Advanced Plus Security Gandalf_The_Grey's laptop config for 2020

[Gandalf_The_Grey]

Did a clean install of Windows 10 version 20H2 Build 19042.423.
Got SpywareBlaster 5.7 Private Beta with MS Edge support from javacool at Wilders.

 

[ForgottenSeer 85179]

Did a clean install of Windows 10 version 20H2 Build 19042.423.

Did you try Windows internal encrypted DNS ?

 

[Stopspying]

Did a clean install of Windows 10 version 20H2 Build 19042.423.
Got SpywareBlaster 5.7 Private Beta with MS Edge support from javacool at Wilders.

SpywareBlaster - there is a blast from the past. I used this for a long time, javacool were good at what they did IMO. Some AVs clashed with it so I stopped using it, it would be good to know if it still does does its job well.

 

[Gandalf_The_Grey]

Did you try Windows internal encrypted DNS ?

No, it's not in this (beta) build yet.

 

[Soulbound]

how is spywareblaster so far after you added, considering it can be irrelevant due to your current security configuration. If you were running Windows Defender, then i would fully agree having SB in the system.

 

[Gandalf_The_Grey]

how is spywareblaster so far after you added, considering it can be irrelevant due to your current security configuration. If you were running Windows Defender, then i would fully agree having SB in the system.

Well it still is a simple added layer of browser protection.
It blocks stuff like tracking cookies (example double-click) and scripts (example coin miners).
You can see the blocked items in the program itself and in the settings of the (supported) browsers.
No magic but less work for your adblocker and antivirus program.
It's more like privacy tools and system hardeners, you can do it yourself but not that easy.

 

[ForgottenSeer 85179]

It blocks stuff like tracking cookies (example double-click)

Block 3th party cookies in browser.

and scripts (example coin miners).

Mainstream browser do that already.

stay secure, not paranoid

 

[Gandalf_The_Grey]

Block 3th party cookies in browser.


Mainstream browser do that already.

stay secure, not paranoid

Well I do block third party cookies, but sometimes it's not easy.
Microsoft Teams on the web is a difficult one with third party cookies blocked.
Some media also need third party cookies to play.

I hope I stay secure and a little bit paranoid
All those data leaks these days fuel my healthy paranoia

 

[Gandalf_The_Grey]

This thread Q&A - Free Kaspersky Security Cloud’s notification, is it a mitm attack?? inspired me to go back to Microsoft Defender Antivirus and Bitdefender TrafficLight as extra browser protection.
Two annoying bugs left on my system:
Optimize drives tool doesn't remember when it was last run:

Windows 10 version 2004 rollout imminent

I was going to post that above. ;) No. About a month ago I installed 2004 with MCT and then went back to 1909 with an image. I received several driver updates, etc. in the following days and then was offered 2004 via Windows Update. I still waited a number of weeks before recently updating...

malwaretips.com

Had to turn off memory integrity to let Windows Defender Network Inspection Service run automatically:

Windows Defender network inspection service fails to start

Windows Defender network inspection service fails to start as reported here: https://www.tenforums.com/antivirus-firewalls-system-security/161859-windows-defender-network-inspection-service-fails-start.html. I have the first two error codes showing. The immediate solution is to disable Memory...

malwaretips.com

Hope these will be fixed soon.
Then I can recommend Windows 10 2004 (20H2 is just a small upgrade) and Microsoft Defender Antivirus without any doubt.

 

[Gandalf_The_Grey]

Back to Kaspersky Security Cloud Free.
Simply seems to work the best with my laptop, no delays opening folders, programs and when browsing and no unnecessary blocks.
From my SpywareBlaster thread, trying to keep things simple:

SpywareBlaster 6.0 has been released

SpywareBlaster 6.0 has been released! Defend your security and privacy while browsing the web. Prevent the installation of spyware, malware, trackers, and other potentially unwanted software! SpywareBlaster works alongside your web browser and existing security setup, to provide a powerful...

malwaretips.com

I use O&O ShutUp10 for privacy (also covers Edge), Simple Windows Hardening from @Andy Ful for as the name implies Windows hardening and SpywareBlaster for browser hardening next to uBlock Origin (adblocker).
It seems that MS Outlook uses IE11 for displaying HTML mails, so in that case SywareBlaster also protects MS Outlook in my system.
Programs and drivers are kept UpToDate using Internet, PatchMyPC, SUMo and Driver Easy Pro.

 

[Gandalf_The_Grey]

Inspired by the blog postings of Wladimir Palant the developer of Adblock Plus I decided to go back to Microsoft Defender Antivirus.

Almost Secure

Wladimir Palant's blog

palant.info

The Windows Defender network inspection service fails to start bug was fixed with a platform update.

Windows Defender Is Becoming the Powerful Antivirus That Windows 10 Needs

My definitions are actually newer, but I'm still on an older version of the client and engine. Hi, there was an update to the Platform, it's now at...

www.wilderssecurity.com

So, I could enable Memory Integrity again.
Removed O&O ShutUp 10 because I needed full telemetry to update to the latest beta builds.
Doing my own privacy settings manual with the help of these 2 resources:

[Guide] Best Privacy Settings for Windows 10 to Disable Telemetry and Data Collection - AskVG

[Guide] Best Privacy Settings for Windows 10 to Disable Telemetry and Data Collection - Since when Windows 10 development started and free Insider Preview build released to public, there have been lots of talks about Windows 10 privacy policy, data

www.askvg.com

How to Change Your Windows 10 Privacy Settings

Learn how to change your privacy settings on Windows 10. These steps adjust your privacy and security settings to Tight level protection.

privacy.kaspersky.com

 

[blackice]

Inspired by the blog postings of Wladimir Palant the developer of Adblock Plus I decided to go back to Microsoft Defender Antivirus.

