Advanced Security oldschool's surfing laptop configuration

[oldschool]

Changes to check Defender performance:

Added VoodooShield Pro @ autopilot
Defender @ default

 

[blackice]

Changes to check Defender performance:

Added VoodooShield Pro @ autopilot
Defender @ default

I keep considering alternatives and come back to Defender + OSA or VS being cheaper and more trouble free.

 

[blackice]

Are you still liking Ghostery as a simple no fuss solution?

 

[oldschool]

Are you still liking Ghostery as a simple no fuss solution?

Yes. Trying to prevent all forms of tracking generally is futile.

 

[blackice]

Yes. Trying to prevent all forms of tracking generally is futile.

Agreed, I don't even care too much about ads. I'm getting too tired for this, sometimes I just want to go back to being ignorant about all of this.

 

[oldschool]

Agreed, I don't even care too much about ads. I'm getting too tired for this, sometimes I just want to go back to being ignorant about all of this.

Indeed, it's Privacy Fatigue. BTW Ghostery seems faster than Adguard in my recent comparison.

 

[oldschool]

I'm using Brave more since they fixed the side panel feature to show bookmarks. Previously it only showed saved reading list. Brave is incredibly fast too.

Using Material Theme Dark [blue-grey] as it's the easiest on my eyes.

Also sticking with the default MS Defender + VoodooShield setup because it's simple and problem-free.

 

[oldschool]

Said goodbye to VoodooShield. Fying solo with M$ Defender.

Also using the just released Alpha 10 version of Mindfulness at the computer. NIce, simple reminder to keep breathing!

 

[blackice]

Said goodbye to VoodooShield. Fying solo with M$ Defender.

Also using the just released Alpha 10 version of Mindfulness at the computer. NIce, simple reminder to keep breathing!

Still being mindful at default with MD?

Edit: never mind just saw the change in your config. Looks good and simple.

 

[ErzCrz]

Said goodbye to VoodooShield. Fying solo with M$ Defender.

Also using the just released Alpha 10 version of Mindfulness at the computer. NIce, simple reminder to keep breathing!

Always a inspiration for a simpler secure config. I still run uBO in a tweaked hard mode no matter which protection setup I'm using though I may revert to the older nooped medium mode for less hassle. Anyway, really considering going back to a simpler MD H_C config.

P.S. Mindful thing looks interesting.

 

[SeriousHoax]

Defender @ default

Defender at default is not too bad. My PC runs more smoothly in default settings than configured to high. But PUP protection should be enabled which I guess you have and I prefer setting extended cloud timeout to 60 seconds to make sure something unknown gets enough time to be checked by the cloud AI.

 

[blackice]

Defender at default is not too bad. My PC runs more smoothly in default settings than configured to high. But PUP protection should be enabled which I guess you have and I prefer setting extended cloud timeout to 60 seconds to make sure something unknown gets enough time to be checked by the cloud AI.

Do you use gpedit for that?

 

[oldschool]

Still being mindful at default with MD?

I only use default when using VS, otherwise I use a modified High setup.

 

[Kongo]

I only use default when using VS, otherwise I use a modified High setup.

"modified" High settings?

Also, good to see that you're back. Where have you been?

 

[SeriousHoax]

Do you use gpedit for that?

No, I use Configure Defender for this or use this codes.

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" /v "MpBafsExtendedTimeout" /t REG_DWORD /d "50" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" /v "MpEnablePus" /t REG_DWORD /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "UpdateOnStartUp" /t REG_DWORD /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "ThreatFileHashLogging" /t REG_DWORD /d "1" /f

I have a bat file that contains many Windows related changes that I want to make after installing fresh Windows. It allows me to make all changes at one go without going through the settings menu. The above code is part of that, but as you can see it can be used manually too of course. These are my default MD related changes that is a must for me. If I want to enable other advanced feature, then I always have the easy to use Configure Defender.

 

[blackice]

No, I use Configure Defender for this or use this codes.

I have a bat file that contains many Windows related changes that I want to make after installing fresh Windows. It allows me to make all changes at one go without going through the settings menu. The above code is part of that, but as you can see it can be used manually too of course. These are my default MD related changes that is a must for me. If I want to enable other advanced feature, then I always have the easy to use Configure Defender.

So you leave the cloud “level of protection” at default and just raise the timeout?

What do you think is causing you slowdown?

 

[SeriousHoax]

So you leave the cloud “level of protection” at default and just raise the timeout?

What do you think is causing you slowdown?

Yeah, default at the moment. Might raise it to high a few days later to try to notice the difference in impact. I think setting cloud level to Highest aka High+ causes the most impact. MS's official documents clearly states that this will impact performance and may increase false positives. But have to say even MS at default is not as light as ESET followed closely by Norton and Kaspersky on my system excluding web page loading speed. MD's caching isn't as good (Probably intentionally due to its high cloud reliance).

 

[blackice]

Yeah, default at the moment. Might raise it to high a few days later to try to notice the difference in impact. I think setting cloud level to Highest aka High+ causes the most impact. MS's official documents clearly states that this will impact performance and may increase false positives. But have to say even MS at default is not as light as ESET followed closely by Norton and Kaspersky on my system excluding web page loading speed. MD's caching isn't as good (Probably intentionally due to its high cloud reliance).

Interesting, I’ve been considering running at just default and enabling PUA stuff in the GUI. It’s probably plenty for me, and if it improves performance then what the heck. I do have OSA to cover some extras, and it has zero impact, other than false positives.

 

[oldschool]

"modified" High settings?

Maybe a better name would be "Default deluxe" or "Default + ASR": Default with 60 sec. cloud check timeout, PUA and all ASR rules enabled except for those related to Office apps, which I don't use.

Updated configuration info above.

 

[Burrito]

Maybe a better name would be "Default deluxe" or "Default + ASR"

Maybe a better name would be... "The MT Living Legend's Optimized Security Masterpiece."

As a Level 66 MalwareTips Living Legend that we all look up to... we seek your wisdom and guidance.

I don't make a single security move without checking in to see what ole' Oldschool recommends.

So when you are out vacationing the world... some of us are stuck in security decision paralysis.

That is all.