Advanced Security oldschool's surfing laptop configuration

[oldschool]

New year. Same simple setup.

Edge flags:

Exploit protection (thanks to @Umbra). These haven't broken anything yet, e.g. extensions crashing.

- for Brave, Edge and Firefox:

Block low integrity images - ON
Block remote images - ON
Block untrusted fonts - ON
Control flow guard (CFG) - ON
Data execution prevention (DEP) - ON + Enable thunk emulation - CHECKED
Disable extension points - ON
Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images - CHECKED
Randomize memory allocations (Bottom-up ASLR) - ON
Validate exception chains (SEHOP) - ON
Validate handle usage - ON
Validate heap integrity - ON
Validate image dependency integrity - ON

ADD for Edge Chromium only:

Code integrity guard - ON (with or without Also allow images signed by M$ Store CHECKED)

 

[show-Zi]

The security of the system seems to be a configuration that focuses on defense and monitoring of entrances and exits with the web by making full use of the functions of the MS software. You may be umbra.

 

[oldschool]

Added VoodooShield Pro 7.0 @ Autopilot

Extremely quiet with no prompts.

 

[SeriousHoax]

TinyWall v.3.2.5 | block all outbound except whitelisted apps

What are the internal Windows related apps/exe files that you have whitelisted?

 

[oldschool]

What are the internal Windows related apps/exe files that you have whitelisted?

Smartscreen, Edge, Edge Update and M$ Store.

 

[oldschool]

Removed TinyWall.

After using it for a couple of weeks, I switched to Ghostery in Edge, Firefox .

 

[Gandalf_The_Grey]

Removed TinyWall.

After using it for a couple of weeks, I switched to Ghostery in Edge, Firefox .

Why did you remove TinyWall?

 

[oldschool]

Why did you remove TinyWall?

I had printer issues after making exceptions. I uninstall when I encounter issues like this. Windows built-in = less problems.

 

[Gandalf_The_Grey]

I had printer issues after making exceptions. I uninstall when I encounter issues like this. Windows built-in = less problems.

Yes, a good decision
Keeping things simple is lost art, but I can understand that on a security forum.
We hear of all those threats and there are so many toys to play with...

 

[ForgottenSeer 92963]

Any reason to use CD + VS instead of DUI-Pro (for any other reason as not wanting to be a DUI)?

 

[oldschool]

Upgraded to W11 for trial so haven't updated configuration. Extended rollback option to 60 days.

Removed VoodooShield.

 

[Hyper78]

Upgraded to W11 for trial so haven't updated configuration. Extended rollback option to 60 days.

Removed VoodooShield.

what are your thoughts on windows 11 so far? I am still trying to decide if I should upgrade or not.

 

[oldschool]

what are your thoughts on windows 11 so far? I am still trying to decide if I should upgrade or not.

Windows 11 - First look

 

[cliffspab]

It's just like every Windows before it. It does all the same stuff in pretty much the same way, but you'll tell yourself it's a solid step in the right direction as ultimately everyone will have to upgrade and it's stupid to be the last man standing if you're interested in technology, right?

 

[Antimalware18]

If you dont mind me asking, I've noticed your using Emsisoft's browser protection, I was wondering why as opposed to something like Malwarebytes?
In my admitted limited testing Emsisoft's was good but not quite on the level as Malwarebyte's
But great setup either way

 

[oldschool]

@cliffspab indeed, it's an OS so it's like any OS. Right?

As they used to say on the street: "Everything is everything".

There's an old Buddhist maxim concerning the true nature of wisdom: Appearances are deceptive, and our opinions are unreliable.

 

[oldschool]

I've noticed your using Emsisoft's browser protection, I was wondering why as opposed to something like Malwarebytes?

Emsisoft doesn't have an impact on browsing like MB can. Plus, I don't need the best. It's good enough.

But great setup either way

Thanks!

 

[oldschool]

Upgraded to W11. I'm happy with it and see no reason to go back to 10.

And I was one of those put off by the early reports, thinking "W10 till '25"!

There is a principle which is a bar against all information, which is proof against all arguments and which cannot fail to keep a man in everlasting ignorance - that principle is contempt prior to investigation.

- Herbert Spencer

 

[ErzCrz]

Upgraded to W11. I'm happy with it and see no reason to go back to 10.

And I was one of those put off by the early reports, thinking "W10 till '25"!

- Herbert Spencer

That's great. Hopefully I'll get an upgrade compatible with Windows 11 this year

 

[oldschool]

@TairikuOkami reminded me about CleanMem in a Wilders post recently, so I'm using it again as I bought the Pro version a few years back. It helps to use RAM more efficiently with my dinky 8GB RAM on W11. How much RAM have you got?