Advanced Plus Security Kongo's Computer Security Config 2024

[Kongo]

I am sorry for bloating your thread.

All good, thats not a problem. I just feel like I'm in a Man-In-The-Middle-Attack in a metaphorical sense right now. One side says one thing and the other side says something else and I am just the guy that delivers the news. It would just be easier talking directly to one of the mods I guess.

Also for the rest that is considering to try the combo: If Cylance can beat MD in terms of detection of PE files, I am sure that SWH and Cylance are the ultimate combo. Simple, fast and without any popup notifications. Everything that gets blocked is logged by SWH and the detections of Cylance can be seen when opening the UI or online dashboard. I personally don't need all those fancy extra protection shields most AVs have. For me a simple and fast real-time protection and the restriction policies of SWH + NextDNS are enough to keep me protected without a big perfomance impact. But of course the needs of people vary from each other.

 

[Kongo]

- replaced Cylance with Webroot

 

[Kongo]

- back to Cylance

 

[ZeePriest]

- back to Cylance

how was webroot?

 

[Kongo]

how was webroot?

Pretty good actually. Samples that weren't detected at first were detected like 10 minutes after scanning. Looks like Webroot is performing a real quick cloud analysis. I actually feel bad for making jokes about it some time ago, it seems like a solid product to me at its current state.

 

[ZeePriest]

Pretty good actually. Samples that weren't detected at first were detected like 10 minutes after scanning. Looks like Webroot is performing a real quick cloud analysis. I actually feel bad for making jokes about it some time ago, it seems like a solid product to me at its current state.

Why return back to Cylance? Is it any better? Sorry for asking too many questions but I'd like to learn about the difference between both AVs.

 

[Kongo]

Why return back to Cylance? Is it any better? Sorry for asking too many questions but I'd like to learn about the difference between both AVs.

I just like the simplicity and lightness of Cylance. It doesn't have any unnecessary extra tools which makes it really light on my system.

 

[Kongo]

- back to Microsoft Defender and HitmanPro.Alert (planning to keep this setup for quite a while. We will see... )

 

[ForgottenSeer 85179]

- back to Microsoft Defender and HitmanPro.Alert (planning to keep this setup for quite a while. We will see... )

Harden it with ConfigureDefender and Hard_Configurator.
You don’t even need HitmanPro then so better performance

 

[Kongo]

Harden it with ConfigureDefender and Hard_Configurator.

Already done.

 

[wat0114]

Hi Secure Kongo,

are you still using the CSS Exfil add-on for Firefox? If so, have you any concerns it hasn't been updated since last August? Also Mozilla is not actively monitoring it for Security, so I'm wondering if that should be of concern too. Thanks.

 

[Kongo]

Hi Secure Kongo,

are you still using the CSS Exfil add-on for Firefox? If so, have you any concerns it hasn't been updated since last August? Also Mozilla is not actively monitoring it for Security, so I'm wondering if that should be of concern too. Thanks.

Oh, thanks for mentioning. I actually removed it quite shortly after I added it to my config. The risk of that vulnerability is low compared to the risk of a vulnerability within the extension itself I guess. It’s still doing what it’s supposed to according to the testing site of the extension, but I think it’s not worth using. Will update the config

 

[wat0114]

Oh, thanks for mentioning. I actually removed it quite shortly after I added it to my config. The risk of that vulnerability is low compared to the risk of a vulnerability within the extension itself I guess. It’s still doing what it’s supposed to according to the testing site of the extension, but I think it’s not worth using. Will update the config

Okay thanks again. I guess I will remove it too from Firefox. After all, fewer extensions are better.

 

[Zorro]

For a more advanced Firefox setting, watch this video (turn on English subtitles), which shows you how to set Firefox to maximum privacy.

 

[Kongo]

For a more advanced Firefox setting, watch this video (turn on English subtitles), which shows you how to set Firefox to maximum privacy.

I'm okay with my about:config tweaks, but thanks for sharing.

 

[Kongo]

- switched from Startpage to Strict Safe Search DuckDuckGo (recommended by @SecurityNightmares )

 

[Kongo]

- removed HitmanPro.Alert
+ added HitmanPro as second opinion scanner

 

[qua3k]

As a best practice, you should not set about:config entries when you don’t fully understand how they work. For instance, spoofing the referrer with network.http.referer.spoofSource breaks sites that rely on referrers as CSRF protection.

 

[Kongo]

As a best practice, you should not set about:config entries when you don’t fully understand how they work. For instance, spoofing the referrer with network.http.referer.spoofSource breaks sites that rely on referrers as CSRF protection.

Always good to learn something new. What would you recommend instead?

 

[Nagisa]

Sending referer only on eTLD+1 is the best approach I think.

network.http.referer.XOriginPolicy=1