Reply to thread

Message

<blockquote data-quote="Marana" data-source="post: 923625" data-attributes="member: 69370">I just want to check if I have a blind spot here...If I have SRP enabled with default deny setup, is there any added value whatsoever (security wise) in keeping .LNK files in the Designated File Types list?On the other hand, if I&#039;m not running a default deny setup and have LNK included in DFT list, but whitelisted .LNK files on my desktop, is there anything to prevent a malicious download simply to replace e.g. &quot;Microsoft Edge.LNK&quot; on my desktop with malicious content, only to wait till I launch my browser for the next time?Sorry if I&#039;m asking too obvious questions here. Somehow I just got a weird feeling that maybe I have missed something obvious that I should have understood... I have run SSRP for years - and for the last year H_C with default deny setup and I have sometimes wondered how anyone would be willing to use something else - if still using some kind of SRP. Well, of course some protection is better than no protection, but still... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="Marana, post: 923625, member: 69370"] I just want to check if I have a blind spot here... If I have SRP enabled with default deny setup, is there any added value whatsoever (security wise) in keeping .LNK files in the Designated File Types list? On the other hand, if I'm not running a default deny setup and have LNK included in DFT list, but whitelisted .LNK files on my desktop, is there anything to prevent a malicious download simply to replace e.g. "Microsoft Edge.LNK" on my desktop with malicious content, only to wait till I launch my browser for the next time? Sorry if I'm asking too obvious questions here. Somehow I just got a weird feeling that maybe I have missed something obvious that I should have understood... I have run SSRP for years - and for the last year H_C with default deny setup and I have sometimes wondered how anyone would be willing to use something else - if still using some kind of SRP. Well, of course [I]some protection [/I]is better than [I]no protection[/I], but still... :) [/QUOTE]

Verification