Advanced Plus Security Numeriku's PC Security Config

PC Setup Configuration Help & Showcase
33 Replies 7,482 Views
Original forum configuration · expand details
Last updated
Jun 20, 2023
Main use of this computer
For home and private use
Operating system
macOS 15 Sequoia
On-device encryption
Not applicable
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Network firewall
Enabled
Real-time protection
Bitdefender Total Security
ISP - Issued router flashed with dd-wrt with wifi disabled & connected using an ethernet cable to the pc.
Device firewall
Other - Internet Security (3rd-party)
Custom security settings
Firewall Hardening by Andyful (lolbins)
O&O ShutUp10++ - All on recommended set.
Simple Windows Hardening.
Memory Integrity is turned on.
Periodic malware scanners
Norton Power Eraser
Emsisoft Emergency Kit
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browsers and extensions
Firefox with Ublock Origin.
Secure DNS
Cloudflare
Desktop VPN
Bitdefender VPN.
Password and passkey manager
Bitwarden
Maintenance tools
Hibit Uninstaller Tools to clean pc monthly.
File and photo backups
Google Drive
System recovery
Create a bi-monthly backup using macrium reflect free uploaded to hetzner storage box so if my machine ever gets infected and unusable, I won't lose everything.
Usage and exposure
    • Visiting familiar websites
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Streaming from untrusted sites
Computer specs
  • AMD Ryzen 5 5600
  • NVIDIA GeForce RTX 3050
  • 16GB Dual-Channel DDR4
  • 1 TB NVME
Notable changes
  1. Added simple windows hardening (thank you securekongo)
  2. Downgraded back to windows 10
  3. Removed winaero tweaker.
  4. Switched to next DNS from cloudflare dns
  5. Added Checkmal's Appcheck
  6. Switched search from google to duckduckgo
  7. Switched back again to cloudflare dns.
  8. Switched back search to google
  9. Removed appcheck anti ransomware.
  10. Added NeuShield Data Sentinel
  11. Replaced NeuShield Data Sentinel with Kaspersky's anti ransomware tool
  12. Removed KART and F-Secure, replaced with Avast Premium Security.
  13. Replaced Avast Ultimate with Kaspersky Total Security
  14. Replaced ublock origin with Adguard
  15. Replaced old pc with new pc, installed avast premium with hardened mode and using my old security config on the new one, windows 11 sac currently on evaluation mode.
  16. Replaced Avast premium with Bitdefender Total Security
Feedback preference

Suggestions on the main improvements

SecureKongo said:
Consider adding Simple Windows Hardening for additional malicious scrip protection. Also, you chose the wrong option in the category "Software Firewall" :)
Click to expand...
Fixed that, i assume that windows defender firewall is the correct option. Thanks.

Yeah, I've been reading about Simple windows hardening, my primary concern is that I have to whitelist programs manually but is that worth it to have in a daily use PC?
 
Added Simple Windows Hardening (thanks to @SecureKongo & @Back3 for convincing me)

1660070923435.png
 
Azriel said:
absolutely not. It won't provide any security and it will make browsing extremely slow as it is huge. You should not use any security filter in block origin.
Click to expand...
I tried like you said on ublock and it does slow down browsing, also tried it through nextdns and it's working great with no noticeable slowdown, will keep testing for a couple of days to see if I will keep using it.
 
Numeriku said:
Decided to revert my windows 11 due to the fact my hardware is unsupported, tried it out but saw no major differences, and now back to windows 10.
Click to expand...
Good decision. Usually people rush to upgrade because they always want the latest and "greatest". In Windows 11 case, it is not the greatest. Windows 10 is more mature and is capable of doing everything so why upgrade?
 
Numeriku said:
Moved back to Cloudflare DNS, I think with the existing filters in ublock and O&O ShutUp10++, it is just adding redundant layers of blocking.
Click to expand...
I mean if you set up NextDNS on your router or system-wide it even blocks ads and trackers within applications. Cloudflare DNS doesn't have that option. Furthermore one of the strenghts of NextDNS are the security filter lists. But if you prefer Cloudflare then that's okay too. Never had any problems with Cloudflare either.
 
SecureKongo said:
I mean if you set up NextDNS on your router or system-wide it even blocks ads and trackers within applications. Cloudflare DNS doesn't have that option. Furthermore one of the strenghts of NextDNS are the security filter lists. But if you prefer Cloudflare then that's okay too. Never had any problems with Cloudflare either.
Click to expand...
I do agree that NextDNS is a great option. Unfortunately, my ISP provided router does not support changing the DNS. Thus, add NextDNS manually to secure DNS settings in my browsers. The windows client had DNS leak issues for me. Apparently, my ISP is so aggressive against changing DNS.

NextDNS with Osid filter is superb.
 
SecureKongo said:
I mean if you set up NextDNS on your router or system-wide it even blocks ads and trackers within applications. Cloudflare DNS doesn't have that option. Furthermore one of the strenghts of NextDNS are the security filter lists. But if you prefer Cloudflare then that's okay too. Never had any problems with Cloudflare either.
Click to expand...
Yeah, it is nice to use, but 99.9% of my time is on the browser and DNS-based adblocker doesn't block certain sites that have video ads like youtube, as for security, already have f-secure browser protection and some filters from browser-based AdBlock unlock origin. Didn't really abandon it though, on my other router for phones, smart tv & console, I switched it to next dns as I think it would be better for those kinds of devices.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top