Advanced Plus Security Thales Hard Protected Setup

Last updated
Jul 31, 2019
Windows Edition
Pro
Log-in security
Security updates
Allow security updates and latest features
User Access Control
Always notify
Real-time security
  • HMPA
  • F-Secure SAFE
  • syshardener
Firewall security
Microsoft Defender Firewall
About custom security
  • syshardener (Almost everything is checked)
Periodic malware scanners
  • HMPA
  • F-Secure SAFE
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
Chrome (Portable)
  • Adguard
  • BitWarden
Maintenance tools
Cleaners
  • Wise Cleaner (portable)
  • Cleanmgr+ (Portable)
  • CCleaner (portable)
Other
  • Bandizip (portable)
  • Geek uninstaller (portable)
File and Photo backup
  • MEGA
System recovery
  • Macrium Reflect Free
Risk factors
    • Gaming
    • Logging into my bank account
    • Browsing to popular websites
    • Streaming audio/video content from shady sites
    • Working from home
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Acer Aspire 3 A315-41

CPU
: AMD Ryzen 3 2200U
GPU: Radeon Vega Mobile Gfx
RAM: 8GB DDR4 2400Mhz
Storage: 128GB SSD

Thales

Level 15
Thread author
Verified
Top Poster
Well-known
Nov 26, 2017
708
Windows 10
  • Banking, browsing, managing my sensitive files, learning, gather information etc.
Tweaks
  • Disabled unused services with Easy service optimizer.
  • Tweaked with O&O ShutUp10
Protection
  • Hard_Configurator
  • Windows Defender (Tweaked by H_C)
  • Malwarebytes Windows Firewall Control (default deny)
  • Windows SRP (H_C)
  • Standard User account everywhere
  • System drive is protected by Bitlocker
Password Management
  • Keepass Pasword Manager
  • 30+ character password and KeyFile
  • Kee browser extension
Password Database Backup
I prefer redundant backup solution, so I have a couple of drives and clouds. It is easy to sync because I spent time to make it simple.
Database is on the system drive and it is synced with GoodSync portable if I change something but that's rare.

  • Keyfile is encrypted with 7zip (compression=0, store only). The Keyfile is unencrypted only on the System Drive (Bitlocker protected) and on my Phone.
  • Google Drive and free MEGA: I know the password. I use them only for storing Keepass database and encrypted keyfile.
  • Paid MEGA: 200GB. I store everything here. 50 char psw and 2FA I also store the database here too.
  • HDD: The Keyfile is encrypted of course.
  • USB: The Keyfile is encrypted of course.
So, this is my backup plan. If I lose my computer (all of my drives and USB) I still have the 2 different cloud backup and of course I know the password to enter. No 2FA because it would be hard to remember :)
  • Backup program is Macrium Reflect Free. The system is saved with it and encrypted with 7z because i have unencrypted info on the system to avoid logging process over and over again.
SxnKZOP.png
Feel free to give me some advice to improve my system I you feel i need to.
 
Last edited:

Thales

Level 15
Thread author
Verified
Top Poster
Well-known
Nov 26, 2017
708
Wait. How'd you have the start menu?
It is dash to panel. The start menu is Arc menu itself with modified Icon.
Install these + Gnome tweaks
rhBG11Q.png
With Dash to panel + Arc menu
8W92K2C.png
Without them it looks like this
4CYJpne.png
To change icon use this
Wv12p6O.png

The best thing because it is Linux changing themes or icons don't slow the system down. :)
If you need any help don't hesitate to ask :)
 

JM Safe

Level 39
Verified
Top Poster
Apr 12, 2015
2,882
Because 18.10 looks better IMO. I prefer good looking OS. :)
It is stable so far.


It didn't work properly on manjaro (unknown reason), so I just dropped Firejail. I will check on Ubuntu.
Thank you :)
Oh, I didn't know this.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,150
Do you use Gufw to manage firewall? Any special settings?
 

Thales

Level 15
Thread author
Verified
Top Poster
Well-known
Nov 26, 2017
708
1, Switched from Chrome/Chromium to Vivaldi.
2, Now I'm using BitWarden Premium version. I needed the TOTP feature because I don't want to use 3rd party 2FA app.
- Ubuntu now officially support Bitwarden desktop app. Awesome. :love:
3, Switched to Thunderbird and removed Evolution (ubuntu use this by default)
4, Switched back to 18.04 (18.10 was pretty stable but had some issues with browsers. sent the details for further investigation ofc)

piiX4I1.png
 
Last edited:

ZeroDay

Level 30
Verified
Top Poster
Well-known
Aug 17, 2013
1,905
1, Switched from Chrome/Chromium to Vivaldi.
2, Now I'm using BitWarden Premium version. I needed the TOTP feature because I don't want to use 3rd party 2FA app.
- Ubuntu now officially support Bitwarden desktop app. Awesome. :love:
3, Switched to Thunderbird and removed Evolution (ubuntu use this by default)
4, Switched back to 18.04 (18.10 was pretty stable but had some issues with browsers. sent the details for further investigation ofc)

piiX4I1.png
That wallpaper looks great, can you give me a link to it please?
 
  • Like
Reactions: Thales

notabot

Level 15
Verified
Oct 31, 2018
703
Why not use almost exclusively snap apps?

- they auto update, even while running the app
- they are containerised out of the box, no need for firejail
- they come with AppArmor profiles out of the box
 
  • Like
Reactions: Thales

Thales

Level 15
Thread author
Verified
Top Poster
Well-known
Nov 26, 2017
708
So, I switched back to windows because I need some programs and they have no alternate on Linux.
This is my current system.
Feel free to give me some advice to improve my system I you feel i need to.

Windows 10
  • Banking, browsing, managing my sensitive files, learning, gather information etc.
Tweaks
  • Disabled unused services with Easy service optimizer.
  • Tweaked with O&O ShutUp10
Protection
  • Kaspersky Cloud Free (Tweaked)
  • Malwarebytes Windows Firewall Control (default deny)
  • Windows SRP
  • Standard User account everywhere
  • System drive is protected by Bitlocker
Password Management
  • Keepass Pasword Manager
  • 30+ character password and KeyFile
  • Kee browser extension
Password Database Backup
I prefer redundant backup solution, so I have a couple of drives and clouds. It is easy to sync because I spent time to make it simple.
Database is on the system drive and it is synced with GoodSync portable if I change something but that's rare.

  • Keyfile is encrypted with 7zip (compression=0, store only). The Keyfile is unencrypted only on the System Drive (Bitlocker protected) and on my Phone.
  • Google Drive and free MEGA: I know the password. I use them only for storing Keepass database and encrypted keyfile.
  • Paid MEGA: 200GB. I store everything here. 50 char psw and 2FA I also store the database here too.
  • HDD: The Keyfile is encrypted of course.
  • USB: The Keyfile is encrypted of course.
So, this is my backup plan. If I lose my computer (all of my drives and USB) I still have the 2 different cloud backup and of course I know the password to enter. No 2FA because it would be hard to remember :)
  • Backup program is Macrium Reflect Free. The system is saved with it and encrypted with 7z because i have unencrypted info on the system to avoid logging process over and over again.
SxnKZOP.png
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top