy Ful for supplying so simple yet so effective tools to unleash the build-in security of Windows 👏👏👏👏👏 (five out of five thank you ;) Andy)
 
  • Like
  • Love
  • Applause
Reactions: rashmi, Andy Ful, piquiteco and 9 others
RoboMan said:
Hello friends! Imagine money isn't an issue (if applicable).

Let’s make this interesting:

You can only use 3 security tools total to protect a Windows system.

Rules:
  • No overlapping functions (e.g., 2 AVs, 2 firewalls, etc.)
  • Must cover real-world threats (malware, phishing, exploits, etc.)
  • Usability matters (this is for daily use, not a lab setup)
  • An extension counts as a tool in this scenario
What’s your 3-tool setup, and why?

----------------------------------

Bonus: now downgrade your setup for a non-technical user (family member). What changes?
Click to expand...
1) Carton Box to house the Windows PC
2) Safe to store it
3) profit

Each morning I drink instant coffee to have enough energy to make regular coffee.
 
  • HaHa
  • Like
  • Sad
Reactions: Dave Russo, piquiteco, Parkinsond and 4 others
At the moment:

An ASUS router with Trend protection (helps a little)
Nord with Crowdstike - Helps somewhat?
McAfee - Helps a lot
Images on external drives helps very much (as proven recently)
Myself: don't do stupid things (helps a lot)
Ublock helps lots

BTW: If you use Windows Pro save your save Bit-locker key's on more than one USB :)

Can't do three sorry ..

Edit: Read posts on M-tips helps lots! & don't block users because they annoy you once, they may be right :LOL:
 
Last edited:
  • Like
  • Applause
Reactions: rashmi, Parkinsond, lokamoka820 and 1 other person

You may also like...