Advanced Security oldschool's surfing laptop configuration

[lokamoka820]

@enaph I forgot earlier, but the other reason I didn't install it when I set up Windows is that one of the last updates deleted my passwords and changed some settings. I was pissed!

Is this happened when you tried to sync your data after windows set up?

 

[Digmor Crusher]

Edited configuration to reflect my move to SSD for my C Drive mentioned in above post.

• OS - Window 11 23H2
• MS Defender set to default
• Exploit Protection set to default
• Edge & Chrome browsers only
• Aomei Backupper Pro and Windows Backup & Restore for imaging

Current setup reflects my desire to quit with the "privacy" and security nonsense.

Yup, keep it simple.

 

[oldschool]

Is this happened when you tried to sync your data after windows set up?

Nope. I don't sync. Ever. No need.

 

[lokamoka820]

Nope. I don't sync. Ever. No need.

I removed brave after using it for 10 months, it was the longest period to use a not major browser for me, I always have doubts about its synchronization method and read complaints about wrongs in sync, but I didn't have the chance to try it myself.

 

[simmerskool]

@enaph I forgot earlier, but the other reason I didn't install it when I set up Windows is that one of the last updates deleted my passwords and changed some settings. I was pissed!

in linux it is easy to see that Brave install wants to (tries to force) use of system password controls (keychains...)(paraphrase...)

 

[simmerskool]

Nope. I don't sync. Ever. No need.

re kiss: what value does Chrome bring not already brought by Edge?

 

[oldschool]

re kiss: what value does Chrome bring not already brought by Edge?

It's the first to get security updates, it's not bloated, easiest to configure, has Safe Browsing real time protection, and it works best in terms of security with all things Google, like Gmail, etc.

Browse safely with real-time protection on Chrome

We’re bringing real-time security capabilities to Safe Browsing’s Standard protection mode and sharing updates to Password Checkup on iOS.

blog.google

 

[simmerskool]

It's the first to get security updates, it's not bloated, easiest to configure, has Safe Browsing real time protection, and it works best in terms of security with all things Google, like Gmail, etc.

Browse safely with real-time protection on Chrome

We’re bringing real-time security capabilities to Safe Browsing’s Standard protection mode and sharing updates to Password Checkup on iOS.

blog.google

ok thanks. I don't use gmail -- I used to use chrome more often for YouTube, but firefox seems to do ok with YT at least in windows.

 

[oldschool]

Edited configuration to include Exploit Protection settings, which I overlooked in my earlier post.

 

[oldschool]

Regarding my drift towards Chrome:

We recommend against trying to achieve browser privacy and security through piling on browser extensions and modifications. Most privacy features for browsers are privacy theater without a clear threat model and these features often reduce privacy by aiding fingerprinting and adding more state shared between sites. Every change you make results in you standing out from the crowd and generally provides more ways to track you. Enumerating badness via content filtering is not a viable approach to achieving decent privacy, just as AntiVirus isn't a viable way to achieving decent security. These are losing battles, and are at best a stopgap reducing exposure while waiting for real privacy and security features.

GrapheneOS usage guide

 

[simmerskool]

Regarding my drift towards Chrome:

GrapheneOS usage guide

reference Vanadium subproject -- mobile I'm in iPhone world... for the most part, it just works (I guess)

 

[Vitali Ortzi]

reference Vanadium subproject -- mobile I'm in iPhone world... for the most part, it just works (I guess)

Everyone uses WebKit on iphone and WebKit isn't bad at all and only engine so far that is competitive with Google unlike gecko
(Open source are cooking servo to be top 1 engine but it will take more then a decade and by then google might create a whole new engine too XD)

 

[oldschool]

After roughly 1 month, windows decided to turn off Smart App Control. I have one app that is unsigned, and it's from the MS Store. I suppose I don't need it.

 

[Captain Holly]

After roughly 1 month, windows decided to turn off Smart App Control. I have one app that is unsigned, and it's from the MS Store. I suppose I don't need it.

Mine is off now too. I wonder if it's a MS problem. I got an Edge update earlier today, maybe that had something to do with it. I will check my other laptop later today.

C.H.

 

[Captain Holly]

Mine is off now too. I wonder if it's a MS problem. I got an Edge update earlier today, maybe that had something to do with it. I will check my other laptop later today.

C.H.

My other laptop is still in Evaluation Mode. That makes sense because I had to clean install Windows a few days ago. The other laptop I keep in my office for personal stuff during the day does not see much use, I think I reinstalled Windows on it a few months ago and now that I think about it I believe I turned off Smart App Control myself. Both laptops work fine though, there really is no difference in their speed.

C.H.

 

[oldschool]

I decided to install VoodooShield to check out how it's progressed, after not having used it in quite some time.

 

[Vitali Ortzi]

I decided to install VoodooShield to check out how it's progressed, after not having used it in quite some time.

It's definitely improving a lot recently but for my usecase it's too aggressive

 

[ErzCrz]

I decided to install VoodooShield to check out how it's progressed, after not having used it in quite some time.

I really like it as a H_C alternative and light on resources.

Give it a little time tow whitelist in default Smart Mode and then you can swap to Always On.

You can have it create Windows Firewall Rules for unsafe items (Under Whitelist Cloud)

And hide the icon for full screen is under UI Tweaks

But you probably already knew this I like it so much I took the advantage of the double time or double devices and bought 2 years which will extend to 4 with the deal and I'd already had license to end of 2025

 

[oldschool]

It's definitely improving a lot recently but for my usecase it's too aggressive

In my case, it's overkill!

 

[Vitali Ortzi]

View attachment 286472

Give it a little time tow whitelist in default Smart Mode and then you can swap to Always On.

You can have it create Windows Firewall Rules for unsafe items (Under Whitelist Cloud)

View attachment 286473

And hide the icon for full screen is under UI Tweaks

View attachment 286474

But you probably already knew this I like it so much I took the advantage of the double time or double devices and bought 2 years which will extend to 4 with the deal and I'd already had license to end of 2025

I'm thinking of doing some combo like Symantec (firewall, ips only ) and cyberlock , hitmanpro.alert as these together should still have better performance then an av