Danger Nagisa Security Config 2021

[Nagisa]

From your setup:

Good luck. You will need it.

Not having real time protection and sharing the PC with family members is literally the best way to get 500 fresh samples of PUPs and adwares.

It’s even grossly negligent.

You know, not everybody is a click-happy user. Some have common sense, and I told them to not click on/run any unusual thing without my permission.

"Other users: Other accounts are Admin users"

It seems that other users use other (non-SUA) accounts. So, the SUA account is less safe than usual.

fixed that now

 

[Thiagoo]

You know, not everybody is a click-happy user. Some have common sense, and I told them to not click on/run any unusual thing without my permission.

If you don't use an AV because you have common sense you should think again. Vulnerabilities can get into your PC and place a backdoor there, you'll never know if you're infected or not, and a security solution can detect and disinfect it. You don't even need to use a third party AV, you can just use Windows built-in security (and do some hardening if you want).

 

[Nagisa]

Vulnerabilities can get into your PC and place a backdoor there, you'll never know if you're infected or not, and a security solution can detect and disinfect it.

I don't get browser sandbox escapes daily, but sure if that happens, I rather reinstall the Windows instead of relying on AV.

 

[Thiagoo]

This just sounds like pointless fear mongering at this stage

I'm sorry but you just can't self-title yourself a security professional if you encourage the "common sense over AV" fallacy.

 

[Andy Ful]

...
Merely implementing a strict SRP and not allowing standard users to elevate is often way more secure than any antivirus
...

This will work only with software based on Microsoft Store, and software that can update via Task Scheduler or Windows Updates with high privileges (I use it on my wife's computer, but also with Defender).
Such setup would not be strictly non-AV, because of the anti-phishing & antimalware protection implemented in the web browser and Windows SmartScreen which comes from Microsoft ISG.

The AV vendors would already implement such protection if they want. But, they know, that only a negligible amount of people would use it (no profit for them). That is why Windows 10 S was unpopular due to the lack of support for desktop applications.

 

[Nagisa]

It was a good idea, I set up SRP to prevent unlucky incidents. I left the deny-elevation-on-SUA setting disabled though, as it will going to annoy me too much.