Danger Sampei Nihira Security Config WinXP (POS Ready2009) 2020

[Sampei Nihira]

Good Morning everyone.
I just signed up and enter my security setup.
2 predefined voices cannot be adapted to my OS, so I am forced to enter the more similar ones.

 

[bribon77]

Thank you for registering, I have read you in the other forum.
Well, regarding XP, we all know that there are no updates and therefore it is vulnerable, but a person with your experience, I think so, in addition Vladimir putin uses XP.
Thanks for sharing.

 

[harlan4096]

This system is in danger by definition (Windows XP), apart from the all the extra layers of protection added... and using it for banking? and only 1 GB of RAM? this is insane

 

[Sampei Nihira]

My pc had automatic updates until April 2019.
+ KB 4500331 update for May 2019.

The email client is updated weekly.
The browser updated weekly.

 

[Sampei Nihira]

This system is in danger by definition (Windows XP), apart from the all the extra layers of protection added... and using it for banking? and only 1 GB of RAM? this is insane

Please list the configuration security flaws.
TH.

So how malware can infect my PC remotely.
Keep in mind that part of the malware circulating today is calibrated to act on 64bit PC.

 

[bribon77]

My pc had automatic updates until April 2019.
+ KB 4500331 update for May 2019.

Yes but, POS Ready2009 - 2019, it's over.

 

[harlan4096]

Also, probably there is a good amount of malware out there still running fine in XP and in general in x86 systems... apart from that, your config is very complete... but it's an unsupported system any more and We must tag is as danger and not recommend config, even with the mitigations You applied...

 

[Sampei Nihira]

Also, probably there is a good amount of malware out there still running fine in XP and in general in x86 systems... apart from that, your config is very complete... but it's an unsupported system any more and We must tag is as danger and not recommend config, even with the mitigations You applied...

Can you explain to me why the configuration of Ichito with an OS Vista received a "Secure: Complete" rating?
Vista is also an OS no longer supported.

 

[Lenny_Fox]

Why not buy a cheap digital Windows 10 license or switch to Manjaro linux? Manjaro runs great on my 10 year old laptop and you get rolling updates (even smoother than Windows 10 updates).

With an Android emulator on Manjaro, you get access to all Apps you like (e.g Outlook and Netflix).

 

[Sampei Nihira]

Why not buy a cheap digital Windows 10 license or switch to Manjaro linux? Manjaro runs great on my 10 year old laptop and you get rolling updates (even smoother than Windows 10 updates).

With an Android emulator on Manjaro, you get access to all Apps you like (e.g Outlook and Netflix).

I already have a Windows 10 PC:

What is your security setup these days?

Finally made the move to Windows Security coupled with Malwarebytes 4 (lifetime licence). Also EEK & AdwCleaner for on-demand scans. Despite...

www.wilderssecurity.com

and unfortunately linux bores me.
My daughter was the first child in my city to use a linux distro from middle school to high school.

But there is no such need, my PC with Windows XP is perfectly safe.
And surpass Windows 10 in privacy.

So as long as it is "alive" I will continue to use it with satisfaction.

 

[Sampei Nihira]

Can you explain to me why the configuration of Ichito with an OS Vista received a "Secure: Complete" rating?
Vista is also an OS no longer supported.

@ to all Security Staff

There is someone from the staff who can explain to me this disparity of judgment regarding the security configuration that I mentioned in the example?
TH.

@ to all Security Staff

Well you have changed the rating of the security configuration of Ichito.
I sincerely hope that you have done this NOT to avoid an obvious disparity, and above all NOT because the PC with Windows Vista of Ichito is "dead".

 

[Jack]

@ to all Security Staff

There is someone from the staff who can explain to me this disparity of judgment regarding the security configuration that I mentioned in the example?
TH.

Hello @Sampei Nihira,
We've decided a while ago that if a user is running an operating system that doesn't receive security updates, it will be marked as a dangerous security configuration. If new configs are created with an operating system that isn't supported, it will receive the red "Danger" tag.

We do understand that you've taken all the steps to secure your operating system, and most likely you're 100% safe, however, this is basically not related to the config itself but to the operating system.
You clearly know what you are doing and how to stay safe, and your system specs won't allow you to install Windows 10, so you can ignore that red tag.

 

[Sampei Nihira]

Hello @Sampei Nihira,
We've decided a while ago that if a user is running an operating system that doesn't receive security updates, it will be marked as a dangerous security configuration. If new configs are created with an operating system that isn't supported, it will receive the red "Danger" tag.

We do understand that you've taken all the steps to secure your operating system, and most likely you're 100% safe, however, this is basically not related to the config itself but to the operating system.
You clearly know what you are doing and how to stay safe, and your system specs won't allow you to install Windows 10, so you can ignore that red tag.

