Advanced Plus Security security123's Security Config 2020

[Ink]

No as Linux doesn't provide me any advantage but many disadvantages.

What kind of disadvantages?

 

[ForgottenSeer 85179]

What kind of disadvantages?

not so good compatibility for games and some programs/ apps compared to Windows, TPM isn't used (for e.g. encryption), a lot worse Security

 

[ForgottenSeer 85179]

Thanks to new Edge 86 which adds DoH (even in GUI!), i removed Anti-Facebook list from AdGuard extension as my NextDNS config block it completely now
So now i only have "AdGuard Basis-Filter" list enabled in AdGuard to get rid of annoying YouTube ads for example.
If i wouldn't care about that, AdGuard were only useful for removing URL tracking parameter which is still use.

 

[ErzCrz]

Thanks to new Edge 86 which adds DoH (even in GUI!), i removed Anti-Facebook list from AdGuard extension as my NextDNS config block it completely now
So now i only have "AdGuard Basis-Filter" list enabled in AdGuard to get rid of annoying YouTube ads for example.
If i wouldn't care about that, AdGuard were only useful for removing URL tracking parameter which is still use.

Good to know about DoH, Edge should really take you to a What's new page after it updates. Still not moved to adguard myself, got a mental block about it I guess lol.

 

[ForgottenSeer 85179]

PC runs now with Windows 20H2 build

 

[Minimalist]

PC runs now with Windows 20H2 build

Did you encounter any problems? I hesitate to install it since I need my computer to work tomorrow.

 

[ForgottenSeer 85179]

Did you encounter any problems? I hesitate to install it since I need my computer to work tomorrow.

No but i doesn't expect any. Also i run 2004 before so ..

 

[ForgottenSeer 85179]

As SeriousHoax block LOLBins in Firewall without serios problems, i add them now too

 

[SeriousHoax]

As SeriousHoax block LOLBins in Firewall without serios problems, i add them now too

@Andy Ful also use it this way.

 

[Andy Ful]

@Andy Ful also use it this way.

Yes. Blocking Internet access to LOLBins usually does not produce issues (although some Windows telemetry performed via rundll32.exe and compattelrunner.exe can be blocked). Anyway, some applications can use (very rarely) LOLBins to call out/update, so it is reasonable from time to time to look at the Log for other blocked entries.

 

[ForgottenSeer 85179]

As SeriousHoax block LOLBins in Firewall without serios problems, i add them now too

Because of problems with Windows Store, i revert blocking LOLBins as posted: Update - Hard_Configurator - Windows Hardening Configurator

 

[Andy Ful]

Because of problems with Windows Store, i revert blocking LOLBins as posted: Update - Hard_Configurator - Windows Hardening Configurator

You probably do not need to block LOLBins. Anyway, I use the config with all blocked LOLBins in FirewallHardening and do not have any problem with installing apps from Microsoft Store on my Windows 10 Home and Pro machines. Could you post more details about your issue?

 

[ForgottenSeer 85179]

You probably do not need to block LOLBins. Anyway, I use the config with all blocked LOLBins in FirewallHardening and do not have any problem with installing apps from Microsoft Store on my Windows 10 Home and Pro machines. Could you post more details about your issue?

What info did you need?

 

[Andy Ful]

What info did you need?

I am not sure. There can be several possible scenarios.

1. There was an accidental time correlation between blocking lsass.exe by the firewall and Microsoft Store issue (less probable because you would recognize it). Did such a problem happen before?
2. There is some application that is triggered when you try using Microsoft Store, and this application uses lsass.exe for something. If lsass.exe cannot make the outbound connection, then access to Microsoft Store is blocked.
3. One of us uses a special system configuration. It would be helpful to see what setting can be the source of the different behavior of Microsoft Store on our computers.

You can make PM to not bloat this thread. Thank you.

 

[ForgottenSeer 85179]

You can make PM to not bloat this thread. Thank you.

Done

 

[ForgottenSeer 85179]

I removed Windows Sandbox as i never used it anyway.

This blog start me thinking about: LloydLabs - Weaponizing Windows Sandbox To Bypass Defender (syscall.party)

 

[ForgottenSeer 85179]

added msbuild.exe & CVTres.exe to Andy's Firewall tool, thanks to McMcbrad:
Malware analysis - Fileless Tesla Abuses .Net Framework Processes | MalwareTips Community

 

[silversurfer]

Here looks like that "msbuild.exe" is already included in Firewall-Hardening by @Andy Ful , but probably you haven't added all "LOLBins" ?

 

[Marana]

@security123 - just out of curiosity, I wonder if you have a special reason for still blocking untrusted fonts?

(I guess that you must have noticed that MS has dropped untrusted fonts blocking out of its Security Baseline already a few years ago, so I think that you have some special reason...)

 

[FireHammer]

Just a little pip from me, I like you having AdGuard installed, I think it is an important part of having a "safe" PC or Ublock-Origin.