Sure I will send you the list or rules when I get back home.
Divine_Barakah's PC Security Config 2026
- Thread starter Divine_Barakah
- Start date
I will be very surprised if you don't have issues with the WRDATA folder growing in size, IMHO its the largest flaw in Webroot, I will watch this thread with interest as each time I've used WR I have had issues with that folder growing, however I may well be wrong as my wife often says 
You're wife is wiseI will be very surprised if you don't have issues with the WRDATA folder growing in size, IMHO its the largest flaw in Webroot, I will watch this thread with interest as each time I've used WR I have had issues with that folder growing, however I may well be wrong as my wife often says
I am monitoring it and I will keep sharing insights.
Thank you for going out of your way ,I appreciate your help,thank you again
The question to ask is not 'what if I one day use a program that does this? Then I should not checkmark this ...." . The question to ask is "this should never happen normally. So I should checkmark this." E.g. Hackers like to fool around with processes that have System rights and exploit them so it does things they want, because SYSTEM rights allow them to do ANYTHING. So a process with SYSTEM rights should never be running an unsigned program, because Windows does not do this.
Last edited:
As far as I know not everything inside Windows is digitally signed, but what we can do is never give full trust to digitally signed applications.
Kaspersky has this option.
As I mentioned before, my aim is to achieve a balance between security and usability. I am an academic not a security researcher. This is my production machine and I use it to write research papers. I believe my current config is more than adequate.
I have spent more than 12 hours yesterday reading OSA documentation and consulting AI to build the list of block rules.
You know if you repeatedly tell AI that security is less important than usability the AI will obey you and give you a less secure config. But then some of those rules are preparing you to go to war
My preferred security tool is WDAC. There is no debate on which rules to turn on. You make a whitelist of apps on your machine and from then on, only those apps plus windows will run. Malware and other foreign software will fail - a good portion of the problem is gone. It is built into Windows, and the tools are free.
My preferred security tool is WDAC. There is no debate on which rules to turn on. You make a whitelist of apps on your machine and from then on, only those apps plus windows will run. Malware and other foreign software will fail - a good portion of the problem is gone. It is built into Windows, and the tools are free.
Last edited:
Nah that's not how I do it. I don't ask AI to tell me what to do. I consult documentation. I see what other users are saying. Then I ask AI to clarify what the rule does. Then I try it and decide for myself to see if suits me.You know if you repeatedly tell AI that security is less important than usability the AI will obey you and give you a less secure config. But then some of those rules are preparing you to go to war
Go to war? So be it hahahahha
For some reason. When I tried to post my rules, MT ran into issue, so I posted them in a screenshot.
One more update
The rule to block unsigned processes in AppData, tmp, or Downloads causes every single unsigned application installer to fail such as MusicBee, ABDownload Manager and Peazip.
The rule to block unsigned processes in AppData, tmp, or Downloads causes every single unsigned application installer to fail such as MusicBee, ABDownload Manager and Peazip.
One more update
Now I am syncing my Enpass vault to my Koofr account via WebDav. This is convenient. But to increase security I am protecting my Enpass vault with a local keyfile that I do not sync to Koofr. It is strictly kept offline.
I wanted to use Sticky Password and use WiFi sync, but unfortunately Sticky Password does not feature custom fields nor allow me to store TOTP.
One more advantage for Enpass is the fact it supports Linux. I plan to install KaOS on my Thinkpad.
Now I am syncing my Enpass vault to my Koofr account via WebDav. This is convenient. But to increase security I am protecting my Enpass vault with a local keyfile that I do not sync to Koofr. It is strictly kept offline.
I wanted to use Sticky Password and use WiFi sync, but unfortunately Sticky Password does not feature custom fields nor allow me to store TOTP.
One more advantage for Enpass is the fact it supports Linux. I plan to install KaOS on my Thinkpad.
Now my config is officially extensions-free. I do not have a single extension installed on any of my browsers.
