Advanced Plus Security markstitovits's Security Configuration 2024

[markstitovits]

I am currently testing 3rd party firewall software. I've tested a few before, I'll be accepting recommendations happily.

 

[Kongo]

I am currently testing 3rd party firewall software. I've tested a few before, I'll be accepting recommendations happily.

Solid config but I'd recommend you to set UAC to Always Notify to prevent UAC bypasses.
Also, there is no need for using Sophos Scan & Clean + HitmanPro as both are basically the same, while HitmanPro uses Sophos and Bitdefender engine and Sophos Scan & Clean only uses the Sophos engine. If you paid for HitmanPro then you should get rid of Sophos Scan & Clean.
And lastly you should think about wether you really need the Facebook Container extension when there is Total Cookie Protection enabled by default for all users nowadays:

Firefox 86 Introduces Total Cookie Protection – Mozilla Security Blog

Total Cookie Protection is a major anti-tracking advance in Firefox that confines cookies to the site where they were created.

blog.mozilla.org

 

[markstitovits]

Solid config but I'd recommend you to set UAC to Always Notify to prevent UAC bypasses.
Also, there is no need for using Sophos Scan & Clean + HitmanPro as both are basically the same, while HitmanPro uses Sophos and Bitdefender engine and Sophos Scan & Clean only uses the Sophos engine. If you paid for HitmanPro then you should get rid of Sophos Scan & Clean.
And lastly you should think about wether you really need the Facebook Container extension when there is Total Cookie Protection enabled by default for all users nowadays:

Firefox 86 Introduces Total Cookie Protection – Mozilla Security Blog

Total Cookie Protection is a major anti-tracking advance in Firefox that confines cookies to the site where they were created.

blog.mozilla.org

Thank you for your feedback!

 

[harlan4096]

Also, in Emergency recovery plan, I would use a full image system backup solution, that allows You to recover the full system very fast just with a few clicks.

 

[Mystic]

Also, in Emergency recovery plan, I would use a full image system backup solution, that allows You to recover the full system very fast just with a few clicks.

Yes there is always a giveaway for AOMEI Backupper Pro and it is decent and easy-to-use. It saved me many times.

 

[markstitovits]

All the recent changes listed:

Spoiler

9/13/2022
+ Took a few community suggestions after making this thread.
9/30/2022
+ Bitdefender Total Security
- Microsoft Defender(DefenderUI)
10/14/2022
- Cookie AutoDelete from Firefox
- Facebook container from Firefox
10/18/2022
+Librewolf
10/21/2022
+ProtonVPN(always on)

 

[markstitovits]

Applied Enhanced Easy Mode to uBlock origin.

 

[Kongo]

I think it deserves the "Advanced Plus Security" rating now. Right? @harlan4096

 

[harlan4096]

Yes, sorry! I had it in mind indeed, but my fault, I selected the wrong tag hehe! fixed!

 

[markstitovits]

I think it deserves the "Advanced Plus Security" rating now. Right? @harlan4096

Thank you for your feedback, I appreciate it!

 

[markstitovits]

+ Added NoScript to LibreWolf.
Switched to Adguard DNS + Quad9 DoH

I have been thinking a lot between Adguard DNS and Quad9 DNS a lot recently. So I have Adguard in my router settings and Quad9 DoH in LibreWolf. Adguard has pretty good ad and tracking protection while quad9 have great malware protection. I'd appreciate some advice or your personal thoughts in terms of DNS providers, thanks. I know that NextDNS would be perfect for me, but I'm trying to avoid paid options, since I'm still a student.

 

[oldschool]

I'd appreciate some advice or your personal thoughts in terms of DNS providers, thanks. I know that NextDNS would be perfect for me, but I'm trying to avoid paid options, since I'm still a student.

You're fine as is, so long as your happy with your setup. I myself use Quad9 DOH in Windows and µBO in Firefox and LibreWolf. Simple and free.

 

[markstitovits]

1/6/23 - Updated browser and DNS configuration

 

[markstitovits]

Updated for 2023 config:
Switched to Eset Internet Security
Switched to AdGuard Public DNS + DoH
Added MS defender to periodic scanning (automatic)
Added router configuration
Updated risk factors
Updated default browser settings
Updated custom security settings

I am looking forward for reviews, improvements and tips on my current setup

 

[Kongo]

Updated for 2023 config:
Switched to Eset Internet Security
Switched to AdGuard Public DNS + DoH
Added MS defender to periodic scanning (automatic)
Added router configuration
Updated risk factors
Updated default browser settings
Updated custom security settings

I am looking forward for reviews, improvements and tips on my current setup

You might want to take a look at dns0. It's basically the free version of NextDNS. Might be a better option than Adguard DNS.

The European public DNS that makes your Internet safer.

A free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security to protect the citizens and organizations of the European Union.

www.dns0.eu

 

[markstitovits]

You might want to take a look at dns0. It's basically the free version of NextDNS. Might be a better option than Adguard DNS.

The European public DNS that makes your Internet safer.

A free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security to protect the citizens and organizations of the European Union.

www.dns0.eu

I remember reading an article about it when it was still unreleased. I'm definitely trying it out! Thanks <3

 

[SeriousHoax]

You might want to take a look at dns0. It's basically the free version of NextDNS. Might be a better option than Adguard DNS.

The European public DNS that makes your Internet safer.

A free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security to protect the citizens and organizations of the European Union.

www.dns0.eu

Looks like dns0 doesn't block ads. So, it depends on what he wants. Ads & tracker blocking or better malware & phishing blocking.

 

[Kongo]

Looks like dns0 doesn't block ads. So, it depends on what he wants. Ads & tracker blocking or better malware & phishing blocking.

True, but he is using uBlock Origin + Firefox tracking protection which should be enough.

 

[TairikuOkami]

Windows Backup is deprecated since Windows 7, even MS suggest to use 3rd party software. Try EaseUS Todo, free version has PreOS, so you do not need to create a bootable disc.
WinDirStat was last updated in 2007, you might want to replace it with something newer (WizTree/TreeSize), it has problem displaying system partitions, System & reserved files, etc.
TCPView shows active TCP/UDP connections, but it will not show all connections, try to update time, UDP via 123, thus I am using TCP UDP Watch by Nirsoft, it logs everything.

 

[markstitovits]

Windows Backup is deprecated since Windows 7, even MS suggest to use 3rd party software. Try EaseUS Todo, free version has PreOS, so you do not need to create a bootable disc.
WinDirStat was last updated in 2007, you might want to replace it with something newer (WizTree/TreeSize), it has problem displaying system partitions, System & reserved files, etc.
TCPView shows active TCP/UDP connections, but it will not show all connections, try to update time, UDP via 123, thus I am using TCP UDP Watch by Nirsoft, it logs everything.

Thank you, I will research on those items and try them out! <3