Basic Security shukla44 Security Configuration 2021

[shukla44]

This is my current system config which I build last year.
Setup updated a lot. Most significant are implementing protected folders in kaspersky & going Biometrics (PIN) login security.
Just added Macrium Reflect home edition.

 

[Kongo]

Why using weaker DNSCrypt when you have DoH and DoT?

 

[harlan4096]

No Network firewall in personal router?

Also, no a full System Image Backup solution?

Thanks for sharing

 

[shukla44]

Why using weaker DNSCrypt when you have DoH and DoT?

Didn't know. Switched to DoT.

 

[shukla44]

No Network firewall in personal router?

Also, no a full System Image Backup solution?

Thanks for sharing

I am using router/modem provided by my ISP. Aside from basic Wi-Fi settings, i didn't configured it, if it has a firewall, it's settings is at default.
NOTE: My ISP modem doesn't even support changing DNS servers, so I basically rely on AdGuard or Windows.

Don't need it IMO. I have both online & offline backups of my files (all). System image backup is just to save some time from installing all the drivers & software in case of your windows failure or format. This is nullified with Windows 10 feature "Reset This PC". I haven't used this feature yet (i hope i won't have to) but it's nice to not install another software & manage it as well.

Update: I checked, my modem does have a firewall & it's ON with some of the protection enabled.

 

[Kongo]

Didn't know. Switched to DoT.

You might want to read this before deciding between DoH or DoT

https://www.cloudflare.com/learning/dns/dns-over-tls/

 

[shukla44]

You might want to read this before deciding between DoH or DoT

https://www.cloudflare.com/learning/dns/dns-over-tls/

Thanks, this helped a lot. I am going to stick with DoT for now. I am not paranoid about privacy since I use windows .
EDIT: Only understanding DoQ is left which i currently use on my mobile.

 

[Kongo]

Thanks, this helped a lot. I am going to stick with DoT for now. I am not paranoid about privacy since I use windows .
EDIT: Only understanding DoQ is left which i currently use on my mobile.

DoQ is a pretty new protocol and only available within AdGuard anyway.

 

[SeriousHoax]

DoQ is a pretty new protocol and only available on the AdGuard Phone version anyway.

DoQ can be used on Windows using Adguard Home:

AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux

AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that.

adguard.com

 

[Kongo]

DoQ can be used on Windows using Adguard Home:

AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux

AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that.

adguard.com

I think I was half asleep when posting this, thanks for correcting me.

 

[Dex4Sure]

Seems bit excessive to me I used to actually run Kaspersky PURE (before it was called Total Security) + AdGuard for Windows back in the day too. Remember it being lighter than it would have first seemed...

Regarding VPN's, why 2? You switch between Kaspersky and AdGuard VPNs or? Also why so many different cloud storage providers? I'd just pick 1 for each and stick with them. Like for instance, AdGuard VPN and OneDrive. If you need Office anyway, OneDrive is the best choice.

When it comes to DNS, I'd use Cloudflare. Actually no idea why its so unpopular DNS on MalwareTips. Found it easily the best with lowest latency/ fastest response.

 

[TairikuOkami]

When it comes to DNS, I'd use Cloudflare. Actually no idea why its so unpopular DNS on MalwareTips. Found it easily the best with lowest latency/ fastest response.

Because this is a security forum, we prefer the best, not the fastest DNS. Besides, even if you would use the slowest DNS out there, you would hardly notice any difference.
Would you use AV with 50% detection vs AV with 95% detection, just because it uses less RAM? It is basically the same dilemma. Still Cloudflare (1.1.1.2) is the second best.

 

[Kongo]

Still Cloudflare (1.1.1.2) is the second best.

Is it?

 

[TairikuOkami]

Is it?

Last time it was, but it tends to change quickly. Cleanbrowsing used to be the best and in the past months it turned out to be amongst the worst.

 

[Dex4Sure]

Because this is a security forum, we prefer the best, not the fastest DNS. Besides, even if you would use the slowest DNS out there, you would hardly notice any difference.
Would you use AV with 50% detection vs AV with 95% detection, just because it uses less RAM? It is basically the same dilemma. Still Cloudflare (1.1.1.2) is the second best.