Almost Secure

Wladimir Palant's blog

palant.info

The Windows Defender network inspection service fails to start bug was fixed with a platform update.

Windows Defender Is Becoming the Powerful Antivirus That Windows 10 Needs

My definitions are actually newer, but I'm still on an older version of the client and engine. Hi, there was an update to the Platform, it's now at...

www.wilderssecurity.com

So, I could enable Memory Integrity again.
Removed O&O ShutUp 10 because I needed full telemetry to update to the latest beta builds.
Doing my own privacy settings manual with the help of these 2 resources:

[Guide] Best Privacy Settings for Windows 10 to Disable Telemetry and Data Collection - AskVG

[Guide] Best Privacy Settings for Windows 10 to Disable Telemetry and Data Collection - Since when Windows 10 development started and free Insider Preview build released to public, there have been lots of talks about Windows 10 privacy policy, data

www.askvg.com

How to Change Your Windows 10 Privacy Settings

Learn how to change your privacy settings on Windows 10. These steps adjust your privacy and security settings to Tight level protection.

privacy.kaspersky.com

I leaning the same way. Feeling kind of done with the messiness in 3rd party apps.

 

[sepik]

Hello,
Are you fighting against Microsoft telemetry or network and host mitigation or both? Andy's software is good, no question about that, but never ever rely on the windows own stuff, i suggest for Symantec SEP firewall IDS with Andy's own tool. You do need a proper IDS firewall, and Symantec SEP component is only that can provide that.

 

[oldschool]

@Gandalf_The_Grey when did you move to Windows Insider?

Inspired by the blog postings of Wladimir Palant

Thanks for the lead to that resource. (BTW, Malwarebytes BG blocked that site! )

 

[Gandalf_The_Grey]

Hello,
Are you fighting against Microsoft telemetry or network and host mitigation or both? Andy's software is good, no question about that, but never ever rely on the windows own stuff, i suggest for Symantec SEP firewall IDS with Andy's own tool. You do need a proper IDS firewall, and Symantec SEP component is only that can provide that.

Well not really fighting Microsoft telemetry because some telemetry is useful to fix bugs, but it's more wanting to limit what's out there on me.
Not sure if a firewall and thus more third-party code is needed for me.
I have tried many firewall's in the past but found them more a nuisance than helpful when prompting to let stuff access the internet, but I have never tried Symantec SEP.

 

[Gandalf_The_Grey]

@Gandalf_The_Grey when did you move to Windows Insider?

Thanks for the lead to that resource. (BTW, Malwarebytes BG blocked that site! )

I moved to insider at the end of July too see the improved start menu and see if some bugs present in 2004 were resolved.
The optimize drives bug is still fixed only in the beta channel and still not in 2004.

Windows 10's fall 2020 update could come with the new Start menu

As we’ve been reporting, Windows 10 20H2 is going to be delivered in the form of a small enablement package and the system’s build number will bump by one digit, just like November 2019 Update. When Windows 10 20H2 preview update was announced, Microsoft didn’t reveal any major new features, nor...

www.windowslatest.com

Microsoft tests fix for Windows 10 bug that breaks drive defrag tool

Over time, a drive (both SSD and HDD) can begin to operate with less efficiency. To speed up your drive, Windows 10 allows you to defrag and optimize it using a built-in tool called ‘Drive Optimize’. The Optimize Drives window presents a list of all of the drives in your system that are eligible...

www.windowslatest.com

It's an interesting blog from the developer/CEO of Adblock Plus, maybe there were some bugs in Malwarebytes published there in the past?

 

[sepik]

Trend Micro BB/Aegis+SEP Firewall+IDS = Strong

 

[Gandalf_The_Grey]

Trend Micro BB/Aegis+SEP Firewall+IDS = Strong

Probably, but I already have HomeCare by Trend Micro on my router so security wise it would be better to choose another brand for added protection.

 

[ForgottenSeer 85179]

Doing my own privacy settings manual with the help of these 2 resources:

[Guide] Best Privacy Settings for Windows 10 to Disable Telemetry and Data Collection - AskVG

[Guide] Best Privacy Settings for Windows 10 to Disable Telemetry and Data Collection - Since when Windows 10 development started and free Insider Preview build released to public, there have been lots of talks about Windows 10 privacy policy, data

www.askvg.com

How to Change Your Windows 10 Privacy Settings

Learn how to change your privacy settings on Windows 10. These steps adjust your privacy and security settings to Tight level protection.

privacy.kaspersky.com

The askvg article is:

last updated on November 21, 2015 by VG

But the kaspersky is a good one

 

[Gandalf_The_Grey]

The askvg article is:


But the kaspersky is a good one

You are right, not recently updated (understatement), but the basics are still good.
I like to make my own cocktail of those two resources.