Windows_Security
Level 24
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
- Mar 13, 2016
- 1,298
Chrome (or Chromium in my case link) profiles were originally developed so different users on a shared PC could personalize their browser (settings, extensions and themes). When you add a 'person' to the Chrome's people list (settings) Chrome offers the option to generate a link/short-cut.
I use two different profiles (with two different short-cut's on the taskbar), one starting incognito mode and running in normal mode:
Incognito profile:
- has scriptsafe with all fingerprinting protection enabled and blocking third-party scripts (respect same-domain loose)
- set home page to startpage.com
- does not shows bookmarks bar
- blocks third party cookies
Normal browsing profile
- has extensions blank new tab and avira browser safety
- set homepage to google.nl
- does show bookmarks bar
On my wife's laptop I have copied the CHROME.exe executable and renamed it CHROMIUM.exe. This CHROMIUM.exe is sandboxed by Pumpernickel and is only allowed to change the *\Chromium\* folders (block rule *chromium.exe>* and allow rule !C:\*\Chromium\*>*\Chromium\* ). MemProtect cages the (Chromium) directory which both CHROME.exe and CHROMIUM.exe are in (block rule *\Chromium\*>* and allow rule !C:\*\Chromium\*>*\Chromium\* ).
note: MemProtect causes zero delay because it uses a build-in Windows protection feature, while Pumpernickel delays the startup of Chromium with a whopping 0.125 seconds, that is why only the incognito (CHROMIUM.exe) is sandboxed by Pumpernickel. Because I use the UAC tweak to block unsigned elevation CHROME.exe of Chromium authors is unsigned, so can't touch Windows and Program files folders.
I know I have a compulsive disorder to tune and speedup everything, from PC's to Motor bikes.
I use two different profiles (with two different short-cut's on the taskbar), one starting incognito mode and running in normal mode:
Incognito profile:
- has scriptsafe with all fingerprinting protection enabled and blocking third-party scripts (respect same-domain loose)
- set home page to startpage.com
- does not shows bookmarks bar
- blocks third party cookies
Normal browsing profile
- has extensions blank new tab and avira browser safety
- set homepage to google.nl
- does show bookmarks bar
On my wife's laptop I have copied the CHROME.exe executable and renamed it CHROMIUM.exe. This CHROMIUM.exe is sandboxed by Pumpernickel and is only allowed to change the *\Chromium\* folders (block rule *chromium.exe>* and allow rule !C:\*\Chromium\*>*\Chromium\* ). MemProtect cages the (Chromium) directory which both CHROME.exe and CHROMIUM.exe are in (block rule *\Chromium\*>* and allow rule !C:\*\Chromium\*>*\Chromium\* ).
note: MemProtect causes zero delay because it uses a build-in Windows protection feature, while Pumpernickel delays the startup of Chromium with a whopping 0.125 seconds, that is why only the incognito (CHROMIUM.exe) is sandboxed by Pumpernickel. Because I use the UAC tweak to block unsigned elevation CHROME.exe of Chromium authors is unsigned, so can't touch Windows and Program files folders.
I know I have a compulsive disorder to tune and speedup everything, from PC's to Motor bikes.
Last edited: