Advanced Plus Security Thales Minimalist Security Config

[Moonhorse]

Comodo fw is still lighter standalone than those builds
So is comodo internet security aswell

Anyways windows defender + voodooshield is good enough, dont even bother with fortinet imo

Are current browsers + extensions up to date right now?

 

[Thales]

Comodo fw is still lighter standalone than those builds
So is comodo internet security aswell

Anyways windows defender + voodooshield is good enough, dont even bother with fortinet imo

Are current browsers + extensions up to date right now?

Yeah I do not use Fortinet anymore. The portable Firefox is up to date and the extensions as well.

 

[Thales]

The whole system is new and reconfigured. No more useless applications or extensions.
The system is very stable and fast. Obviously because there are no useless applications or services.

Spoiler: Installed Apps

• Only a few installed apps mostly because there is no portable version or the shell integration is important
• They don't start automatically. I turned them off!

Spoiler: System tweaks

Performance

• Uninstalled some windows features (IE, xboxlive, onenote, games, etc.)
• Black Viper’s Windows 10 Service Configurations
• Windows Defender is off

Security

• Basic security tweaks (autoplay disabled, smartscreen, UAC max etc.)
• Security software tweaks: OSArmor, Win10 Shutup
• Firewall: Inbound and outbound connections that do not match the rule are blocked
• Only a few programs have Internet access
• Windows Firewall Control is the only program that allowed to change the Firewall rules

Spoiler: Backup and Restore

- I prefer redundant backup, so this way the chance to lose my data is extremely small

System Backup

• I can restore the whole system within 5 minutes with Macrium Reflect
• The image file is uploaded to the cloud too

Online Backup

• MEGA (paid): sensitive files are encrypted with 7zip.
• Non-sensitive files are not encrypted.
• Mobile and PC sync.
• GDrive, PCloud free

Offline backup

• 2 different SSD and 1 USB drive
• Sensitive files are unencrypted but the whole partition/drive/usb is protected by Bitlocker

Passwords

• Bitwarden online password manager (browser extension)
• My passwords have 2 backup. Physical and digital. The digital one is protected with cascade encryption and uploaded to the cloud.

Spoiler: Privacy

• I do not think the real privacy is achievable , so I don't really care. I am not a criminal and I focus on security instead of paying for placebo services. I protect my whole life from cyber stalkers.
• VPN because I use sometimes open WIFI and I don't like my ISP.
• I do not share any info or photos on the social networks anymore. I use a lookalike photo!

 

[bribon77]

Good configuration, thanks for sharing.

 

[LDogg]

Very good & rock solid setup. Everything is very well and truly covered. Most common attack surfaces are covered. Browsing habits look good. Thanks for sharing!

~LDogg

 

[Thales]

- Enabled OneDrive free as a secondary online backup. Deleted GDrive and pCloud accounts.
- I removed Voodooshield and OSArmor (I do not need them anymore. SRP powa!)
- I disabled the auto start of all unnecessary programs and services. Now the system consumes 1,3 GB RAM.
- Removed Windscribe client. OpenVPN is better IMO.
- Removed UBlock Origin and Privacy badger. I don't like to add more and more unnecessary addons. Less is better IMO.

I need to figure out why Windscribe is slow. I tried different ports, locations, TCP, UDP, ciphers. No luck. If I can't make it better I need to switch in the next month.

 

[Ink]

Enabled OneDrive free as a secondary online backup.

I like using the Alt+Prt Scr option, then editing in Photos app (or Paint). Requires OneDrive client to be running, so if you disabled at boot, it won't work.

 

[Thales]

I like using the Alt+Prt Scr option, then editing in Photos app (or Paint). Requires OneDrive client to be running, so if you disabled at boot, it won't work.

View attachment 199577

Thank you that is actually a very useful feature

 

[yarr]

What is SRP?

 

[Eddie Morra]

What is SRP?

Software Restriction Policy.

 

[Thales]

Yes, and I'm sure one of the best feature. I love it.

 

[Deleted Member 3a5v73x]

I need to figure out why Windscribe is slow. I tried different ports, locations, TCP, UDP, ciphers. No luck. If I can't make it better I need to switch in the next month.

Even on IKEv2? Try manual configs with closest location and with UDP, 443. Import to OpenVPN. I was having similiar unstable/slow/disconnect problems. Windscribe's stable and beta clients feel shitty on my Edu as well, servers mostly are not the problem.

 

[Thales]

I tried every config with openVPN client but I got shitty speed.
I also tried IKEv2 same speed.