Advanced Plus Security ErzCrz Simple Strong Protection 2020

[ErzCrz]

Updated secure setup. Pretty much the same as last year but hoping to lock my system down further this year.

 

[harlan4096]

You may set UAC to Always Notify, also consider also to run manual backups of important data to external devices, and/or in cloud services.

As for "Virus and Malware Removal Tools", EmsiSoft Emergengy and HitManPro Free.

Please kindly reflect Your changes editing Your config, and announcing them here, thanks for sharing

 

[ErzCrz]

Just updating configuration and auditing my setup. Still finding this variation of UBO in Medium mode the best setup for me and added BitDefender Traffic Light again. This is because of the latest Russian and China hacking stuff going on though I myself have no reason to be a target, just normal UK user. If I was being super paranoid, I'd be tempted to have a fresh go at Comodo but it became more time consuming than it was worth for me. I might look to see if H_C Recommended needs further tweaking but suggestions welcome. Default deny is obviously the key as is usability.

 

[Nautilus]

Nice light setup , but some suggestions I would switch your webfilter with something like emsisoft webfilter , or the one from malwarebytes becuause they are better traficlight , you can pair it up with netcraft for extra phising protection . I would not trust one drive or ms backup , switch to macrium free , way more reliable when the .... hits the fan. also what do you want from comodo , just the firewall I presume? you can install it with @cruelsister settings , this will only take a minute or 2 to setup and will make your pc / laptop like a fortress ( without those annoying / confusing popups ) thanks for sharing your config.

 

[Gandalf_The_Grey]

Emsisoft is too light and allows partial downloads of malware, just like SmartScreen in Edge.
Malwarebytes is too heavy.
Netcraft is great but just for phishing.
IMO Bitdefender TrafficLight is the best extension for both malware and phishing.
Test were done here:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

Latest one:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | Page 70 | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

@Evjl's Rain Care to do another test?
To see if things have changed over time.

 

[ErzCrz]

Nice light setup , but some suggestions I would switch your webfilter with something like emsisoft webfilter , or the one from malwarebytes becuause they are better traficlight , you can pair it up with netcraft for extra phising protection . I would not trust one drive or ms backup , switch to macrium free , way more reliable when the .... hits the fan. also what do you want from comodo , just the firewall I presume? you can install it with @cruelsister settings , this will only take a minute or 2 to setup and will make your pc / laptop like a fortress ( without those annoying / confusing popups ) thanks for sharing your config.

Thanks. I'll look at those other webfilters and netcraft. I downloaded Macrium Free but not got around to doing a backup test with it yet.

I used to do a lot of tweaks with Comodo but yeah, I would probably just go down the @cruelsister setup with just the firewall for better firewall protection if I were going to go down that route though you have to setup the IPv6 rules manually.

Erz

 

[ErzCrz]

Emsisoft is too light and allows partial downloads of malware, just like SmartScreen in Edge.
Malwarebytes is too heavy.
Netcraft is great but just for phishing.
IMO Bitdefender TrafficLight is the best extension for both malware and phishing.
Test were done here:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

Latest one:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | Page 70 | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

@Evjl's Rain Care to do another test?
To see if things have changed over time.

Lots of options, it would be good to see some more up-to-date testing on BDTL but I'm giving it a go and doing some research

 

[ForgottenSeer 85179]

IMO Bitdefender TrafficLight is the best extension for both malware and phishing.
Test were done here:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

Latest one:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | Page 70 | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

@Evjl's Rain Care to do another test?
To see if things have changed over time.

How does it compare to AdGuard extension?

 

[Vitali Ortzi]

Use Diskeeper or upgrade to an SSD for extra performance.
Disk keeper is basically a auto defrag utility with memory caching .

 

[ForgottenSeer 85179]

Use Diskeeper or upgrade to an SSD for extra performance.
Disk keeper is basically a auto defrag utility with memory caching .

Please no defrag nonsense for SSDs. Windows handle this at best way. Their is no reason to use any such tools.
Same for memory caching.

 

[Vitali Ortzi]

Please no defrag nonsense for SSDs. Windows handle this at best way. Their is no reason to use any such tools.
Same for memory caching.

I'm not taking about defraging an SSD since SSD work differently.

But memory caching can help with some workloads but not many and usually unoptimized ones .

 

[Gandalf_The_Grey]

How does it compare to AdGuard extension?

