Advanced Plus Security joyous home PC Config 2020

[Vitali Ortzi]

Edit:
1. Added Firefox with DOH, enabled Encrypted SNI with cloudflare DNS.
2. Enabled DOH in all chromium based browsers.
3. System dns changed to cloudflare's DNS.

Nice !
This would help with MITM .

 

[Brahman]

Edit:
System Dns changed to NextDns. They have a Dns server in India which is as fast as cloudflare. Custom blocklists enabled in next dns, system implimentaion is done with yoga dns app and all the filters in adguard except adguard's own removed. The major filtering is done in Nextdns server and some cosmetic level filtering with adguard, hence the browsing and page loading is a bit faster i feel. Oh and the the UI of NextDns is just awesome really a "piehole" as a service.

 

[Vitali Ortzi]

Edit:
System Dns changed to NextDns. They have a Dns server in India which is as fast as cloudflare. Custom blocklistds enabled in next dns, system implimentaion is done with yoga dns app and all the filters in adguard except adguard's own removed. The major filtering is done in Nextdns server and some cosmetic level filtering with adguard, hence the browsing and page loading is a bit faster i feel.

Heard good things about nextDNS .
Good choice .

 

[Brahman]

Today I had an urge to try out Chromium and i dowloaded it from "Download Chromium" and the very next moment i have recevied evidence of Symantec download insight working.. This can be a very good option to prevet zero day attacks. I am impressed.

 

[Vitali Ortzi]

Today I had an urge to try out Chromium and i dowloaded it from "Download Chromium" and the very next moment i have recevied evidence of Symantec download insight working.. This can be a very good option to prevet zero day attacks. I am impressed.
View attachment 242882

If you can live with such a high sensitivity it can be pretty strong against zero days .
But false positives are insane with this feature.

 

[Brahman]

Edit:
Updated to windows 2004 version.
My ciniebench score is around 40 points better than prevous test on windows 10 1909.

 

[Brahman]

Made some changes to Firewall rules. Added Two new rules to block TCP and UDP traffic to block both incoming and outgoing traffic on port 53. Blocked initial netbios and dhcp traffic and enabled rule to block all traffic till firewall starts.(This is to prevent any unencrypted dns traffic from any application during system startup through port 53 and to force all dns through port 443 via Yoga DNS application.) Apart from these a few other rules are also changed to prevent UPnP discovery ( as mitigation to the newly found UPnP CVe.)

 

[Vitali Ortzi]

Edit:
Updated to windows 2004 version.
My ciniebench score is around 40 points better than prevous test on windows 10 1909.
View attachment 242896

Stronger multi score then a 24 threaded Xeon not bad and the improvement of Zen 2 over Zen 1 is very strong dam the Zen r7 1700x 16 threaded CPU is comparable to your 12 threaded CPU on base clocks (200 MHz higher base clocks on your CPU ).
haven't seen such a IPC improvement per gen at Intel for some time .

 

[LDogg]

Simple, sweet and secure.

~LDogg

 

[Brahman]

Added a 16GB Corsair Vengeance LPX to the mix.Now running in dual channel mode. (The first module controller was made by samsung and the new one by micron yet no issues in entering dual channel mode- i was skeptical and afraid if the controller turned out to be a different one than the first one, dual channel mode would not get activated, but it did. ).

 

[Vitali Ortzi]

Added a 16GB Corsair Vengeance LPX to the mix.Now running in dual channel mode. (The first module controller was made by samsung and the new one by micron yet no issues in entering dual channel mode- i was skeptical and afraid if the controller turned out to be a different one than the first one, dual channel mode would not get activated, but it did. ).
View attachment 246064View attachment 246071View attachment 246072

Nice
If the dram is mostly unused I would consider some ram caching (I use Diskeeper because it works dynamicly but won't recommend it anymore as it changed to a subscription rather then a lifetime product)