Hi Jack, so you're telling me that if I published this security configuration in March 2019 I would have obtained the "Secure:complete" rating "?
Let me doubt .....
OS Windows Vista can receive monthly KB of Windows Server 2008 and have an OS updated to the present.

 

[harlan4096]

https://support.microsoft.com/en-us/help/22882/windows-vista-end-of-support

 

[Sampei Nihira]

https://support.microsoft.com/en-us/help/22882/windows-vista-end-of-support

Server 2008 Updates on Windows Vista

Like over on the Windows 8 Forums, it will be interesting to see (in one week we will know for sure) whether security updates and patches from the initial release of Server 2008 will be able to be manually applied to Windows Vista, on an ongoing monthly basis. This would extend "update support" u...

msfn.org

 

[blackice]

I think the tags are more geared towards alerting less experienced members and readers to the risk of a set up than rating your personal security competence.

 

[oldschool]

I think the tags are more geared towards alerting less experienced members and readers to the risk of a set up than rating your personal security competence.

Precisely!

 

[Sampei Nihira]

I understand your thinking.
The subforum has as its title:

"Computer Security Configuration"

therefore it is obvious that a judgment on the security configuration of the pc is expected.
When the security configuration is OK ......

 

[valvaris]

Hello @Sampei Nihira

thank you for sharing your topic / config. found some interesting programs and extensions you use.

In terms of Network security I would go a step farther and try to segment the network (Example):

Old Windows 192.168.0.1 /30 if there is only one PC that subnet allows a range of two IPs (PC NIC and Router Interface)
New Windows/Linux 192.168.1.1 /30 and up if you have more then one device try to keep the subnet as small as possible
IoT/WiFi Devices 192.168.2.1 /30 and up

That is basic subnet segmentation and adds a good amount of protection on the network side. Of course you can add another layer on top VLAN IDs. Easiest way is port based VLAN Example:

VLAN: 100 Old Windows 192.168.0.2 /30 for Router Interface LAN 1
VLAN: 200 New Windows 192.168.1.2 /30 for Router Interface LAN 2
VLAN 300 IoT / WiFi Devices 192.168.2.2 /30 for Router Interface LAN3 / WiFi

What segmentation does in that way is that you can setup a Rule-Set on the Router Firewall for each individual segment and makes maintaining it easier. The other part is that you can Route Traffic to specific Hosts in your network -Example: PC1 to PC2 and not PC3

Another side effect is performance - Since you have segments of enclosed networks the broadcast overhead is smaller and gains more responsiveness. The other part is if one is infected it can not reach the others that easily!

If you need more assistance in networking ill be glad to help you out and develop a schismatic for your needs.

Another part is a Firewall appliance on that part ill recommend Sophos XG Home (easy to setup and very powerfull) -> Free Firewall - Home Edition | Sophos Firewall for Home

Best regards
Val.

 

[Sampei Nihira]

Hello @Sampei Nihira

thank you for sharing your topic / config. found some interesting programs and extensions you use.

In terms of Network security I would go a step farther and try to segment the network (Example):

Old Windows 192.168.0.1 /30 if there is only one PC that subnet allows a range of two IPs (PC NIC and Router Interface)
New Windows/Linux 192.168.1.1 /30 and up if you have more then one device try to keep the subnet as small as possible
IoT/WiFi Devices 192.168.2.1 /30 and up

That is basic subnet segmentation and adds a good amount of protection on the network side. Of course you can add another layer on top VLAN IDs. Easiest way is port based VLAN Example:

VLAN: 100 Old Windows 192.168.0.2 /30 for Router Interface LAN 1
VLAN: 200 New Windows 192.168.1.2 /30 for Router Interface LAN 2
VLAN 300 IoT / WiFi Devices 192.168.2.2 /30 for Router Interface LAN3 / WiFi

What segmentation does in that way is that you can setup a Rule-Set on the Router Firewall for each individual segment and makes maintaining it easier. The other part is that you can Route Traffic to specific Hosts in your network -Example: PC1 to PC2 and not PC3

Another side effect is performance - Since you have segments of enclosed networks the broadcast overhead is smaller and gains more responsiveness. The other part is if one is infected it can not reach the others that easily!

If you need more assistance in networking ill be glad to help you out and develop a schismatic for your needs.

Another part is a Firewall appliance on that part ill recommend Sophos XG Home (easy to setup and very powerfull) -> Free Firewall - Home Edition | Sophos Firewall for Home

Best regards
Val.

Thank you very much for your considerations.
It will probably amaze you but I would be very interested in a better explanation of:

....Another side effect is performance - Since you have segments of enclosed networks the broadcast overhead is smaller and gains more responsiveness.....

You can write comfortably, after this post unfortunately I have to unplug until almost certainly Sunday afternoon.
The usual commitments, the family, wife .....

Thanks a lot again.