Advanced Plus Security Numeriku's PC Security Config

PC Setup Configuration Help & Showcase
33 Replies 7,482 Views
Original forum configuration · expand details
Last updated
Jun 20, 2023
Main use of this computer
For home and private use
Operating system
macOS 15 Sequoia
On-device encryption
Not applicable
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Network firewall
Enabled
Real-time protection
Bitdefender Total Security
ISP - Issued router flashed with dd-wrt with wifi disabled & connected using an ethernet cable to the pc.
Device firewall
Other - Internet Security (3rd-party)
Custom security settings
Firewall Hardening by Andyful (lolbins)
O&O ShutUp10++ - All on recommended set.
Simple Windows Hardening.
Memory Integrity is turned on.
Periodic malware scanners
Norton Power Eraser
Emsisoft Emergency Kit
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browsers and extensions
Firefox with Ublock Origin.
Secure DNS
Cloudflare
Desktop VPN
Bitdefender VPN.
Password and passkey manager
Bitwarden
Maintenance tools
Hibit Uninstaller Tools to clean pc monthly.
File and photo backups
Google Drive
System recovery
Create a bi-monthly backup using macrium reflect free uploaded to hetzner storage box so if my machine ever gets infected and unusable, I won't lose everything.
Usage and exposure
    • Visiting familiar websites
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Streaming from untrusted sites
Computer specs
  • AMD Ryzen 5 5600
  • NVIDIA GeForce RTX 3050
  • 16GB Dual-Channel DDR4
  • 1 TB NVME
Notable changes
  1. Added simple windows hardening (thank you securekongo)
  2. Downgraded back to windows 10
  3. Removed winaero tweaker.
  4. Switched to next DNS from cloudflare dns
  5. Added Checkmal's Appcheck
  6. Switched search from google to duckduckgo
  7. Switched back again to cloudflare dns.
  8. Switched back search to google
  9. Removed appcheck anti ransomware.
  10. Added NeuShield Data Sentinel
  11. Replaced NeuShield Data Sentinel with Kaspersky's anti ransomware tool
  12. Removed KART and F-Secure, replaced with Avast Premium Security.
  13. Replaced Avast Ultimate with Kaspersky Total Security
  14. Replaced ublock origin with Adguard
  15. Replaced old pc with new pc, installed avast premium with hardened mode and using my old security config on the new one, windows 11 sac currently on evaluation mode.
  16. Replaced Avast premium with Bitdefender Total Security
Feedback preference

Suggestions on the main improvements

Lament said:
I do agree that NextDNS is a great option. Unfortunately, my ISP provided router does not support changing the DNS. Thus, add NextDNS manually to secure DNS settings in my browsers. The windows client had DNS leak issues for me. Apparently, my ISP is so aggressive against changing DNS.

NextDNS with Osid filter is superb.
Click to expand...
Flashing router with dd-wrt, is not an option? Yeah, I have next DNS on my other router with oisd list for phones, smart tv & consoles.
 
Numeriku said:
Flashing router with dd-wrt, is not an option? Yeah, I have next DNS on my other router with oisd list for phones, smart tv & consoles.
Click to expand...
As I mentioned the router is provided by my ISP and apparently they locked it down. I do not have admin privileges, instead they gave me user rights. It is a Kasada router btw. Fortunately, I can always use NextDNS via DNS over HTTPS in my browsers.
 
Lament said:
Unfortunately, only cheap TPlink routers are available in my country. KW5262B is the model number of my router.
Click to expand...
It doesn't matter. get it that support it so you need to learn it i guess. have you tried username/password: admin? google it?
 
Numeriku said:
Yeah, it is nice to use, but 99.9% of my time is on the browser and DNS-based adblocker doesn't block certain sites that have video ads like youtube, as for security, already have f-secure browser protection and some filters from browser-based AdBlock unlock origin. Didn't really abandon it though, on my other router for phones, smart tv & console, I switched it to next dns as I think it would be better for those kinds of devices.
Click to expand...
How's like Numeriku?
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top