Advanced Plus Security TairikuOkami's Configuration 2021

[TairikuOkami]

Unfortunately, it still takes about 5 secs when opening a custom image or a random webpage. I can not move it easily to ramdisk, like I did with Yandex.

 

[ForgottenSeer 85179]

Here a handy video how Edge opens for me:

 

[TairikuOkami]

I have decided to use double DNS as before. While Quad9 is unbeatable in blocking malicious content, well that is about it. Edge uses SmartScreen, so it should go well along with Cleanbrowsing, which acts almost as Adguard DNS, but without broken webpages. Energized filter was causing issues anyway and it was even not blocking everything.

 

[TairikuOkami]

OK. Edge 88 did it, it made me to regret, that I have decided to trust MS once more. Never again. Fool me once, shame on you. Fool me twice, shame on me. Webpages, new tabs and even extension settings, open for 5 secs and more, that is beyond ridiculous. It is probably due some settings, but that the fact remains, that Edge can not handle it. So I have chosen Chrome. I abandoned it because of all the paranoia, but after going around in circles, just to avoid anything from Google, I have sold my soul to the devils (FB, MS, Google). Lets gloat.

 

[Arequire]

Webpages, new tabs and even extension settings, open for 5 secs and more

Are you talking about them staying open for 5 seconds after you attempt to close the browser?

 

[TairikuOkami]

No, I click on the link and the imaginary countdown starts 5-4-3-2-1 and then the webpage actually starts loading. Edge 87 loaded them instantly, just like any other browser.

 

[SomeRandomCat]

Dunno if you tried it yet or not, but since installing Brave Browser, I have become a huge fan.

 

[TairikuOkami]

I use Brave on Android, but since everything is Umbrella now (DARPA, etc), I mean Google, lol, it does not matter anyway.
Besides Youtube seems much cleaner, not to mention a clean context search menu unlike in Edge with about 20 entries.

 

[Pat MacKnife]

No, I click on the link and the imaginary countdown starts 5-4-3-2-1 and then the webpage actually starts loading. Edge 87 loaded them instantly, just like any other browser.

Did you restart your computer after Edge update ?

 

[Arequire]

No, I click on the link and the imaginary countdown starts 5-4-3-2-1 and then the webpage actually starts loading. Edge 87 loaded them instantly, just like any other browser.

Ah. Strange.
I just updated Edge to 88 and don't experience any difference in delay with page loading. Might just be one of those anomalous issues that crops up one day and disappears at some random point in the future.

 

[ForgottenSeer 85179]

Might just be one of those anomalous issues that crops up one day and disappears at some random point in the future.

Or a corrupt browser profile

 

[eonline]

Quad9 at the System Level
CleanBrowsing Adult (DoH)

what is the advantage of having some dns in the router and others in the system. Or do you have them in the browsers? This part of your configuration I did not understand.

 

[TairikuOkami]

what is the advantage of having some dns in the router and others in the system.

Cleanbrowsing is not very good in blocking malware lately. I use mostly for content filtering. Still, it is pretty restrictive, so it could block downloads from gaming servers and etc. Forticlient actually blocked youtube in steam browser, strangely not within Windows, so I could not watch gaming guides while playing. Quad9 has a great malware filter, so it fits perfectly for Windows and apps. It can even block known C&C botnets and malware, that relies on DNS. Known IPs gets blocked fast, so some ransomware relies on DNS as well.

 

[Arequire]

what is the advantage of having some dns in the router and others in the system.

Changing your router's DNS forces all devices not using a third-party DNS to use the one specified by the router.
Changing your system's (device's) DNS allows you to bypass the router's specified DNS and use a different DNS service.

 

[ForgottenSeer 85179]

Changing your router's DNS forces all devices not using a third-party DNS to use the one specified by the router.

That's not completely true. Devices/ Apps on devices can still use own DNS service if not blocked.
And even then, they still can use direct IP connections to circumvent restrictions.

If I'm not wrong, Google and/or Amazon smart-home devices do this in the past or even still.

 

[Arequire]

If I'm not wrong, Google and/or Amazon smart-home devices do this in the past or even still.

Wasn't aware of this. I'll have see whether my Echo Dot is doing so.

 

[TairikuOkami]

Dunno if you tried it yet or not, but since installing Brave Browser, I have become a huge fan.

You were right, Brave is worth it. Default settings are much more privacy friendly. I like CNAME and WebRTC blocking, though a custom new tab would be nice.
I was considering Edge again, but once store was damaged, it refused to run with buffer overflow errors and Google Chrome is just too much Google for me lately.

 

[TairikuOkami]

OK after an initial enthusiasms, I am back to Edge. Brave Shield causes problems almost on every webpage, disabling all settings will not disable it, but I have managed to run it without it (--disable-brave-extension) and it was lighting fast compared to the default config. Still Brave Rewards is an annoying feature, even when it is not enabled, it gets triggered on every webpage. Also Brave, just like Chrome, does not allow to customize the start page, the only viable option is to let Brave display ADs unless I want to stare on a dull colorful page. There is also the silly downloads bar, I had to use an extra extension AutoHideDownloadsBar just for that. And as it all of this were not enough, you can not download bat/exe files without confirming every single one (twice!), so I actually had to open Downloads tab to confirm them, so about 6 more needless clicks and wasted several minutes a day. Edge "just" works.

 

[WhiteMouse]

What do you use to track all IPs address that a program connect to create firewall rules?

 

[TairikuOkami]

Nirsoft tools: TCP UDP Watch + IP Info (on Android NoRoot Firewall + IP info Detective, it even shows there blacklisted IPs with the type of vulnerability, it is being used for).
If there is no network, it usually means it is blocked, I can verify in Process Hacker (Default Outbound), then I check to whom the IP range belongs to, like MS and CDN servers.