Advanced Plus Security Nagisa Security Config 2019

[oldschool]

I suggest you to start from the extension icon title.

I'll read it again and see.

I wish there would be a test where this kind of element blockers tested against malicious codes inside a website, malvertisings or popups.

I agree. It would be interesting to see it perform with no active AV, etc.

He states that blocking 3d-party(only over the HTTP) except the images and CSS files, will make browsing much more secure. This applies to my configuration too. I'm blocking all 3rd-parties except the CSS and images.

Yes, I've been following this as well.

 

[Nagisa]

Removed:

- A lot of things

Added:

- Windows Defender, hardened via configure_defender (MAX settings, controlled folder access is disabled)
- Ublock Origin (Medium mode)

Spoiler: filters

- Javascript is only enabled on HTTPS connections. (Chrome site settings)
- Malwarebytes Browser Extension installed. (Clickbait and advertising protections are disabled)
- FortiClient installed. (webfilter module only. Unrecognized domains are set to 'warn'.)

Spoiler

 

[Nagisa]

I removed Forticlient. Decided that It's redundant while I'm using MBE and Neustar DNS.
Installed NoScript extension.
Made some changes on the Windows Defender Exploit Guard:

Mozilla Firefox 69.0b5/Plugin-Container.exe

- Block untrusted fonts
- EAF (1st checkbox selected)
- Hardened ASLR
- IAF
- SimExec
- CallerCheck
- StackPivot

Edge:

All of above + Code Integrity Protection (allow Microsoft Store signed images)

MicrosoftPdfReader.exe:

All of above +
- Block remote images
- Do not allow child processes

 

[Nagisa]

My new config.

I uninstalled everything except Defender. Installed VoodoShield and WiseVector instead. I think these three are a good combo, maybe I should consider replacing Defender with another antivirus as it is high on HDD usage as far as I remember. I'm thinking of installing Huorong, but it has weak signatures, probably weaker than Defender's. I couldn't decide which one.

 

[FrFc1908]

Windows defender hardened, voodoo shield and wisevector stopx equals total overkill if you ask me....

 

[harlan4096]

Keep hardened WD and WV as on demand scanner disabling its real-time protection... You don't need VS...

 

[FrFc1908]

Keep hardened WD and WV as on demand scanner disabling its real-time protection... You don't need VS...

I must concur with Harlan, or better yet ; get Kaspersky security cloud free, it is highly configurable if you want something else and par it up with comodo firewall with cs settings and you will have a fortress without the access weight you have momentarily..

 

[Nagisa]

Removed WV and VS. Currently using only WD, ERP v4 beta and McAfee RP as realtime protection.