Advanced Plus Security Sampei Nihira Security Config 2026

[lokamoka820]

Are there any benefits to using Firefox or a Firefox-based browser if your main browser is Chromium-based? After all, everything should be compatible on Chromium, so what purpose does using Firefox serve?

 

[Sampei.Nihira]

@Halp2001

To reduce bloat.
I prefer shell extensions to be as clean as possible.

Although Didier Stevens demonstrated,ages ago,that an overly bloated shell could pose security risks, I don't believe those arguments hold water today.

@lokamoka820

I prefer to have a non-Chromium browser as a backup if I use a Chromium-based browser as my main browser.

 

[Sampei.Nihira]

Added the Download Sentinel extension to Brave.
Removed the subscription to the Online Malicious URL Blocklist.

 

[Sampei.Nihira]

I waited 34 minutes, and even though I enabled the

• “Online Malicious URL Blocklist”

filter list in uBo-Firefox, the malware isn't being blocked:



Test:

hxxps://urlhaus.abuse.ch/url/3873949/


The malware will eventually be blocked by the filter list, but with relatively new malware, this may not happen.
So don't trust the “online” filter list.

 

[Sampei.Nihira]

I ran a new test with Firefox using this malware, which has been running for more than 6 hours:

hxxps://urlhaus.abuse.ch/url/3875188/

No blocks from the “Online Malicious URL Blocklist”.

Instead, he is blocked by Osprey:



Only PP's enabled:

• AlphaMountain Web Protection
• URL haus List
• URL Abuse List

Added Osprey to Firefox.
The extension will only be enabled when a download is needed.

P.S.

The malicious file is blocked by Google Safe Browsing at the end of the download.

 

[LinuxFan58]

No blocks from the “Online Malicious URL Blocklist”.

The list is only update in uBlockOrigin every 12 hours

Spoiler: Download Sentinel :-)

 

[Sampei.Nihira]

The list is only update in uBlockOrigin every 12 hours
View attachment 298374

Spoiler: Download Sentinel :-)

View attachment 298373

12 hours is too long; the list is useless in ubo and even more useless in uBoL.
Considering that the malicious webpage isn’t blocked even by NextDNS - HaGeZi Multi Ultimate, and it’s probably just a fluke that the malicious download is blocked by Google Safe Browser, I’ve decided to add the Osprey extension to Firefox to improve security, especially during downloads.

Even though I use Firefox to download files very rarely.

 

[Sampei.Nihira]

Removed Osprey from Firefox due to a blocking inconsistency.
What was blocked yesterday is allowed today.

P.S.

Even the AI advised me not to add similar extensions to Firefox.

 

[Sampei.Nihira]

Removed "Search Engine Blocker" extension to Brave.
After Brave is closed and reopened, inactive shortcuts are removed:

 

[Moonhorse]

How come you dont use edge? As the setup is hardened defender + HC, youre advanced guy and can setup such anti-exploit features to edge. And smartscreen is enough for blocking malicious sites anyways and it seems you have nextdns wich will catch everything

 

[Sampei.Nihira]

How come you dont use edge? As the setup is hardened defender + HC, youre advanced guy and can setup such anti-exploit features to edge. And smartscreen is enough for blocking malicious sites anyways and it seems you have nextdns wich will catch everything

Hi,
I used Edge for a long time, but it eventually became too bloated, with too many bugs after every update, and my list of policies kept getting longer and longer as I tried to eliminate the bloat.
Plus, sooner or later it will drop support for uBo.