Advanced Plus Security ErzCrz Security Config 2025

[ErzCrz]

After testing for a few days, definitely faster without Adguard in a lot of ways. In a bit of a paranoid mood so I might try out NoScript again but I found that always works best when you're just visiting a regular set of sites and then happy click something by mistake. Still, a useful tool and without uBO Origin capabilities the paranoid me might give it a go.

 

[SeriousHoax]

After testing for a few days, definitely faster without Adguard in a lot of ways. In a bit of a paranoid mood so I might try out NoScript again but I found that always works best when you're just visiting a regular set of sites and then happy click something by mistake. Still, a useful tool and without uBO Origin capabilities the paranoid me might give it a go.

Yeah, AdGuard definitely slows down even though the slowness in most cases would be acceptable for most people. But switching from ADG Desktop to uBO, the speed difference is immediately noticeable.
I tried the route of using uBO in hard mode a few years ago and it was not bad. But the amount of things I had to whitelist was a lot. So in the end didn't make much difference. Also just remembered, for whatever reason, at that time some sites with a lot of javascripts were slightly slower to load only in Firefox with uBO hard mode compared easy mode. That was a very odd thing for me because I expected the opposite.
I could never get comfortable with NoScript's UI. I used uMatrix when it was still a thing and uBO hard mode after that.

 

[oldschool]

I tried the route of using uBO in hard mode a few years ago and it was not bad. But the amount of things I had to whitelist was a lot. So in the end didn't make much difference.

Similar to you, I've used hard mode and would revert to medium mode for tricky sites, which is fairly problem-free. In the end, it almost made sense to just use medium mode.

 

[ErzCrz]

Similar to you, I've used hard mode and would revert to medium mode for tricky sites, which is fairly problem-free. In the end, it almost made sense to just use medium mode.

Yeah, AdGuard definitely slows down even though the slowness in most cases would be acceptable for most people. But switching from ADG Desktop to uBO, the speed difference is immediately noticeable.
I tried the route of using uBO in hard mode a few years ago and it was not bad. But the amount of things I had to whitelist was a lot. So in the end didn't make much difference. Also just remembered, for whatever reason, at that time some sites with a lot of javascripts were slightly slower to load only in Firefox with uBO hard mode compared easy mode. That was a very odd thing for me because I expected the opposite.
I could never get comfortable with NoScript's UI. I used uMatrix when it was still a thing and uBO hard mode after that.

Agreed about uBO Medium mode with some only allow TLD rules and blocking HTTPs Rules. The below are my default in uBO but it gets tedious when some streaming sites require xhr whitelisting to work but still block the streaming ads.

! Block beacons, obsolete plugins and websocket biderectional data connections on insecure websites
|HTTP://*$ping,object,websocket,important

! Block potentially unsafe third-party content linking to unsafe unencrypted websites
|HTTP://*$third-party,~document,~stylesheet,~image,~media,important

! Warn when opening webpages on top level domains and countries I never visit
||*$document,domain=~com|~info|~io|~eu|~net|~org|~uk|~ms|~gov

I use Edge for default browser because Microsoft Defender works best with it but I inevitably have to stream on Firefox for sites with Ads that I need uBO Origin for.

NoScript can be a little tedious and I miss that the Mcafee Site Advisor would tell you for example that it's just a site media server but uBO is my favourite for all around protection ugh MV3 /shrug though uBOL is fine in Optimal for ad blocking but I miss the control of Origin.

Sorry for wall of text. I tend to ramble on a bit when I'm reducing steroids...

 

[ErzCrz]

Well, Firefox does recognise MD / WF in About:support so I suppose it doesn't matter which browser, just use what works best for you

 

[ErzCrz]

Just something different I noticed. I decided on trying out Intel Driver Assistant and updated Intel Iris xe graphics driver from 30.01.101.166 to 32.0.101.6790. Well, MyAsus took over and rolled back the driver to 30.01.. Not that I had issue with current driver but was in response to a Hogwarts Legacy warning about issues with the driver but turns out it ran anyway whether I updated it or not. Just an observation. I suppose MyAsus will update the driver when it wants

 

[ErzCrz]

Just a different note. Had to restart to log into KeyPass as it kept saying file invalid. Weird behaviour /shrug.

 

[lokamoka820]

Just a different note. Had to restart to log into KeyPass as it kept saying file invalid. Weird behaviour /shrug.

Try repairing the database:

Repairing Databases - KeePass

keepass.info

is there any error code?

 

[ErzCrz]

Try repairing the database:

Repairing Databases - KeePass

keepass.info

is there any error code?

I didn't see any error code. Works fine now. I've checked that I at least have a current back up. Probably just some sort of glitch though not sure what was the cause. Will have to look at the windows event viewer for any clues.

 

[ErzCrz]

Just reverting to Microsoft Defender, DefenderUI (because I like it over CD), CyberLock and WFC.
A bit intermittent with WFC as I've seen some network stutters now and then with it it but can't quite whether WFC was the cause.

 

[piquiteco]

Just reverting to Microsoft Defender, DefenderUI (because I like it over CD), CyberLock and WFC.
A bit intermittent with WFC as I've seen some network stutters now and then with it it but can't quite whether WFC was the cause.

Hi, @ErzCrz, how are you? Just a question about Comodo. When you used Comodo, did you use CIS or did you use CF + MD? Thanks!

 

[ErzCrz]

Hi, @ErzCrz, how are you? Just a question about Comodo. When you used Comodo, did you use CIS or did you use CF + MD? Thanks!

Hi. I just use Comodo Firewall with CruelSister settings. I have installed it now and then to assist people using it but I use CyberLock so it's overkill with Comodo. Anyway, just use CS's settings, don't mess about with it much and it'll be a great set and forget. Oh yeah, you have to disable MD realtime protection temporarily to install KillSwitch as MD detects the installer as a Trojan and the installation fails. Once installed, remember to re-enable MD realtime proteciton. You'll then see an CFW/CIS program update which updates the signature of KillSwitch and the update will run fine.

You can enable IPv6 filtering but you'll need to redo the Firewall Task - Stealth Ports and then create the following global rules for IPv6 to work.

Allow ICMP In IPv6 - Packet to big
Allow ICMP In IPv6 - Time Exceeded
Allow ICMP In IPv6 - Custom type 134 - 0 (Router Advertisement required rule)
Allow ICMP In IPv6 - Custom type 135 - 0 (Neighbour solicitation required rule)
Allow ICMP In IPv6 - Custom type 136 - 0 (Neighbour advertisement required rule)

You don't need HIPS with Containment set to Restricted or Untrusted.
Webfiltering doesn't work with anything other than firefox and internet explorer so you can technically disable that as well though I would leave it unless you experience issues.

 

[ErzCrz]

Just updating with new Laptop. Not using WFC at the moment though I might pick it back up at some point.