Advanced Plus Security ErzCrz Security Config 2024

[ErzCrz]

Firefox error during playback is apparently something to do with codecs though my Windows 11 Home already has all the video playback codecs. It's not uBO rules related as same ruleset in Edge and no playback issue with Edge. I watch a lots of programs on catchup so I'll make Edge primary and just disable any features I don't need.
No issues with CF .0812 running so far. Once it learns your system it just runs quietly in background.

 

[oldschool]

Firefox error during playback is apparently something to do with codecs though my Windows 11 Home already has all the video playback codecs. It's not uBO rules related as same ruleset in Edge and no playback issue with Edge.

I have the same issue here with Hulu. Have to play that on Edge or Chrome.

 

[ErzCrz]

I have the same issue here with Hulu. Have to play that on Edge or Chrome.

It's odd but not found a proper reason though a number of similarly related posts in their Reddit. Could be a issue with latest update or something.Will keep an eye out and try it again next time there's a FF update.

 

[oldschool]

It's odd but not found a proper reason though a number of similarly related posts in their Reddit. Could be a issue with latest update or something.Will keep an eye out and try it again next time there's a FF update.

I tried everything over a few months' time.

 

[ErzCrz]

Bored so rechecking that Firefox playback issue I was having.
Firefox help article

Spoiler: DRM Notification, enabled and WCDM Module as Always Active

Just testing if it can be reproduced and for screenshots to support if there's further issue.

 

[ErzCrz]

Update: I think I found a workaround with the Firefox playback issue I was having on the Channel 4 On Demand catch-up TV. Checking the uBO logs there were quite a few Easy List - 1st party xhr blocks for monitor and metrics. Creating a allow rules for the monitor.channel4.com seems to have done the trick, well so far anyway. I'm 30 minutes into an episode and so far no errors or issue.

! 2023-12-29 Channel 4 | Stream & Watch Live TV
@@||monitor.channel4.com/logs/dotcom/client/html5player$xhr,domain=www.channel4.com
@@||monitor.channel4.com/metrics/dotcom/client/html5player$xhr,domain=www.channel4.com

It might be that if you are having errors on one stream service, it's worth checking the block logs for 1st party blocks and have to create a rule. @oldschool

Will watch more later and see if it still works.

 

[oldschool]

It might be that if you are having errors on one stream service, it's worth checking the block logs for 1st party blocks and have to create a rule. @oldschool

I disabled µBO and FF Tracking Protection and Hulu still doesn't play.

 

[ErzCrz]

I disabled µBO and FF Tracking Protection and Hulu still doesn't play.

Ah I see. Are you using DNS over HTTPS? That seems to be a related issue but I don't have Hulu. I'm also presuming you've tried this addon? HuluFix - Firefox Addon

 

[ForgottenSeer 100397]

I disabled µBO and FF Tracking Protection and Hulu still doesn't play.

Give cleaning the browser or using private mode a try. Consider disabling DNS.

 

[ErzCrz]

Weighing up the options for my 2024 configuration. CF works okay though I'd like the stable 2024 version with Win11 full compatibility. CyberLock is a viable option as is Hard_Configurator, CD,FWH. Another option is renew Emsisoft which I won in January this year. Obviously security is about layers and surface attack area. Just undecided on the direction to go with instead of changing setups so often. I've made 12 recorded changes this year and probably just as much not recorded as I tested out various things in my config and I need to give a solution longer than a month or two.

Spoiler: Setup Choices

1. Microsoft Defender with Hard_Configurator, CD, FWH
2. WFC with Microsoft Defender & Hard_Configurator
3. Comodo Firewall with Microsoft Defender
4. CyberLock with Microsoft Defender
5. Emsisoft Anti-Malware Renewal
6. Some other setup.

Random.org Dice Roller

Time yet to decide but just kind of thinking out loud. Emsisoft Renewal and CyberLock are of similar price. I guess I could just roll dice (see link)

EDIT Note: Firewall is an important element to prevent data leaking which has me leaning more to CF o WFC route but both CL and Emsisoft block outgoing as well.

 

[Digmor Crusher]

If it were me I would choose options 1 or 4.

 

[ErzCrz]

If it were me I would choose options 1 or 4.

Thanks, appreciate the input. I've used H_C a number of times but not yet used CL but hear good things about it.

 

[ErzCrz]

Updated configuration for 2024.

Microsoft Defender with DefenderUI Recommended Settings
CyberLock - Autopilot while learning machine
Windows Firewall Control - Recommended
EDIT: Disabled Secure Profile setting for WFC to allow CyberLock to create firewall rules.

No other changes at this moment. Happy New Year and a big thank you to @Shadowra for the recommendations!

 

[ErzCrz]

Using both Edge and Firefox. Using MS Teams for catch up meetings with HR adds work account to my laptop and therefore doesn't allow me to switch on Edge Secure Browsing which I wasn't using anyway. CyberLock disables Startup Boost as well but I barely noticed the difference with that enabled anyway. Firefox is more or less my preference so that may get back to being Primary again.

 

[ErzCrz]

CyberLock been in Autopilot since yesterday so think it's learned what I use most.
Getting the hang of WFC though I'm thinking of using @Andy Ful 's WindowsFirewallHardening to create block rules for LOLbins so those block rules are already in place just as an added layer

 

[ErzCrz]

You'd think that my OEM Asus Software would be digitally signed though checking VirusTotal it is signed so reported FP.

Spoiler: CyberLock Alert

 

[ErzCrz]

Just put Firefox as Primary browser now, Edge just got too annoying.

Enjoying WFC I just need to brush up on what to allow and worth blocking. Looking into whether it also blocks for example svchost if it's parent process happened to be some malware but it does say "Only the programs that have an allow rule can initiate outbound connections " in the Recommended Notification setting. I'm sure it's the case, just want to know it's capabilities.

 

[ErzCrz]

WFC might be the cause of some browsing lag e.g. a news page with lots of articles seemed to hiccup a slightly on loading. Also may have been cause of some lag I had in a Teams Meeting yesterday though next meeting isn't for a couple of weeks so can't test at the moment.

I've exported rules and uninstalled it and running CF without issue and both CF and VS/CL whitelist each other automatically. Kind of has me wondering if DefenderUI needed with both but not having any issue so far. Will test it for a few days before changing configuration.

-----------
EDIT: CF works fine but trying to determine whether it was WFC or not. Could have been a background update or something. Reviewing logs.
EDIT 2: So wasn't WFC issue as far as I can work out, not been able to reproduce either issue so back installed and running fine.

 

[ErzCrz]

Some brief amendments.
1. Removed WFC - Had some browsing lag after a number of rules created, slow resume of WIFI connection after hibernate and a lot of connection alerts got a bit tedious if I didn't put it in Learning Mode for a couple of days.
2. Implemented @Andy Ful 's WindowsFirewallHardening with H_C Recommended rules applied.
3. Enabled VS/CL rule to create rules for Not Safe items.

I may end up going down the CF route eventually as it'll work with VS/CL if using @cruelsister 's configuration at which point DefenderUI might not be needed.

So, some changes this year already but just finding what works best without issue.

 

[oldschool]

I may end up going down the CF route eventually as it'll work with VS/CL if using @cruelsister 's configuration at which point DefenderUI might not be needed.

CF & VS are overkill. Choose one.