Advanced Security Lenny's Security Config 2024

[ForgottenSeer 109138]

Agree, but some habits can be automated and enforced by tools. I have two chrome profiles with wo different DNS settings (with different security measures and limitations), which are my similar to using my admin and standard user account, The good habit is to use the correct profile for the intended purpose (web surfing versus trusted sites). With technology the user is always part of the solution (with good habits) or part of the problem (ignorance or over confidence), but no matter how good your driving skills or habits are, you are safer in a 5 star NCAP car than a 2 star NCAP car, you are safer with safety belt and airbag than only applying (the good habit of holding) the steering wheel firmly with two hands in the ten for two position.

Which level of awareness would you consider yourself as to how the operating system works? Now ask yourself the same awareness of the security tools you are using. Do you find yourself looking things up or asking questions to configure these tools, do you know for a fact you are doing so properly based on your knowledge of the tool and operating system. Now consider an average users that has less "awareness" then you do, do you really think they would fair well, when I'm betting you can not claim your are completely competent with both the OS and tools.

It hinges more on the habits then it does the tools. It does not matter if they are running windows default or a 3rd party suite if they lack habits and are happy go lucky clickers that just don't care. The seatbelt, airbag would all be pointless in a careless environment at highspeeds.

Safer indeed.

I wont continue this and hijack your thread anymore then we have, but there are plenty of convos on the forum conserving this.

 

[ForgottenSeer 107474]

The only program needing execution rights in user folders, moved to a web service , so I tightened Software restriction Policies to default deny

Spoiler: Hurdles malware has to pass before Defender's whitelist is tested

 

[ForgottenSeer 107474]

Moved to linux Mint permanently. Was annoyed that my new laptop on Windows 11 did not feel much faster than my old desktop on Linux Mint (with a CPU bench mark of 1/3 of my laptop). Laptop feels snappier now

When someone knows a scanner which I can use on Linux or from a browser, please feel free to post. I know of clamAV, but according to what I read ClamAV is intended for mail and my ISP already does mail scanning (in the past with Ziggo checked emails with ClamAV and Avast. and now probably with Clam and Fsecure, because they are offering a rebranded F-secure).