In most of the western developed countries there's not much difference, but for instance in Japan and India Cloudflare is FAR faster than Quad9 at resolving. 2ms vs 40ms is a huge difference no matter which way you put it. In fact in Sao Paulo Brazil, Cloudflare seems to have 2ms delay while Quad9 has 114ms... DNS Resolvers Performance compared: CloudFlare x Google x Quad9 x OpenDNS

I don't personally rely on DNS blocking malware anyway, so I'll pick the faster resolver any day of the week.

Is it?

Seems to be when it comes to malware site filtering: However really won't change my DNS as malware blocking isn't the main reason I use Cloudflare, its just added bonus.

 

[Kongo]

In most of the western developed countries there's not much difference, but for instance in Japan and India Cloudflare is FAR faster than Quad9 at resolving. 2ms vs 40ms is a huge difference no matter which way you put it. In fact in Sao Paulo Brazil, Cloudflare seems to have 2ms delay while Quad9 has 114ms... DNS Resolvers Performance compared: CloudFlare x Google x Quad9 x OpenDNS

I don't personally rely on DNS blocking malware anyway, so I'll pick the faster resolver any day of the week.


Seems to be when it comes to malware site filtering: However really won't change my DNS as malware blocking isn't the main reason I use Cloudflare, its just added bonus.

Well, agreed when it comes to non-configurable DNS. NextDNS still is stronger when configured correctly.

 

[SeriousHoax]

Currently on my network, Cloudflare is the fastest with 13ms if i just open CMD and ping 1.1.1.1. Google is 43ms and all the other popular one's are including Adguard, quad9, Open DNS, NextDns, Cleanbrowsing are between 60-65 ms.
Then there's this DNS benchmarking tool which gives a very detailed result testing various aspects. According to this tool it turns out, NextDNS is the fastest for me overall followed by quad9, Adguard, Google, Cloudflare.
So I think it's better to check this out to make sure what's the fastest for you.

GRC's | DNS Nameserver Performance Benchmark

DNS Nameserver Performance Benchmark

www.grc.com

 

[shukla44]

DoQ can be used on Windows using Adguard Home:

AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux

AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that.

adguard.com

Is it possible to use AdGuard Home without changing DNS servers on router/modem? As currently my ISP modem doesn't support changing DNS servers.

 

[shukla44]

Seems bit excessive to me I used to actually run Kaspersky PURE (before it was called Total Security) + AdGuard for Windows back in the day too. Remember it being lighter than it would have first seemed...

Regarding VPN's, why 2? You switch between Kaspersky and AdGuard VPNs or? Also why so many different cloud storage providers? I'd just pick 1 for each and stick with them. Like for instance, AdGuard VPN and OneDrive. If you need Office anyway, OneDrive is the best choice.

When it comes to DNS, I'd use Cloudflare. Actually no idea why its so unpopular DNS on MalwareTips. Found it easily the best with lowest latency/ fastest response.

Yes, the new 2021 MR2 seems to ME (of course) the lightest on my system resources. I guess many factors are included in this SSD, RAM, CPU etc.

Regarding 2 VPN's, Kaspersky VPN comes bundled with KTS so I was using it for convenience, Since i purchased AdGuard VPN last year, Installed it as well. Keeping both has it's reason as Adguard VPN doesn't have a system-wide software yet. Currently, I am using it on Edge as an extension.

IMO, the fastest for me seems to be Google, but Quad9 i started using after trying almost all the DNS services i could find. It's the perfect balance in security & performance for me.

 

[shukla44]

Currently on my network, Cloudflare is the fastest with 13ms if i just open CMD and ping 1.1.1.1. Google is 43ms and all the other popular one's are including Adguard, quad9, Open DNS, NextDns, Cleanbrowsing are between 60-65 ms.
Then there's this DNS benchmarking tool which gives a very detailed result testing various aspects. According to this tool it turns out, NextDNS is the fastest for me overall followed by quad9, Adguard, Google, Cloudflare.
So I think it's better to check this out to make sure what's the fastest for you.

GRC's | DNS Nameserver Performance Benchmark

DNS Nameserver Performance Benchmark

www.grc.com

Quad9 on my network gives just 20-24ms & Cloudflare is 8-14ms. Really can't tell the difference.