Advanced Security oldschool's cheapo laptop configuration

Last updated
Feb 4, 2026
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
Windows Pro
On-device encryption
N/A
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
On
Network firewall
Enabled
About WiFi router
Provided by ISP
Real-time security
Windows Security
Firewall security
Microsoft Defender Firewall
About custom security
MS Defender | Platform & Engine Beta channel updates
Cloud Protection Level - Block
ASR rules
Exploit Protection Settings
Firewall Hardening Tool
Controlled Folder Access - Added Start Menu, Start Menu > Programs, and Quick Launch folders.
RunBySmartscreen

Windows Security - A Github page by a former MT member with links to relevant MS documentation.
Periodic malware scanners
NPE, Sophos Scan & Clean, Eset Online Scanner
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Ungoogled Chromium | Privacy Badger | UBOL* | McAfee Web Advsior | Brave Search | Chrome Web Store
* I use Privacy Badger on all websites and UBOL "On click" via browser's menu access control.

Ungoogled Chromium flags

Firefox | µBO | Brave Search

Edge | µBO | GPC Enabler | Brave Search
Edge flags
Secure DNS
Quad9 DNS
Desktop VPN
None
Password manager
Maintenance tools
Windows built-in
File and Photo backup
Copy/Paste
Subscriptions
    • None
System recovery
Aomei Backupper Pro Lifetime - Primary
Wiindows Backup & Restore- Secondary image backup
Risk factors
    • Browsing to popular websites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Lenovo L340 Intel(R) Core(TM) i3-8145U CPU @ 2.10GHz 2.30 GHz 16GB RAM 500GB SSD 1TB HDD
Notable changes
22-12-5 Reverted to MS Defender.
23-1-21 Refreshed Windows with SAC in evaluation mode.
23-2-2 Clean Windows installation
23-2-18 SAC user-enabled on
27-2-23 Added Chrome for the lack of 'feature' bloat.
28-2-23 Changed default browser to Chrome
24.2.24 Refreshed Windows and re-enabled Smart App Control
26.2.2 Replaced Chrome with Ungoogled Chromium
26.2.2
9.25 Updated to 25H2 via Enablement package.
5.7.24 Performed a repair installation via Windows Update. Nice & easy!
6.10.24 Updated to 24H2 OS build 26100.1882
10.10.24 Rolled back to 23H2 due to bugs & performance
16.10.24 Added Chrome browser with Privacy Badger
5.1.25 Reset PC and enabled Smart App Control
2.4.26 Ungoogled Chromium as default browser
What I'm looking for?

Looking for minimum feedback.

Returned to Ungoogled Chromium as a chromium option since it properly deletes device data on exit.

That is all.
Is anyone using Chromium, not ungoogled Chromium, not Chrome.
It's always ahead of updates!

Screenshot_3-2-2026_12548_www.softpedia.com.jpeg
 
Is anyone using Chromium, not ungoogled Chromium, not Chrome.
It's always ahead of updates!

View attachment 295314
I didn't consider it though I know about it. It's definitely an option. Manual updating is still required.

I'll look into it again. Thanks for the reminder!
 
I did not know this shortcoming; thank you for informing.
Ungoogled Chromium (Eloston) is at v xxx.7559.109 vs ungoogled chromium (Marmaduke) is at xxx.7559.103 vs regular chromium (Hibbiki) is at xxx.7559.110. If you want true chromium it's like having Chrome Dev or Canary as they release almost daily.

So I'm sticking with Eloston version for now. Once it's setup it's a no-brainer to update because it installs over the top, and keeps your configuration intact.

Note that some functionality is broken or missing, e.g. Hulu video, etc.
 
Last edited:
@Parkinsond - FYI, I found the following info here Ungoogled Chromium Extension Installation and Update Guide #3472

#Keeping Your Web Browser Up to Date

To keep extensions up to date, you must keep your browser up to date. If you did not install Ungoogled Chromium from a store, you will need to update it manually. To update manually, refer to the list below.
Links for download and installation instructions are as follows:

.... If you want to automatically update Ungoogled Chromium, you can use ungoogled-updater Python script that creates a Task Scheduler on Windows.
You can read about downloading and updating extensions on the same page. I use the NeverDecaf extension to handle both functions. Very simple.
 
Last edited:
@Parkinsond and @oldschool
Easiest is to install Brave or Chrome and copy the widevinecdm folder into (same subfolder of) UnGoogled (worked for me in Linux)
It's so funny, I just did that and then saw your post. It works great! (y)(y)

CrapAI gave some junk answer when queried.
 

You may also like...