Advanced Plus Security KonradPL Security Config 2021

[KonradPL]

Hello

I testing windows 11 and loke it so far.

 

[SumTingWong]

nice and pc specs?

 

[harlan4096]

No add-ons in Edge browser?

 

[KonradPL]

No add-ons in Edge browser?

Adguard and sticky password add-ons only

 

[harlan4096]

Do You use a full system backup solution such as Macrium / AOEMEI?

 

[CyberTech]

nice and pc specs?

Read it again

 

[Thiagoo]

• Set your system as Windows Insider Preview if you use Windows 11
• Custom RTP, Firewall and OS settings, you should add something like Simple Windows Hardening atleast, it's a great addition to AV (you should remove WINDOWS11 from there as it's only for custom security settings, and you can add your custom ESET settings there too)
• on Addons, uBlock Origin would be interesting

 

[CyberDevil]

you should add something like Simple Windows Hardening atleast

Why should he? We don't know exactly how the author set up Eset. If he has already protected important folders, prohibited access to the network for LOLBins, and also limited the ability to execute scripts, then doing something else is completely optional

(you can use a system-wide adblocker too like Adguard)

It seems to me that this is not the best advice. Eset already filters HTTPS by installing its root certificate, if AdGuard gets in there, it can cause both MITM vulnerabilities and simply slowing down the opening of web pages.

 

[Thiagoo]

Why should he? We don't know exactly how the author set up Eset. If he has already protected important folders, prohibited access to the network for LOLBins, and also limited the ability to execute scripts, then doing something else is completely optional

This is why i asked to see OP ESET settings.

It seems to me that this is not the best advice. Eset already filters HTTPS by installing its root certificate, if AdGuard gets in there, it can cause both MITM vulnerabilities and simply slowing down the opening of web pages.

Just did a quick search and found out that Adguard won't work properly with ESET. I'll edit the post above

source is ESET forums:

Spoiler

 

[CyberDevil]

This is why i asked to see OP ESET settings.

Oh, I'm reading too fast as usual, sry

Just did a quick search and found out that Adguard won't work properly with ESET. I'll edit the post above

Quite an expected problem. Although I believe that it can be solved if user completely disable HTTPS filtering in Eset or add an AdGuard certificate to a trusted one, but I would not recommend doing this, I think it's better to just use a filtering DNS, and complex cases leave for the extension in the browser.

 

[KonradPL]

nice and pc specs?

is there in pc spec

 

[KonradPL]

• Set your system as Windows Insider Preview if you use Windows 11
• Custom RTP, Firewall and OS settings, you should add something like Simple Windows Hardening atleast, it's a great addition to AV (you should remove WINDOWS11 from there as it's only for custom security settings, and you can add your custom ESET settings there too)
• on Addons, uBlock Origin would be interesting

is it set as well
i use firewall from eset with interactive mode and rules against ransomware from bizness products
i prefer adguard Premium for windows

 

[ForgottenSeer 85179]

is it set as well
i use firewall from eset with interactive mode and rules against ransomware from bizness products
i prefer adguard

As anupritaisno1 already wrote, a firewall / firewall rule doesn’t protect against ransomware. Don’t know why you are thinking that.
Even trusting on an AV isn’t good nor recommend . Just harden your system that malware can’t start and you’re done.

Windows also provide CFA which you should enable if you want such kind of protection. It’s also compatible with OneDrive

 

[KonradPL]

As anupritaisno1 already wrote, a firewall / firewall rule doesn’t protect against ransomware. Don’t know why you are thinking that.
Even trusting on an AV isn’t good nor recommend . Just harden your system that malware can’t start and you’re done.

Windows also provide CFA which you should enable if you want such kind of protection. It’s also compatible with OneDrive

as i wrote before, i hardened windows by hips rules too. And more have disabled smb, powershell 2.0, internet explorer, remote access

 

[Thiagoo]

I would call this setup "at risk" since it uses an experimental version of the windows OS and heavily relies on badness enumeration which doesn't work during actual malware attacks

I don't get it. What do you mean? Millions of insiders are at risk then?

 

[harlan4096]

Probably

 

[ForgottenSeer 85179]

I don't get it. What do you mean? Millions of insiders are at risk then?

That’s not the point.
Problem with such test builds is they’re not security focused.

so yes, technically they’re at risk. That’s why insider/ test builds generally are never recommend for daily devices

 

[Thiagoo]

That’s not the point.
Problem with such test builds is they’re not security focused.

so yes, technically they’re at risk. That’s why insider/ test builds generally are never recommend for daily devices

They are not security focused, but i assume the security is the same as a stable build of 10, unless they constantly change the security part of the OS. Honestly I've never seen MS saying Insider builds are not recommended because it's unsafe, only because it's unstable.

 

[Thiagoo]

Beta software will almost certainly have terrible bugs that compromise system security. If you use beta software, expect a ton of these bugs

I still can't see a scenario where Insider build users are targetted for attacks.

 

[ForgottenSeer 85179]

They are not security focused, but i assume the security is the same as a stable build of 10, unless they constantly change the security part of the OS. Honestly I've never seen MS saying Insider builds are not recommended because it's unsafe, only because it's unstable.

Well, Microsoft will never say anything like that but they’re not recommend unstable builds for daily driver