Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 759122" data-attributes="member: 32260">It would be hard for many beginners to safely use default-deny setup. The exception could be the people who do not install new applications. Also in some cases, the configuration of default-deny setup may be hard even for more experienced users, especially when they use programs installed in the Userspace or external devices which run configuration/diagnostic/update scripts. Also, some web browser extensions and wrapped applications can cause problems in default-deny setup.The best for beginners would be smart default-deny setup (based on file reputation), supervised occasionally by the advanced user.If the beginners (in the home environment with well-updated system/software) use smart default-deny with blocked scripts and disabled active content for documents, then the chance to be infected is very very small. When using only AV solution, many infections are removed only partially. The chance of it is probably much greater than being infected when using smart default-deny.</blockquote>

[QUOTE="Andy Ful, post: 759122, member: 32260"] It would be hard for many beginners to safely use default-deny setup. The exception could be the people who do not install new applications. Also in some cases, the configuration of default-deny setup may be hard even for more experienced users, especially when they use programs installed in the Userspace or external devices which run configuration/diagnostic/update scripts. Also, some web browser extensions and wrapped applications can cause problems in default-deny setup. The best for beginners would be smart default-deny setup (based on file reputation), supervised occasionally by the advanced user. If the beginners (in the home environment with well-updated system/software) use smart default-deny with blocked scripts and disabled active content for documents, then the chance to be infected is very very small. When using only AV solution, many infections are removed only partially. The chance of it is probably much greater than being infected when using smart default-deny. [/QUOTE]

Verification