The latest with the AdGuard extension is an old one, but it didn't do so good:

[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings | Page 56 | MalwareTips

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated...

malwaretips.com

It's the same when I used to test all the links @Evjl's Rain shared in that thread.
If I remember correctly AdGuard didn't block more than three in any test.

 

[LDogg]

Nothing else to add on for me, very good setup.

~LDogg

 

[ErzCrz]

Just a quick update to my uBlock Origin setup.

1. I've subscribed to Default filters, imported top new Top3000 list ( https://raw.githubusercontent.com/Kees1958/W3C_annual_most_used_survey_blocklist/master/Top3000 )

2. Amended my Static Filters to include blocking obsolete flash and ping (thanks to @Lenny_Fox ):

So my static filters are now:

! Block (obselete flash) plugins and (hyperling auditing & sending beacons) pings
||*$object,ping
! Block insecure third-party content except stylesheet, image and media
||HTTP://*$3p,~stylesheet,~image,~media
!
! Block all on much abused generic TLD's. The TLD is between ||* and ^$, e.g. ||*.BID^$
!
||*.bid^$all
||*.buzz^$all
||*.club^$all
||*.country^$all
||*.date^$all
||*.download^$all
||*.gdn^$all
||*.host^$all
||*.icu^$all
||*.jetz^$all
||*.kim^$all
||*.loan^$all
||*.men^$all
||*.mobi^$all
||*.mom^$all
||*.party^$all
||*.pics^$all
||*.racing^$all
||*.ren^$all
||*.rest^$all
||*.review^$all
||*.ryukyu^$all
||*.science^$all
||*.sex^$all
||*.shop^$all
||*.site^$all
||*.stream^$all
||*.top^$all
||*.trade^$all
||*.vip^$all
||*.wang^$all
||*.win^$all
||*.work^$all
||*.xin^$all
||*.xxx^$all
||*.xyz^$all
@@||email.ionos.co.uk*^$all,domain=ionos.co.uk
!
! Block all on much abused country code TLD's. The TLD is between ||* and ^$, e.g. ||*.AM^$
!
||*.am^$all
||*.cc^$all
||*.cf^$all
||*.cn^$all
||*.fm^$all
||*.ga^$all
||*.gg^$all
||*.ki^$all
||*.kp^$all
||*.la^$all
||*.ml^$all
||*.pw^$all
||*.ru^$all
||*.tk^$all
||*.ua^$all
||*.ug^$all
||*.vn^$all
@@discord.gg^$all,domain=discord.com

And shorted my Dynamic rules to:

no-large-media: behind-the-scene false
* * 3p-frame block
* * 3p-script block
* com * noop
* gov * noop
* net * noop
* org * noop
* uk * noop
behind-the-scene * * noop
behind-the-scene * 1p-script noop
behind-the-scene * 3p noop
behind-the-scene * 3p-frame noop
behind-the-scene * 3p-script noop
behind-the-scene * image noop
behind-the-scene * inline-script noop

 

[ForgottenSeer 85179]

You can block TLDs in NextDNS

 

[ErzCrz]

You can block TLDs in NextDNS

Yes, there's a lot you can do with NextDNS but my router and ISP ignores client side DNS changes which only work over DOH in my circumstances so for a simpler option, I just added them into UBO but thanks for the info. ref: Firmware Update for UK Sky Broadband ISP Routers Botches DNS UPDATE - ISPreview UK

 

[ErzCrz]

Playing around with extensions on Chromium Edge. Still using UBO in the modified medium mode, Netcraft, BitDefender Traffic light and just trialing ClearURLs to help with tracking but not sure if that's a bit of an overkill or not. I don't notice any browsing slowdown at all.

 

[ForgottenSeer 85179]

Playing around with extensions on Chromium Edge. Still using UBO in the modified medium mode, Netcraft, BitDefender Traffic light and just trialing ClearURLs to help with tracking but not sure if that's a bit of an overkill or not. I don't notice any browsing slowdown at all.

Less extensions are more

 

[oldschool]

Playing around with extensions on Chromium Edge. Still using UBO in the modified medium mode, Netcraft, BitDefender Traffic light and just trialing ClearURLs to help with tracking but not sure if that's a bit of an overkill or not. I don't notice any browsing slowdown at all.

You may scrap Netcraft and Trafficlight unless you've disabled Edge > Settings > Smartscreen. SS has malware and phishing protection covered, my friend!

 

[ErzCrz]

You may scrap Netcraft and Trafficlight unless you've disabled Edge > Settings > Smartscreen. SS has malware and phishing protection covered, my friend!

Thanks I'll give that a go and update config