SECURITY: Complete Protomartyr's ThinkPad Security Config 2019

Last updated
Dec 8, 2019
Windows Edition
Home
Sign-in identity
Sign-in with Local account
Log-in security
    • Account password
Permissions
Administrator user account
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Malware samples
No - malware is not downloaded
Firewall protection
Microsoft Defender Firewall
Real-time malware protection
Windows Defender
Malwarebytes Premium (lifetime license)
RTP & OS hardening settings
Hard_Configurator (recommended settings)
ConfigureDefender (max)
Firewall Hardening (recommended rules)
Auto-lock computer when idle (registry tweak)
CleanBrowsing DNS ('Security' filter)
Periodic scanning
Emsisoft Emergency Kit
HitmanPro Free
Browsers
Chrome:
  • Chrome flags enabled for tighter security and new features
  • Cookie AutoDelete
  • HTTPS Everywhere - Encrypt All Sites Eligible enabled
  • Netcraft Extension
  • Privacy Possum
  • uBlock Origin (Medium mode; Block 3rd party requests) + Nano Defender Integration
  • Windows Defender Browser Protection

Firefox:
  • about:config tweaks for added security and privacy
  • Cookie AutoDelete
  • Emsisoft Browser Security
  • HTTPS Everywhere - Encrypt All Sites Eligible enabled
  • Netcraft Extension
  • Privacy Possum
  • uBlock Origin (Medium mode; Block 3rd party requests) + Nano Defender Integration
Optimisation apps
Autoruns by Sysinternals
CCleaner (Enhanced)
Revo Uninstaller
My Files & Photos backup
SyncToy with External HDD
My Files backup schedule
Manual - specific days to the cloud, or local attached storage
Device recovery & settings
Windows Backup and Restore
Device backup schedule
Manual - backups are made in my own time to local attached storage
Computer specifications
ThinkPad S1 Yoga
Intel Core i5-4200U
Intel HD Graphics
8GB RAM
128 GB SSD (System)
256 GB SSD (Documents & Media)
Device activity usage
  1. Financial and sensitive documents
  2. Generic web browsing
  3. Streaming audio and video content from the Internet
  4. Downloading files from unfamiliar sites
  5. Working from home

Protomartyr

Level 7
Verified
Sep 23, 2019
330
Added:
- Chrome flags enabled for tighter security and new features
- Malwarebytes Browser Guard (Chrome & Firefox extensions)

Removed:
- Bitdefender TrafficLight (Chrome & Firefox extensions)

Didn't like how TrafficLight was asking for more permissions.
I found out (thanks to @Digmor Crusher!) that Malwarebytes reversed their decision in requiring an email for Browser Guard.
@Fabian Wosar (from Emsisoft) made a comment here that piqued my interest. I would have went with Emsisoft Browser Security (I absolutely love the company and their work) but I haven't seen any recent evaluations of it in the browser extension comparison thread.
 

Protomartyr

Level 7
Verified
Sep 23, 2019
330
Added:
- Emsisoft Browser Security (Firefox extension)
- Windows Defender Browser Protection (Chrome extension)

Removed:
- Malwarebytes Browser Guard (Chrome & Firefox extensions)

Not sure why but was having problems with Malwarebytes Browser Guard. Both Chrome and Firefox would take a bit to resolve connections (15-30 seconds), especially at launch.
 
Top