Advanced Security Divine Barakah's PC Security Config 2024

[Jan Willy]

I'm using Hagezi Multi Pro++

In my eyes this one is the best all-in-one solution on DNS level. No need for other filterlists. If you only want to block ads or trackers, there are other options.

 

[oldschool]

You would probably still need to set your DNS manually on your Chromium browser because it has an issue of not recognizing Windows's native DoH. Different yet similar issue was present in Firefox also until their latest version, 129.

I'm not so sure, at least not the way I configured it in Windows. I used the instructions on the website and it shows my device using NextDNS as "All good!". BTW, I used both IPv6 and IPv4 (with Linked IP).

 

[Divine_Barakah]

I'm not so sure, at least not the way I configured it in Windows. I used the instructions on the website and it shows my device using NextDNS as "All good!". BTW, I used both IPv6 and IPv4 (with Linked IP).

Yes I am using NextDNS with the built-in Windows 11 settings. No issues. I was talking about NextDNS app which caused Mr issues.

 

[SeriousHoax]

I'm not so sure, at least not the way I configured it in Windows. I used the instructions on the website and it shows my device using NextDNS as "All good!". BTW, I used both IPv6 and IPv4 (with Linked IP).

That's plain DNS, right? Not DNS Over HTTPS. If DoH is configured i Windows the way I mentioned in my previous comment, then Chromium browsers (Edge in my case) don't recognize it and use my router DNS instead. There was a DNS related chrome://flag that needed to be disabled for it to work. That flag was later deleted (haven't checked since then). I should find it if I search online since that's how I learned about this issue back then.
Anyway, I'm using AdGuard DNS at the moment for browsers (NextDNS for Windows) since it's giving me slightly better ping and I can also add Hagezi Threat Intelligence which NextDNS hasn't added.
Also, there is the Yogadns app that one can use which just works and you can even use DNS over QUIC which theoretically is slightly faster than DoH including DNS over HTTP/3 which is based on QUIC protocol.

 

[oldschool]

That's plain DNS, right? Not DNS Over HTTPS.

AFAIK it's DOH. Windows shows DNS as encrypted. BTW, I have Edge and Brave policies set so I had to configure DNS via Windows settings.

 

[Divine_Barakah]

That's plain DNS, right? Not DNS Over HTTPS. If DoH is configured i Windows the way I mentioned in my previous comment, then Chromium browsers (Edge in my case) don't recognize it and use my router DNS instead. There was a DNS related chrome://flag that needed to be disabled for it to work. That flag was later deleted (haven't checked since then). I should find it if I search online since that's how I learned about this issue back then.
Anyway, I'm using AdGuard DNS at the moment for browsers (NextDNS for Windows) since it's giving me slightly better ping and I can also add Hagezi Threat Intelligence which NextDNS hasn't added.
Also, there is the Yogadns app that one can use which just works and you can even use DNS over QUIC which theoretically is slightly faster than DoH including DNS over HTTP/3 which is based on QUIC protocol.

Yes I have it configure as DoH in Windows settings. I also added NextDNS in each browser with the name of the browser at the end of the custom link so that I can see the logs for each browser on my NextDNS dashboard.


Everything is running flawlessly.

 

[Divine_Barakah]

- Removed Malwarebytes Premium
- Installed Emsisoft Business Security
- Disabled Fast Startup.

 

[Divine_Barakah]

I was installing BulletVPN and Emsisoft's BB blocked the installation. On Emsisoft Security Dashboard, it showed that BulletVPN setup file was signed with an invalid digital signature!

 

[Divine_Barakah]

I have not experienced any major issues while using MB Premium for quite a long time. I changed to Emsisoftt for the sake of change.

What I like about Emsisoft:

1- Clean interface
2- No bloatware
3- I keep my laptop running most of the time and Emsisoft's Online Dashboard keeps me updated all the time.
4- Support. Emsisoft's support is very fast and helpful. Probably one of the best out there.
5- Files can be manually added to Emsisoft's quarantine and you can rescan the added files after signature updates.
6- Very fast scans
7- Scan levels can be adjusted.
8- Detailed logs of security incidents
9- Privacy. Emsisoft is one of the few privacy-respecting companies.

What I dislike

1- High ram consumption (ranging from 600 to 900 MBs)
2- Very high FPs rates, but their cloud whitelist helps with that. I rarely install anything without getting prompts from Emsisoft's BB
3- Pricing. Emsisoft is not cheap as other products especially if you want to cover the whole household devices.
4- It slows down file copying and file explorer.

 

[Divine_Barakah]

-Removed Emsisoft Business Security
- Installed Webroot Internet Security

 

[lyldz]

The forum has not seen such a fundamental change in a long time.congrat

 

[Divine_Barakah]

The forum has not seen such a fundamental change in a long time.congrat

I kept receiving emails from Webroot begging me to install their software. So I did. I hope I don't regret it.

I have 350 days remaining in my license.

 

[Divine_Barakah]

After I installed Webroot, I tested it with AMTSO tests and everything was blocked. One thing that caught my eyes was the fact that Webroot did not scan the system after the detections. Did that change in Webroot? I remember when Webroot detected anything, it ran a system scan, but not anymore?

 

[Studynxx]

I would not ever use Biometrics, they're too easy to circumvent. Use a strong password unironically.

 

[Divine_Barakah]

I would not ever use Biometrics, they're too easy to circumvent. Use a strong password unironically.

My sensitive files are stored in an encrypted Cryptomator vault. I use Windows Hello Pin for convenience.

 

[Studynxx]

My sensitive files are stored in an encrypted Cryptomator vault. I use Windows Hello Pin for convenience.

Ah I see. Okay then

 

[root.]

Give this a shot, GitHub - intika/Librefox: Librefox: Firefox with privacy enhancements.

I recommend you remove all the overhead from system-wide and browser private DNS, and killswitch your BulletVPN with NextDNS upstream.

 

[Divine_Barakah]

Give this a shot, GitHub - intika/Librefox: Librefox: Firefox with privacy enhancements.

I recommend you remove all the overhead from system-wide and browser private DNS, and killswitch your BulletVPN with NextDNS upstream.

I am now in Egypt and I cannot connect to any VPN. All VPN providers are blocked, Opera browser is blocked, Avast is blocked. I am in contact with BulletVPN support and they provided me with an obfuscated Wireguard profile, but still it did not work. I have provided them with logs and they are looking for a solution.

I am also experiencing issues in connecting to Signal servers.

 

[Divine_Barakah]

- Restored a clean system image.
- Installed BDTS 90-day trial

I let BD run system assessment scan and allowed it to update itself. I ran a full system scan and rebooted the system. The system is snappy and everything is working as expected.

I noticed one issue. When I ran the phishing page (AMTSO), BD did not block the page (in Vivaldi). I had to install BD Trafficlight extension. BD managed to block all the other AMTSO tests.

 

[Divine_Barakah]

Ram usage of BDTS