Reply to thread

Message

<blockquote data-quote="Deleted member 178" data-source="post: 738916">Indeed and then we are back to the same old principle that made Windows a failure security wise:- sacrificing security for convenience.As a very old Shadow Defender user, i will tell you how i use SD on boot:Usually i couple&nbsp; it with an anti-exe or SRP or any anti-logger (since most like SpS or ZAL usually have some sort of HIPS) to prevent keyloggers and other malware.1- SD is set on boot (all partitions) for non-admin task (aka surfing, watching movies, torrenting, etc...). So clean system every boot.- for admin task (updating the OS), i reboot once (restoring a clean system), get out SD mode &gt; update &gt; turn SD On when done.(this is the only moment the system isn&#039;t protected by SD and i don&#039;t connect anything to the net.)2- i never but never commit changes (this is the weakness to me),- if i want save some docs/files , i check them with any OD scanners or VT Uploader and save them to any cloud.- if in use a External drive, i use one that was only plugged to my clean system.- USB contents from other machines are checked, then if clean, i copy the content to the cloud, unplug the USB,&nbsp; then i reboot SD again to be sure.By doing this normally, you are on a clean system every boot, ext-drive is clean, USBs are clean, files are clean.of course those steps are not so &quot;convenient&quot; but personally i wont sacrifice security to save some clicks.if you work on personal content, you must reboot to load a clean system. Sandboxie is useless then.Now i don&#039;t say you shouldn&#039;t use Sbie with SD, but i find the combo redundant. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="Deleted member 178, post: 738916"] Indeed and then we are back to the same old principle that made Windows a failure security wise: - sacrificing security for convenience. As a very old Shadow Defender user, i will tell you how i use [B][U]SD on boot[/U][/B]: Usually i couple it with an anti-exe or SRP or any anti-logger (since most like SpS or ZAL usually have some sort of HIPS) to prevent keyloggers and other malware. 1- SD is set on boot (all partitions) for non-admin task (aka surfing, watching movies, torrenting, etc...). So clean system every boot. - for admin task (updating the OS), i reboot once (restoring a clean system), get out SD mode > update > turn SD On when done. (this is the only moment the system isn't protected by SD and i don't connect anything to the net.) 2- i [B]never but never commit changes[/B] (this is the weakness to me), - if i want save some docs/files , i check them with any OD scanners or VT Uploader and save them to any cloud. - if in use a External drive, i use one that was only plugged to my clean system. - USB contents from other machines are checked, then if clean, i copy the content to the cloud, unplug the USB, then i reboot SD again to be sure. By doing this normally, you are on a clean system every boot, ext-drive is clean, USBs are clean, files are clean. of course those steps are not so "convenient" but personally i wont sacrifice security to save some clicks. if you work on personal content, you must reboot to load a clean system. Sandboxie is useless then. Now i don't say you shouldn't use Sbie with SD, but i find the combo redundant. :) [/QUOTE]

Verification