Advanced Plus Security DJPanda's 2021 Security Configuration

Last updated
Jun 18, 2021
How it's used?
For home and private use
Operating system
Windows 10
On-device encryption
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
User Access Control
Always notify
Smart App Control
Network firewall
Real-time security
Windows Defender
Firewall security
Microsoft Defender Firewall
About custom security
Windows Security - Download and Opening apps both set to Block
AndyFulConfig Defender - High settings
Periodic malware scanners
Malwarebytes Anti-Malware Premium (Lifetime)
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
Firefox (Primary)
* Bitwarden
*AdGuard Browser Assistant
*Free Download Manager
*SponserBlock
Secure DNS
AdGuard
Desktop VPN
None
Password manager
Bitwarden
Maintenance tools
BleachBit
File and Photo backup
MEGA
Google Drive
Dropbox
PCloud
1TB External HD
System recovery
Windows Recovery
Macrium Reflect (rarely)
Risk factors
    • Browsing to popular websites
    • Browsing to unknown / untrusted / shady sites
    • Opening email attachments
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Gaming
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Streaming audio/video content from shady sites
What I'm looking for?

Looking for medium feedback.

Nice config, but I would recommend using Hard_Configurator to harden OS + Firewall (Configure Defender included). Also, why are you using UBlock Origin while using Adguard Windows?
 
  • Like
  • +Reputation
  • Applause
Reactions: Nevi, Venustus, Cortex and 5 others
DJ Panda said:
Hello everyone,

Here is my 2021 config, Not much has changed, though I did buy and are currently using AdGuard. Any feedback would be appreciated,

Thanks! :)
Click to expand...
If you are using AdGuard I don't think you should also use uBlock Origin. One adblocker should be enough.
Maybe you can have a look at Simple Windows Hardening also from @Andy Ful to harden your system:
github.com

Hard_Configurator/Simple Windows Hardening at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator
github.com github.com
 
  • Like
  • Applause
  • +Reputation
Reactions: sg09, Nevi, Venustus and 6 others
Yeah, thanks. I think the reason why I had added UBlock was that AdGuard either broke a site or didn't start. At one point WD refused to update AdGuard as well. I'll see if hard config works.
 
  • Like
Reactions: Nevi, Venustus, Cortex and 5 others
DJ Panda said:
Yeah, thanks. I think the reason why I had added UBlock was that AdGuard either broke a site or didn't start. At one point WD refused to update AdGuard as well. I'll see if hard config works.
Click to expand...
Personally I prefer uBlock Origin on my laptop and use AdGuard on my Android phone and iPad.
 
  • Like
Reactions: Nevi, sirius777, Venustus and 6 others
FireHammer said:
Hey, I have a personal question: is Ublock Origin better than AdGuard(system-wide) on Windows if you have Chrome as primary.?:unsure:
Click to expand...
This is of course also personal. Both are great and AdGuard is system wide, but I prefer no root certificate and the better speed and more info what's connected plus the advanced blocking modes from uBlock Origin. IMO AdGuard is more set and forget and uBlock Origin more for people who want to tinker and get the most speed out of things. System wide adblocking can also (partly) be accomplished by using an adblocking DNS server.
github.com

Blocking mode

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean. - gorhill/uBlock
github.com github.com
malwaretips.com

New Update - uBlock0rigin in Medium mode for Lighter and Stronger Protection, with Less websites breakage and hassle

Why a seperate thread? I got a few questions of the uB0 settings I posted in Old School's uB0 tips and tricks. In stead of stealing that thread I thought it might be better to create a new thread to explain these settings. I also got a question how to apply this on other browsers, so I left out...
malwaretips.com malwaretips.com
 
Last edited:
  • +Reputation
  • Like
  • Thanks
Reactions: Nevi, sirius777, Venustus and 6 others
FireHammer said:
Thanks for answering @Gandalf_The_Grey, I will stick with Adguard because it suits my needs right now, but I also have Adguard DNS filtering, is that OK, this is both on Windows & Android? o_O
Click to expand...
If you use the Windows version you don't need to set Adguard DNS as DNS provider, as it blocks ads systemwide anyway. If you want to get ads blocked across multiple devices, you could set Adguard DNS on a router level and take another DNS provider like Cloudflare or Quad9 in the Adguard Windows app.
 
  • Like
  • Thanks
Reactions: FireHammer, Nevi, Jan Willy and 6 others
DJ Panda said:
What would you guys recommend privacy wise? Are Privacy Possum or HTTPS Everywhere good? Any other suggestions?
Click to expand...
Privacy Possum is outdated and HTTPS Everywhere is redundant as it got integrated into Firefox pretty recently. (You can find HTTPS-Only-Mode in the privacy settings)
Just use the built in tracking protection and set it to strict and maybe add LocalCDN or Decentraleyes. More "privacy" addons won't make you more private. :)
 
  • Like
Reactions: shukla44, RXZ6Q, Gandalf_The_Grey and 7 others
FireHammer said:
Thanks for answering @Gandalf_The_Grey, I will stick with Adguard because it suits my needs right now, but I also have Adguard DNS filtering, is that OK, this is both on Windows & Android? o_O
Click to expand...
Yes, if it works for you its ok to use AdGuard DNS filtering on Windows and Android. I have it on Android because of the new the new DNS-over-QUIC protocol. On iOS and iPadOS you need it for systemwide adblocking.
adguard.com

AdGuard DNS-over-QUIC

A unique opportunity for AdGuard users to be among the first to try out new technology of DNS-over-QUIC — a secure and reliable protocol designed specifically for the modern-day Web.
adguard.com adguard.com
 
  • Like
  • Thanks
Reactions: Nevi, DJ Panda, Protomartyr and 4 others
DJ Panda said:
What would you guys recommend privacy wise? Are Privacy Possum or HTTPS Everywhere good? Any other suggestions?
Click to expand...
With AdGuard Stealth Mode and Firefox HTTPS-Only Mode there is no need for those extensions:

Tracking protection (formerly Stealth Mode) | AdGuard Knowledge Base

Many websites gather information about their visitors, including their IP address, installed browser and operating system, screen resolution, and even the page from which they were redirected. Some web pages use cookies to mark your browser and save your settings and preferences, or to...
kb.adguard.com kb.adguard.com

HTTPS-Only Mode in Firefox | Firefox Help

Learn more about HTTPS-Only Mode which forces all connections to websites to use HTTPS.
support.mozilla.org support.mozilla.org
 
  • Like
Reactions: Nevi, DJ Panda, Protomartyr and 3 others
Gandalf_The_Grey said:
With AdGuard Stealth Mode and Firefox HTTPS-Only Mode there is no need for those extensions:

Tracking protection (formerly Stealth Mode) | AdGuard Knowledge Base

Many websites gather information about their visitors, including their IP address, installed browser and operating system, screen resolution, and even the page from which they were redirected. Some web pages use cookies to mark your browser and save your settings and preferences, or to...
kb.adguard.com kb.adguard.com

HTTPS-Only Mode in Firefox | Firefox Help

Learn more about HTTPS-Only Mode which forces all connections to websites to use HTTPS.
support.mozilla.org support.mozilla.org
Click to expand...
Would you say that your statement is also true for Chrome? Thank you kindly.
 
  • Like
Reactions: Nevi and Venustus
You must log in or register to reply here.

You may also like...