Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 789290" data-attributes="member: 50782">With Chrome you can apply the flag &quot;block unsafe downloads over insecure connections&quot; (#disallow-unsafe-http-downloads). This effectively blocks executable downloads from all HTTP connections. You can still browse these websites without any function loss, just without the risk of drive-by infections. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite114" alt=":cool:" title="Cool&nbsp; &nbsp; :cool:" loading="lazy" data-shortname=":cool:" />Additionally you could block the SCRIPT EXECUTION from <a href="https://www.symantec.com/blogs/feature-stories/top-20-shady-top-level-domains" target="_blank">top 20 shady domains published by Symantec</a>, <a href="https://www.spamhaus.org/statistics/networks/" target="_blank">top 10 spam domains of Spamhaus</a> and <a href="https://nakedsecurity.sophos.com/2014/07/22/dirty-dozen-spampionship-which-country-is-spewing-the-most-spam/" target="_blank">Sophos Dirty Dozen Spampionship</a> in Chrome&#039;s content setting in the format [*.]TLD&nbsp; (Top Level Domain the bytes behind the dot in a domain name).I read only Dutch, English and German and blocking scripts in thise TLD&#039;s will still allow website with this top level domain extension to load, just with one important attack vector less: no scripts <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />&nbsp; I have 33 TLD&#039;s blocked and I can not remember when I had ever had to enable scripts while surfing. When you click on the &lt;&gt; you can easily allow a specific website.[ATTACH=full]205434[/ATTACH]EDITI always enabled the browser&#039;s native Safe Browsing feature. As far as I know it takes some time (20 to 30 miutes) for Google to push the latest updates to Chrome&#039;s Safe Browsing (QUESTION is this still correct?). I have replaced Google&#039;s safe browsing with Emsisoft (based on Evjl&#039;s Rain tests and advice in this thread). Because EBS (Emsisoft Browser Security) is cloud, it is always up to date (and it does not make sense on a linux PC to provide Microsoft with all your browsing data, so WDBP is not an option on my Linux Lite laptop from 2010).</blockquote>

[QUOTE="Windows_Security, post: 789290, member: 50782"] With Chrome you can apply the flag "block unsafe downloads over insecure connections" (#disallow-unsafe-http-downloads). This effectively blocks executable downloads from all HTTP connections. You can still browse these websites without any function loss, just without the risk of drive-by infections. :cool: Additionally you could block the SCRIPT EXECUTION from [URL='https://www.symantec.com/blogs/feature-stories/top-20-shady-top-level-domains']top 20 shady domains published by Symantec[/URL], [URL='https://www.spamhaus.org/statistics/networks/']top 10 spam domains of Spamhaus[/URL] and [URL='https://nakedsecurity.sophos.com/2014/07/22/dirty-dozen-spampionship-which-country-is-spewing-the-most-spam/']Sophos Dirty Dozen Spampionship[/URL] in Chrome's content setting in the format [*.]TLD (Top Level Domain the bytes behind the dot in a domain name). I read only Dutch, English and German and blocking scripts in thise TLD's will still allow website with this top level domain extension to load, just with one important attack vector less: no scripts :) I have 33 TLD's blocked and I can not remember when I had ever had to enable scripts while surfing. When you click on the <> you can easily allow a specific website. [ATTACH=full]205434[/ATTACH] [B][COLOR=rgb(184, 49, 47)]EDIT[/COLOR][/B] I always enabled the browser's native Safe Browsing feature. As far as I know it takes some time (20 to 30 miutes) for Google to push the latest updates to Chrome's Safe Browsing (QUESTION is this still correct?). I have replaced Google's safe browsing with Emsisoft (based on Evjl's Rain tests and advice in this thread). Because EBS (Emsisoft Browser Security) is cloud, it is always up to date (and it does not make sense on a linux PC to provide Microsoft with all your browsing data, so WDBP is not an option on my Linux Lite laptop from 2010). [/QUOTE]

Verification