Advanced Plus Security Vasudev Security Config 2021

[Vasudev]

Updated to build 1440 on 1909 branch.
Reverted nvidia gpu driver from 430.xx to 389.xx from MSFT update catalog to reduce stuttering and micro-freezing issues.

 

[Kongo]

Kinda late to the party but as @harlan4096 already said you should consider setting UAC to always notify.
Reason: Bypassing Windows 10 UAC with mock folders and DLL hijacking

Also way too many extensions.
1. Remove HTTPS Everywhere and enable HTTPS-Only-Mode in Firefox. It does the same as the extension.
2. Remove User-Agent-Switcher, cause it just makes you more identifiable. Simply use privacy.resistFingerprinting in the about:config settings which doesn't require an extension that makes your fingerprint more unique.

 

[Vasudev]

Kinda late to the party but as @harlan4096 already said you should consider setting UAC to always notify.
Reason: Bypassing Windows 10 UAC with mock folders and DLL hijacking

Also way too many extensions.
1. Remove HTTPS Everywhere and enable HTTPS-Only-Mode in Firefox. It does the same as the extension.
2. Remove User-Agent-Switcher, cause it just makes you more identifiable. Simply use privacy.resistFingerprinting in the about:config settings which doesn't require an extension that makes your fingerprint more unique.

UAC was kept at default level. I don't want Vista like UAC experience. I change Windows settings too frequently.

HTTPS everywhere allows localhost to use http versus https-only mode in firefox when developing web apps/APIs. That's the reason I use User agent switcher to check if how different browser identify themselves which helps in testing.

 

[Kongo]

That's the reason I use User agent switcher to check if how different browser identify themselves which helps in testing.

Can you explain further? I think I didn't quite get that.

 

[Vasudev]

Can you explain further? I think I didn't quite get that.

You can identify user's browser whether its on PC/Tablet/Mobile etc... and exact browser version if someone notices crash on specific chrome/safari version which maybe missed since we might test it against higher version or sometimes lower version at the time of testing.

 

[Kongo]

You can identify user's browser whether its on PC/Tablet/Mobile etc... and exact browser version if someone notices crash on specific chrome/safari version which maybe missed since we might test it against higher version or sometimes lower version at the time of testing.

Wouldn't it be a better approach to set another user agent in about:config whenever you need it? At least that doesn't require an extension and lets you choose which user agent you want compared to an extension with a limited list of user agents.

Source: How to change your user agent for Firefox

 

[ForgottenSeer 85179]

Wouldn't it be a better approach to set another user agent in about:config whenever you need it? At least that doesn't require an extension and lets you choose which user agent you want compared to an extension with a limited list of user agents.

Source: How to change your user agent for Firefox

Doesn't work. Sites can still identify real browser with API tests

 

[Vasudev]

Wouldn't it be a better approach to set another user agent in about:config whenever you need it? At least that doesn't require an extension and lets you choose which user agent you want compared to an extension with a limited list of user agents.

Source: How to change your user agent for Firefox

I've been using the extension for a long time and didn't seek an alternative. Anyway, User agent switcher simplifies the user agent setting instead of going and adding custom user agent strings.

 

[Kongo]

Doesn't work. Sites can still identify real browser with API tests

Can be blocked when using AdGuard Windows for example

 

[ForgottenSeer 85179]

Can be blocked when using AdGuard Windows for example

You can't block all browser API; else no website would work. This also cripple down your browsing behaviour for non-improvement and even makes you easier trackable

 

[Kongo]

You can't block all browser API; else no website would work. This also cripple down your browsing behaviour for non-improvement and even makes you easier trackable

True, but actually it wasn't my intention to give him tips to be less identifiable as he obviously needs a user agent switcher. I just thought it would be a more secure alternative to use built in browser functions instead of adding an extension.

 

[Vasudev]

Updated to build 1474 Preview.

 

[Vasudev]

Updated to build 1533 preview.

 

[Vasudev]

Just wondering if 21h1 is affected by conexant audio drivers 8.65 and 8.66?

 

[Vasudev]

Updated to 21H1 19043.985

 

[Vasudev]

Updated to build 1023 Preview.

 

[Vasudev]

Updated to 19041.1081

 

[Vasudev]

Updated to build 1082

 

[Vasudev]

Updated to build 1165.

 

[Vasudev]

Removed Ubuntu budgie from alienware