Advanced Plus Security (From forum thread)Divine_Barakah's PC Security Config

[Divine_Barakah]

It was a nightmare. The latest Windows build caused major issues. First, the Control Vault Firmware driver got stuck and kept asking for a system restart and no matter how many times I restarted the system it never worked.

The fingerprint sensor and facial recognition broke as a result.

I resetted bios settings and cleared tpm and then reinstalled Windows. This time I created a local Windows account. I downloaded my drivers from Dell Supoort on my second laptop and manually installed them one by one.

Now everything seems to be running well. I created a full system backup using Diskimage and I will configure my system.

 

[Divine_Barakah]

Currently running MD on default settings.
OSArmor with my own rules
Installed WFC and sat the profile to medium and applied WFC recommended rules. I enabled notifications and enabled secure boot to block internet access at startup.

Now I am using Adguard DNS over HTTPS systemwide and in browser settings.

Using Password Boss web app in an isolated user-defined Vivaldi profile with a desktop shortcut. The isolated profile is store in Appdata and clearing vivaldi data does not clear the isolated profile data (to avoid having to sign in each time I use Password Boss.

Installed Nanazip using winget. I ditched Peazip and it drives OSA crazy. I could have whitelisted it, but chose Nanazip as it is signed.

Installed my copy of Microsoft Office 2024 Standard LTSC.

------------------------------------------------------------------------------------

I still have not decided what protection extension to install.

Currently running Vivaldi as my default browser, Waterfox as a secondary browser, and Helium as a playground.

 

[Victor M]

Protection extension wise, I like SafeToOpen. It is AI based as I am told, and it can recognize fake login sites. It found a fake bank login site for me.

 

[Divine_Barakah]

Protection extension wise, I like SafeToOpen. It is AI based as I am told, and it can recognize fake login sites. It found a fake bank login site for me.

I will check it out. How is it privacy-wise?

 

[Divine_Barakah]

I will check it out. How is it privacy-wise?

I am not sure I should trust this extension with this amount of permissions it requires. I will pass.

 

[Divine_Barakah]

Adguard DNS settings.

 

[SeriousHoax]

Adguard DNS settings.
View attachment 299486View attachment 299487

You should add one of Hagezi's Pro filters.

 

[Divine_Barakah]

You should add one of Hagezi's Pro filters.

It is on my to-do list, but I need to experiment with it first. Usability is my top priority.

 

[SeriousHoax]

It is on my to-do list, but I need to experiment with it first. Usability is my top priority.

Ok. Start with Pro++, only downgrade if it breaks something. It doesn't break anything for me. I had more false positives with OISD, although rare.

 

[Divine_Barakah]

Uninstalled WFC. I am pretty sure MB is gonna kill it or make it paid very soon.

I installed Tinywall.

 

[AFEH]

Uninstalled WFC. I am pretty sure MB is gonna kill it or make it paid very soon.

I installed Tinywall.

Simplewall has notifications.

 

[Divine_Barakah]

Simplewall has notifications.

I have used Simplewall before, but it seems it is dead.

GitHub - henrypp/simplewall: Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer. - henrypp/simplewall

github.com

There are 141 open issues.

Edit:

Tinywall, on the contrary, is actively maintained and the developer responded to each of the open 31 issues on Github

 

[AFEH]

dead

 

[Divine_Barakah]

View attachment 299489

The latest stable release was a year ago.

 

[AFEH]

The latest stable release was a year ago.

Firewall, if working properly, does not need frequent updates.
Actually the frequent updates of WFC looks like it has so many bugs.

 

[Divine_Barakah]

Firewall, if working properly, does not need frequent updates.
Actually the frequent updates of WFC looks like it has so many bugs.

What about the 161 open issues on Github?

 

[AFEH]

What about the 161 open issues on Github?

I had no issues while using Simplewaal or Fort firewall; only WFC gave me issues.

 

[Divine_Barakah]

I had no issues while using Simplewaal or Fort firewall; only WFC gave me issues.

Did you still need to disable Windows core security to use Fort Firewall?

 

[AFEH]

Did you still need to disable Windows core security to use Fort Firewall?

I do not have core isolatation options, except for those

 

[Divine_Barakah]

I do not have core isolatation options, except for those

View attachment 299493

I believe it is the second setting. If you enable it, you won't be able to use Fort Firewall.