Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 758637" data-attributes="member: 32260">All three solutions can be good if the user knows the weak points of adopted security and does not expose them via vulnerable activities.For example, the user on the well updated Windows 10 can be very secure with AV, if he:<ul>
<li data-xf-list-type="ul">uses apps in App Container for vulnerable activities (web browsing, viewing/editing documents, etc.);</li>
<li data-xf-list-type="ul">installs only applications accepted by SmartScreen (EXE, MSI installers) downloaded via the web browser to the NTFS hard disk;</li>
<li data-xf-list-type="ul">does not open files with vulnerable/unknown extensions;</li>
<li data-xf-list-type="ul">avoids spam and think twice before opening e-mail attachments;</li>
<li data-xf-list-type="ul">uses safe DNS service;</li>
<li data-xf-list-type="ul">uses &#039;Public network&#039; profile;</li>
<li data-xf-list-type="ul">uses the separate account for shopping.</li>
</ul>The above is not a rocket science, so most MalwareTips readers can learn/adopt it quickly.Personally, I would like to vote for AV with fast signatures + smart default-deny. The word &#039;smart&#039; means that executing the new files is disabled by default except for some whitelisted locations and application installers which are forced to be always checked by the good application reputation service (like SmartScreen).</blockquote>

[QUOTE="Andy Ful, post: 758637, member: 32260"] All three solutions can be good if the user knows the [COLOR=rgb(184, 49, 47)][B]weak points[/B][/COLOR] of adopted security and does not expose [B][COLOR=rgb(184, 49, 47)]them[/COLOR][/B] via vulnerable activities. For example, the user on the well updated Windows 10 can be very secure with AV, if he: [LIST] [*]uses apps in App Container for vulnerable activities (web browsing, viewing/editing documents, etc.); [*]installs only applications accepted by SmartScreen (EXE, MSI installers) downloaded via the web browser to the NTFS hard disk; [*]does not open files with vulnerable/unknown extensions; [*]avoids spam and think twice before opening e-mail attachments; [*]uses safe DNS service; [*]uses 'Public network' profile; [*]uses the separate account for shopping. [/LIST] The above is not a rocket science, so most MalwareTips readers can learn/adopt it quickly. Personally, I would like to vote for AV with fast signatures + smart default-deny. The word 'smart' means that executing the new files is disabled by default except for some whitelisted locations and application installers which are forced to be always checked by the good application reputation service (like SmartScreen). [/QUOTE]

Verification