- Mar 19, 2022
- 650
I would love to try out this great program. But I'm too lazy to install / uninstall. Maybe someday some vein will come to me
Kongo's Computer Security Config 2024
- Thread starter Kongo
- Start date
- Last updated
- Feb 25, 2024
- How it's used?
- For home and private use
- Operating system
- Windows 11
- On-device encryption
- BitLocker Device Encryption for Windows
- Log-in security
-
- Hardware security key
- Security updates
- Allow security updates and latest features
- Update channels
- Allow stable updates only
- User Access Control
- Always notify
- Smart App Control
- Off
- Network firewall
- Enabled
- About WiFi router
-
- Speedport Smart 4
- Firewalla Blue +
- Real-time security
-
Deep Instinct Endpoint Protection
- Firewall security
- Microsoft Defender Firewall with Advanced Security
- About custom security
-
Hardening tools:
- Firewall Hardening (blocking outbound connections of LOLBins)
- Run by SmartScreen (forces SmartScreen to scan files of choice)
- STOP/DJVU Ransomware Vaccine (immunizes system against this type of ransomware)
- O&O ShutUp10 (recommended settings)
- O&O AppBuster (removed unecessary Windows 11 apps)
- Windows Sandbox
System settings:
- Microsoft Defender running in sandbox (inactive)
- Reputation Based Protections (all modules enabled)
- Smart App Control enabled
- Data Execution Prevention set to AlwaysOn
- Core Isolation: Memory Integrity enabled
- Kernel-mode Hardware-enforced Stack Protection enabled
- Secure Boot enabled
- Drives encrypted via TPM (BitLocker)
- Windows Update Delivery Optimization disabled
- AutoPlay disabled
- Network Discovery disabled (Public Firewall profile)
- PowerShell --> Constrained Language Mode
- Hide extensions for known file types --> disabled
- Show hidden files --> enabled
- Virtualization enabled (allows Application Sandboxing)
- Custom Exploit Protection Settings for Firefox:
Code:Block low integrity images - ON Block remote images - ON Block untrusted fonts - ON Control flow guard (CFG) - ON Data execution prevention (DEP) - ON + Enable thunk emulation - CHECKED Disable extension points - ON Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images - CHECKED Randomize memory allocations (Bottom-up ASLR) - ON Validate exception chains (SEHOP) - ON Validate handle usage - ON Validate heap integrity - ON Validate image dependency integrity - ON
Thanks to @oldschool for sharing!
ㅤㅤㅤHardware Firewall (Firewalla Blue Plus):
- Active Protect (Strict)
- Ad Block (Strict)
- OISD blocklist enabled in Firewalla
- New Device Quarantine (restricted internet access for newly connected devices)
- Geo-IP Filtering (blocking connections from and to Russian + Chinese IPs)
- Unbound DNS enabled for all devices
ㅤ
- Periodic malware scanners
-
Norton Power Eraser, X-Sec and AdwCleaner
- Malware sample testing
- I do participate in malware testing. See details about my testing environment below.
- Environment for malware testing
-
ㅤㅤㅤ
VMware Workstation Player + Mullvad VPN on host machine while connected to the guest network.
Online Malware Analysis Platforms that I use:
- FileScan.iO
- Intenzer Analyze
- Hybrid Analysis
- VirusTotal
- Sophos Intelix
- Valkyrie
- ANY.RUN
- Triage
- Kaspersky Threat Intelligence Portal
- Docguard.iO
- PolySwarm
- Yomi
- Neiki.Dev
- ThreatZone
- UnpacMe
--> Currently I am barely testing
- Browser(s) and extensions
-
ㅤ
Mozilla Firefox v. 124.0.2
Extensions:
- uBlock Origin Lite
- SafeToOpen
- Bitwarden
Browser privacy and security settings:
- Tracking protection: Strict (enables Total Cookie Protection)
- Enable secure DNS using: Max Protection
- HTTPS-only-mode enabled
- DuckDuckGo set as search engine
- Pocket disabled
- Sending DNT-requests disabled (enabling makes you more identifiable and barely gives any advantage on most sites.)
