Advanced Security oldschool's surfing laptop configuration

Last updated
Nov 14, 2024
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
Windows Pro
On-device encryption
N/A
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
Evaluation mode
Network firewall
Enabled
About WiFi router
Provided by ISP
Real-time security
Windows Security
Firewall security
Microsoft Defender Firewall
About custom security
MS Defender - Default | ASR rules | Platform & Engine Beta channel updates
All system-wide Exploit Protections enabled, plus these for Edge & Chrome.
Firewall Hardening
RunBySmartscreen
Windows Spy Blocker
Periodic malware scanners
NPE
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Chrome | Privacy Badger | Brave Search
Edge | Privacy Badger | Brave Search | Surf profile & secure profile
Chrome flags | Edge flags
Secure DNS
Quad9 DNS
Desktop VPN
None
Password manager
Maintenance tools
Windows built-in
File and Photo backup
Copy/Paste
Subscriptions
    • None
System recovery
Aomei Backupper Pro Lifetime - Primary
Wiindows Backup & Restore- Secondary image backup
Risk factors
    • Browsing to popular websites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Lenovo L340 Intel(R) Core(TM) i3-8145U CPU @ 2.10GHz 2.30 GHz 16GB RAM 500GB SSD 1TB HDD
Notable changes
22-12-5 Reverted to MS Defender.
23-1-21 Refreshed Windows with SAC in evaluation mode.
23-2-2 Clean Windows installation
23-2-18 SAC user-enabled on
27-2-23 Added Chrome for the lack of 'feature' bloat.
28-2-23 Changed default browser to Chrome
24.2.24 Refreshed Windows and re-enabled Smart App Control
5.7.24 Performed a repair installation via Windows Update. Nice & easy!
6.10.24 Updated to 24H2 OS build 26100.1882
10.10.24 Rolled back to 23H2 due to bugs & performance
16.10.24 Added Chrome browser. Privacy Badger listed as main extension, but I also keep µBO, JShelter and Local CDN installed, not enabled.
What I'm looking for?

Looking for minimum feedback.

Digmor Crusher

Level 25
Verified
Top Poster
Well-known
Jan 27, 2018
1,410
Edited configuration to reflect my move to SSD for my C Drive mentioned in above post.
  • OS - Window 11 23H2
  • MS Defender set to default
  • Exploit Protection set to default
  • Edge & Chrome browsers only
  • Aomei Backupper Pro and Windows Backup & Restore for imaging
Current setup reflects my desire to quit with the "privacy" and security nonsense.
Yup, keep it simple.
 

simmerskool

Level 37
Verified
Top Poster
Well-known
Apr 16, 2017
2,613
@enaph I forgot earlier, but the other reason I didn't install it when I set up Windows is that one of the last updates deleted my passwords and changed some settings. I was pissed!
in linux it is easy to see that Brave install wants to (tries to force) use of system password controls (keychains...)(paraphrase...)
 

oldschool

Level 85
Thread author
Verified
Top Poster
Well-known
Mar 29, 2018
7,613
re kiss: what value does Chrome bring not already brought by Edge?
It's the first to get security updates, it's not bloated, easiest to configure, has Safe Browsing real time protection, and it works best in terms of security with all things Google, like Gmail, etc.
 

simmerskool

Level 37
Verified
Top Poster
Well-known
Apr 16, 2017
2,613
It's the first to get security updates, it's not bloated, easiest to configure, has Safe Browsing real time protection, and it works best in terms of security with all things Google, like Gmail, etc.
ok thanks. I don't use gmail -- I used to use chrome more often for YouTube, but firefox seems to do ok with YT at least in windows.
 

oldschool

Level 85
Thread author
Verified
Top Poster
Well-known
Mar 29, 2018
7,613
Regarding my drift towards Chrome:
We recommend against trying to achieve browser privacy and security through piling on browser extensions and modifications. Most privacy features for browsers are privacy theater without a clear threat model and these features often reduce privacy by aiding fingerprinting and adding more state shared between sites. Every change you make results in you standing out from the crowd and generally provides more ways to track you. Enumerating badness via content filtering is not a viable approach to achieving decent privacy, just as AntiVirus isn't a viable way to achieving decent security. These are losing battles, and are at best a stopgap reducing exposure while waiting for real privacy and security features.
GrapheneOS usage guide
 

Vitali Ortzi

Level 24
Verified
Top Poster
Well-known
Dec 12, 2016
1,368
reference Vanadium subproject -- mobile I'm in iPhone world... for the most part, it just works (I guess) :unsure:
Everyone uses WebKit on iphone and WebKit isn't bad at all and only engine so far that is competitive with Google unlike gecko
(Open source are cooking servo to be top 1 engine but it will take more then a decade and by then google might create a whole new engine too XD)
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top