Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 953857" data-attributes="member: 32260">I often recommend some hardening, but not of this kind. Most people will probably suffer after applying the tweaks proposed in the Guide. Many options are not relevant to Home users and will produce serious problems in the Business environment. Furthermore, some hardening tweaks (proposed in the Guide) can give users a false sense of security and are totally ineffective. For example, after disabling Autorun and Autoplay one can think that using the USB stick, CD, or DVD from unsafe sources is OK. In fact, there is no need to disable the Autorun or Autoplay. They are disabled for USB devices by default (from Windows Vista SP2) and because of it, the attackers use Bad USB nowadays. Also disabling these features for CD or DVD is totally ineffective because CD, DVD disks are used to install something (game, application), so the user will run the malware by himself.This Guide will be helpful for people who understand the consequences of proposed tweaks, can choose some of them to support already installed security, and can easily revert to the default setup.</blockquote>

[QUOTE="Andy Ful, post: 953857, member: 32260"] I often recommend some hardening, but not of this kind. Most people will probably suffer after applying the tweaks proposed in the Guide. Many options are not relevant to Home users and will produce serious problems in the Business environment. Furthermore, some hardening tweaks (proposed in the Guide) can give users a false sense of security and are totally ineffective. For example, after disabling Autorun and Autoplay one can think that using the USB stick, CD, or DVD from unsafe sources is OK. [B]In fact, there is no need to disable the Autorun [/B]or Autoplay. They are disabled for USB devices by default (from Windows Vista SP2) and because of it, the[B] attackers use Bad USB nowadays. [/B]Also disabling these features for CD or DVD is totally ineffective because CD, DVD disks are used to install something (game, application), so the user will run the malware by himself. [B]This Guide will be helpful for people who understand the consequences of proposed tweaks, can choose some of them to support already installed security, and [B]can easily revert to the default setup[/B].[/B] [/QUOTE]

Verification