- Clearing browsing data on exit
- Search suggestions disabled
- Websites overview disabled
- Blocking incoming location, camera and microphone requests
- AutoPlay for audio and video disabled
- Firefox telemetry disabled (also in about:config)
- Blocking pop-ups
- Warn when websites try to install addons enabled
- Protection against fraudulent content and dangerous software enabled
about:config tweaks:
- network.dns.echconfig.enabled = true
- network.dns.use_https_rr_as_altsvc = true
- fission.autostart = true
- pdfjs.enableScripting = false
- network.IDN_show_punycode = true
- security.ssl.require_safe_negotiation = true
- geo.enabled = false
- webgl.disabled = true
- network.trr.mode = 3 (NextDNS)
ㅤㅤ
- Secure DNS
-
ㅤ
- NextDNS with DoH + OISD blocklist (Firefox exclusively)
- Unbound DNS (Network-wide)
ㅤ
- Desktop VPN
-
Proton VPN with Secure Core, NetShield and Permanent Kill Switch
- Password manager
-
ㅤBitwarden Premium
- Maintenance tools
-
PatchMyPC, RuckZuck, UpdateHub, HiBit Uninstaller and Windows built in tools for cleaning and optimization
- File and Photo backup
-
ㅤbackup to external drive when necessary
- Active subscriptions
-
- Google One Standard 200GB
- System recovery
-
Aomei Backupper
- Risk factors
-
- Browsing to popular websites
- Browsing to unknown / untrusted / shady sites
- Opening email attachments
- Buying from online stores, entering banks card details
- Downloading software and files from reputable sites
- Gaming
- Streaming audio/video content from shady sites
- Downloading malware samples
- Computer specs
-
GPU: Nvidia Geforce RTX 360 TI
CPU: Intel I5 12600K
RAM: 16 GB DDR4-3200 Crucial
Hard disks: 500 GB Samsung 970 EVO Plus + 1 TB Western Digital Blue
- Notable changes
-
- Updated for year 2024
- What I'm looking for?
-
Looking for minimum feedback.
- Feb 25, 2017
- 2,498
The installation is lightning fast. It will be finished before you even have the chance for being lazy
- Apr 1, 2019
- 2,783
I tried it and decided to stick with it for the foreseeable future.
- Feb 25, 2017
- 2,498
Only reason I never really tried it, is that many people on MT are using it. I prefer testing the unpopular ones. But now I can see why F-Secure is used by so many. Light, stable and according to most tests - great protection.
- Feb 25, 2017
- 2,498
Sure, just use the trial version. And yea, it offers banking protection.
- Mar 19, 2022
- 650
Ever since I remember, F-Secure has always had a very good reputation. We have little advertisement in Poland. But as the saying goes - a good product needs no advertising
- Feb 25, 2017
- 2,498
Agreed, never had issues with it in the past. But I have to admit, that I really dislike the UI. The former one was way better...
- Apr 1, 2019
- 2,783
The UI feels a lot like Bitdefender, but with even fewer changes to make. Simple, install and go.
- Aug 28, 2015
- 772
I may trial this. Which version are you running?
- Apr 1, 2019
- 2,783
- Aug 28, 2015
- 772
Thanks I saw they have different versions. Will check into it.
I guess Total just adds the VPN?
- Apr 1, 2019
- 2,783
I think it also has the ID protection, which I don’t need.
- Aug 28, 2015
- 772
- Apr 24, 2016
- 6,596
Here is some info about ID Protection:
malwaretips.com
To quote @upnorth :
F-Secure ID PROTECTION - 2023 updated
This topic only applies to you if you have a TOTAL subscription. A new app called ID PROTECTION has now replaced KEY in My F-Secure as part of our new offering to prevent identity theft. ID PROTECTION offers not only a password manager, but also email monitoring to keep track of data breaches...
malwaretips.com
- Sep 2, 2021
- 2,306
The installation is lightning fast. It will be finished before you even have the chance for being lazy
If you have a good PC and a good connection it helps too
(normally in Germany it's pretty fast ^^ )
- Feb 25, 2017
- 2,498
I am living in a village, so my connection isn't the best.If you have a good PC and a good connection it helps too
- Aug 17, 2014
- 10,176
Same here, I am also living in a village and in Germany, it's almost impossible to receive high speed internet, but at least here works good enough for streaming on TV...I am living in a village, so my connection isn't the best.
Looks like it's a common problem for "Village People"
- Sep 2, 2021
- 2,306
Same here, I am also living in a village and in Germany, it's almost impossible to receive high speed internet, but at least here works good enough for streaming on TV...
Looks like it's a common problem for "Village People"
Quite amazing, when I go to Germany I always have a very fast 4G Oo (except with o2.de)
- Aug 17, 2014
- 10,176
Well, that's true for big cities or even small cities in Germany, but depends on regional availability for villages. I personally have to stay at this village because of my house...
Similar threads
