SECURITY: Complete Divine Barakah's Laptop Security Config 2021

Last updated
May 2, 2021
About
Personal, primary device
Additional PC users
Not shared with other users
Desktop OS
Windows 10
OS License Type
Pro
Login security
    • Passwordless (PIN, Biometric, Face)
Primary sign-in
Microsoft account
Primary account rights
Administrator permissions
Other accounts rights
N/A - Single user account
Security updates
Default - allow security updates only
Windows UAC
Maximum - always notify
Network firewall
ISP-issued router w/ firewall & filtering
Real-time protection
Kaspersky Total Security 21.3.10.391(b)
Software firewall
Provided by a third-party security vendor. Refer to 'Real-time protection' for details.
Custom RTP, Firewall and OS settings
- Trust group for applications that could not be added to existing groups (Untrusted).
- Trust group for applications started before startup of Kaspersky Total Security (High restricted).
- Trust digitally signed applications (unticked).
- Disabled Anti Banner.
Malware research
No - malware samples are not downloaded
Periodic scanners
ADW Cleaner
DNS
Cloudflare DNS over HTTPS using Adguard Desktop.
VPN
BULLETVPN
Password manager
Kaspersky Password Manager.
Browsers, Search and Addons
Browsers
  • Microsoft Edge
  • Firefox
  • Vivaldi
Extensions
IDM
  • Mendeley
PC maintenance
Revo Uninstaller Pro Portable
Personal Files & Photos backup
Koofr & Microsoft One Drive
Personal backup routine
Automatic (scheduled)
Device recovery & backup
AOMEI Backupper Pro
Device backup routine
Manual (maintained by self)
PC activity
  1. Working from home. 
  2. Browsing the web. 
  3. Emails. 
  4. Shopping. 
  5. Banking. 
  6. Downloading software. 
  7. Streaming. 
Computer specs
  • Acer Aspire ES1-572-586C
  • Intel Core i5-7200U
  • Intel HD graphics 620
  • Adata 8 GBs RAM
  • Adata Ultimate SU630 480 GBs SSD
Feedback Response

Most critical feedback

Gandalf_The_Grey

Level 46
Verified
Trusted
Content Creator
Apr 24, 2016
3,536
@security123 @Gandalf_The_Grey I installed Brave without admin rights, so is this a security risk? I mean what are the possible scenarios I might run into?
Probably nothing.
It's the same when i try to install software on my work laptop where I have no admin rights, it will be installed only for the current user.
So no problem if you are the only user of your system.
 

Gandalf_The_Grey

Level 46
Verified
Trusted
Content Creator
Apr 24, 2016
3,536
I created a local standard account which I use it to run Office and Mendeley and nothing else. I did not want Brave to be installed there. I wonder if I can install Firefox per user too. Thank btw for answering my questions.
You're welcome, always happy if I can help :D
I think you can do that also for Firefox, just deny admin rights.
There are programs that will fail to install without admin rights there you have no choice.
 

Divine_Barakah

Level 27
Verified
May 10, 2019
1,615
I really love Brave, racked the shields up to max, I no longer use AdGuard for Windows which gives me the the full speed I pay for - Anti-Tracker with IVPN few problems & PC runs great - It ought to be law to use Brave :)
Will I am afraid to install Adguard next to AVG as this might some issues and I really do not have time to deal with issues now.
 

Cortex

Level 26
Verified
Aug 4, 2016
1,512
Will I am afraid to install Adguard next to AVG as this might some issues and I really do not have time to deal with issues now.
The issues I've always had with AdGuard for windows is a cut in internet speed that really is it - all But I really like the speed i pay for but that's just me, & Brave shields do a pretty good job as far as I'm concerned - I feel that's just me but not overly convinced AdGuard for Windows does all they say (prepared for flaming)
 

oldschool

Level 59
Verified
Mar 29, 2018
4,807

oldschool

Level 59
Verified
Mar 29, 2018
4,807
brave://flags
Capture.PNG
 

silversurfer

Level 71
Verified
Trusted
Content Creator
Malware Hunter
Aug 17, 2014
6,026
I installed Brave without admin rights, so is this a security risk? I mean what are the possible scenarios I might run into?

System space (folders of program files, Windows folder.) is protected by UAC, malware haven't easily access to this area of the system, especially if your are using SUA (Standard User Account) instead of admin account.

User space isn't protected by UAC, it's system area like C:\Users\username\AppData\Local there usually the payloads are spawned/dropped by malware.

Conclusion: for security reasons it's always recommended to install your browsers into C:\Program Files
 

Divine_Barakah

Level 27
Verified
May 10, 2019
1,615
Recent changes:

- Installed Bullguard Internet Security
- Replaced Mendeley with Zotero
- Started using Revo Uninstaller Pro
- Replaced Enpass with Sticky Password.

Sticky Password is working on a "big feature", as they described it and I am wondering what that would be. Anyway, SP now officially supports Brave Browser. I only wish if it has in-built OTP generator. I might start using Authy or FREEOTP. Any thoughts on this?
 
Top