Advanced Plus Security Thales Hard Protected Setup

[Thales]

Windows 10

• Banking, browsing, managing my sensitive files, learning, gather information etc.

Spoiler: System Protection

Tweaks

• Disabled unused services with Easy service optimizer.
• Tweaked with O&O ShutUp10

Protection

• Hard_Configurator
• Windows Defender (Tweaked by H_C)
• Malwarebytes Windows Firewall Control (default deny)
• Windows SRP (H_C)
• Standard User account everywhere
• System drive is protected by Bitlocker

Spoiler: Passwords

Password Management

• Keepass Pasword Manager
• 30+ character password and KeyFile
• Kee browser extension

Password Database Backup
I prefer redundant backup solution, so I have a couple of drives and clouds. It is easy to sync because I spent time to make it simple.
Database is on the system drive and it is synced with GoodSync portable if I change something but that's rare.

• Keyfile is encrypted with 7zip (compression=0, store only). The Keyfile is unencrypted only on the System Drive (Bitlocker protected) and on my Phone.
• Google Drive and free MEGA: I know the password. I use them only for storing Keepass database and encrypted keyfile.
• Paid MEGA: 200GB. I store everything here. 50 char psw and 2FA I also store the database here too.
• HDD: The Keyfile is encrypted of course.
• USB: The Keyfile is encrypted of course.

So, this is my backup plan. If I lose my computer (all of my drives and USB) I still have the 2 different cloud backup and of course I know the password to enter. No 2FA because it would be hard to remember

Spoiler: System Backup

• Backup program is Macrium Reflect Free. The system is saved with it and encrypted with 7z because i have unencrypted info on the system to avoid logging process over and over again.

Spoiler: How it looks

Feel free to give me some advice to improve my system I you feel i need to.

 

[voyes]

Where did you downloaded this OS? Its awesome and I have an old PC with Linux.

 

[Thales]

Where did you downloaded this OS? Its awesome and I have an old PC with Linux.

Here it is: I suggest you to download via torrent. Here

Spoiler: Here

Icons: Numix
Theme: Yaru Dark

I recommend this Video. Short and he explains everything to make a good looking Ubuntu.

 

[Handsome Recluse]

Wait. How'd you have the start menu?

 

[Thales]

Wait. How'd you have the start menu?

It is dash to panel. The start menu is Arc menu itself with modified Icon.
Install these + Gnome tweaks

Spoiler

With Dash to panel + Arc menu

Spoiler

Without them it looks like this

Spoiler

To change icon use this

Spoiler

The best thing because it is Linux changing themes or icons don't slow the system down.
If you need any help don't hesitate to ask

 

[LDogg]

Look crisp and easy to navigate around!

~LDogg

 

[Handsome Recluse]

Why a non-LTE version though?

 

[JM Safe]

Why not adding Firejail ?

 

[Thales]

Why a non-LTE version though?

Because 18.10 looks better IMO. I prefer good looking OS.
It is stable so far.

Why not adding Firejail ?

It didn't work properly on manjaro (unknown reason), so I just dropped Firejail. I will check on Ubuntu.
Thank you

 

[JM Safe]

Because 18.10 looks better IMO. I prefer good looking OS.
It is stable so far.


It didn't work properly on manjaro (unknown reason), so I just dropped Firejail. I will check on Ubuntu.
Thank you

Oh, I didn't know this.

 

[shmu26]

Do you use Gufw to manage firewall? Any special settings?

 

[ZeroDay]

Looking tight.

 

[Thales]

Do you use Gufw to manage firewall? Any special settings?

Sorry for the delay
Yes i do.
I prefer default deny outgoing/incoming rules.

This is a good short guide and it works.
Rules

 

[Thales]

1, Switched from Chrome/Chromium to Vivaldi.
2, Now I'm using BitWarden Premium version. I needed the TOTP feature because I don't want to use 3rd party 2FA app.
- Ubuntu now officially support Bitwarden desktop app. Awesome.
3, Switched to Thunderbird and removed Evolution (ubuntu use this by default)
4, Switched back to 18.04 (18.10 was pretty stable but had some issues with browsers. sent the details for further investigation ofc)

Spoiler: It looks like this

 

[ZeroDay]

1, Switched from Chrome/Chromium to Vivaldi.
2, Now I'm using BitWarden Premium version. I needed the TOTP feature because I don't want to use 3rd party 2FA app.
- Ubuntu now officially support Bitwarden desktop app. Awesome.
3, Switched to Thunderbird and removed Evolution (ubuntu use this by default)
4, Switched back to 18.04 (18.10 was pretty stable but had some issues with browsers. sent the details for further investigation ofc)

Spoiler: It looks like this

That wallpaper looks great, can you give me a link to it please?

 

[notabot]

Why not use almost exclusively snap apps?

- they auto update, even while running the app
- they are containerised out of the box, no need for firejail
- they come with AppArmor profiles out of the box

 

[Thales]

That wallpaper looks great, can you give me a link to it please?

Sure
Wallpaper

 

[ZeroDay]

Sure
Wallpaper

Thank you

 

[Thales]

So, I switched back to windows because I need some programs and they have no alternate on Linux.
This is my current system.
Feel free to give me some advice to improve my system I you feel i need to.

Windows 10

• Banking, browsing, managing my sensitive files, learning, gather information etc.

Spoiler: System Protection

Tweaks

• Disabled unused services with Easy service optimizer.
• Tweaked with O&O ShutUp10

Protection

• Kaspersky Cloud Free (Tweaked)
• Malwarebytes Windows Firewall Control (default deny)
• Windows SRP
• Standard User account everywhere
• System drive is protected by Bitlocker

Spoiler: Passwords

Password Management

• Keepass Pasword Manager
• 30+ character password and KeyFile
• Kee browser extension

Password Database Backup
I prefer redundant backup solution, so I have a couple of drives and clouds. It is easy to sync because I spent time to make it simple.
Database is on the system drive and it is synced with GoodSync portable if I change something but that's rare.

• Keyfile is encrypted with 7zip (compression=0, store only). The Keyfile is unencrypted only on the System Drive (Bitlocker protected) and on my Phone.
• Google Drive and free MEGA: I know the password. I use them only for storing Keepass database and encrypted keyfile.
• Paid MEGA: 200GB. I store everything here. 50 char psw and 2FA I also store the database here too.
• HDD: The Keyfile is encrypted of course.
• USB: The Keyfile is encrypted of course.

So, this is my backup plan. If I lose my computer (all of my drives and USB) I still have the 2 different cloud backup and of course I know the password to enter. No 2FA because it would be hard to remember

Spoiler: System Backup

• Backup program is Macrium Reflect Free. The system is saved with it and encrypted with 7z because i have unencrypted info on the system to avoid logging process over and over again.

Spoiler: How it looks

 

[oldschool]

What's that wallpaper? Electric Batman? Niiice!

I want it!