Advanced Plus Security wat0114 security config 2021

[Yanick]

Just thought to ask how do you feel about securing your browsers more? There seem to be enough security on your computer but sometimes little bit more is never enough
Using Edge in windows defender application sandbox and say firefox with ReHIPS free? Probably bizarre sounding idea, but i run it awhile and worked alright.
Right, and do you use Windows Defender sandboxed, the AV itself?

 

[1chaoticadult]

Hey wat do you encrypt the usb drive you use for your personal files & photos backup?

 

[ForgottenSeer 85179]

Using Edge in windows defender application sandbox

Good one.

and say firefox with ReHIPS free?

Bad one.
Firefox lack support for real Sandbox/ Isolation. Adding security with third party software doesn't work.

 

[wat0114]

Hey wat do you encrypt the usb drive you use for your personal files & photos backup?

I have an encrypted usb drive and an encrypted partition on my h/drive for backing up sensitive data.

After I write to or read anything from my my h/drive's encrypted partition, I re-lock it by running an elevated batch file: manage-bde -lock R:

 

[1chaoticadult]

I have an encrypted usb drive and an encrypted partition on my h/drive for backing up sensitive data.

After I write to or read anything from my my h/drive's encrypted partition, I re-lock it by running an elevated batch file: manage-bde -lock R:

Ok I was just curious. Never mind what I was going to say. Looks like you covered then.

 

[wat0114]

@1chaoticadult
I just realized i quoted you twice, responding to one of them. Looks Like I don't have rights yet to delete erroneous posts

 

[1chaoticadult]

@1chaoticadult
I just realized i quoted you twice, responding to one of them. Looks Like I don't have rights yet to delete erroneous posts

No problem wat, it happens lol.

 

[Gandalf_The_Grey]

@1chaoticadult
I just realized i quoted you twice, responding to one of them. Looks Like I don't have rights yet to delete erroneous posts

You can use the report button and the staff will take care of that.

 

[silversurfer]

Firefox lack support for real Sandbox/ Isolation. Adding security with third party software doesn't work.

Just to inform users of Firefox and to avoid further misinformation,

1st: Mozilla has been introduced recently "Site-Isolation" in Firefox:

Introducing Firefox’s new Site Isolation Security Architecture – Mozilla Hacks - the Web developer blog

With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.

hacks.mozilla.org

2nd: Sandboxing is almost the same tech compared to Chromium:

Security/Sandbox - MozillaWiki

wiki.mozilla.org

 

[ForgottenSeer 85179]

Just to inform users of Firefox and to avoid further misinformation,

1st: Mozilla has been introduced recently "Site-Isolation" in Firefox:

Introducing Firefox’s new Site Isolation Security Architecture – Mozilla Hacks - the Web developer blog

With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.

hacks.mozilla.org

they work already years on that, without finalizing it. Chromium provides it since 2018.

2nd: Sandboxing is almost the same tech compared to Chromium:

Security/Sandbox - MozillaWiki

wiki.mozilla.org

They use a bad one. See Firefox and Chromium | Madaidan's Insecurities
Anyway, Firefox isn't the topic here so i guess we should stop this discussion

 

[Andy Ful]

Let's agree that for now, the Firefox sandbox is not as strong as the Chrome sandbox.

We are excited to announce that Firefox’s new Site Isolation architecture is coming together. This fundamental redesign of Firefox’s Security architecture extends current security mechanisms by creating operating system process-level boundaries for all sites loaded in Firefox for Desktop. Isolating each site into a separate operating system process makes it even harder for malicious sites to read another site’s secret or private data.

We are currently finalizing Firefox’s Site Isolation feature by allowing a subset of users to benefit from this new security architecture on our Nightly and Beta channels and plan a roll out to more of our users later this year.

Introducing Site Isolation in Firefox – Mozilla Security Blog

With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.

blog.mozilla.org

I think that most of the issues mentioned in Firefox and Chromium | Madaidan's Insecurities were probably true, but we cannot be sure if they are currently true (in the Nightly versions).
It is also true that Chrome Sandbox is more mature. Anyway, it is hard to be sure that using Firefox is much less secure than using Chrome. Firefox has more privacy features and it is not as frequently attacked as Chrome.
As always, the attackers will have the last word.

 

[wat0114]

FWIW, I've no issues with Firefox being discussed in this thread, as browser security forms an important part of my setup. I think no matter how secure a browser is by its own merits, there are many ways to harden them, either directly or externally with a myriad security configs. In Linux I do so directly with settings and extenions, and externally via Apparmor.

 

[1chaoticadult]

FWIW, I've no issues with Firefox being discussed in this thread, as browser security forms an important part of my setup. I think no matter how secure a browser is by its own merits, there are many ways to harden them, either directly or externally with a myriad security configs. In Linux I do so directly with settings and extenions, and externally via Apparmor.

Do you still use NoScript on Firefox or did you drop it?

 

[wat0114]

Do you still use NoScript on Firefox or did you drop it?

I use it in Firefox with XSS protection only enabled, and Restrictions disabled globally. ublockO is for website filtering in Medium mode.

 

[1chaoticadult]

I use it in Firefox with XSS protection only enabled, and Restrictions disabled globally. ublockO is for website filtering in Medium mode.

Ok I just wondering because I know you used to be a heavy NoScript user and didn't know if you still used it.

 

[wat0114]

Removed: SRP policy
Added: Hard_Configurator_6_Beta1 set to "Recommended settings"

This just seems to be a lot easier to configure and maintain.

 

[oldschool]

Netcraft which also applies heuristics on top of its blacklist and website rating data base)

 

[wat0114]

Removed NoScript addon, due to some nice info @Lenny_Fox provided me on the lack of need for NS used only for its XSS filtering, and added LocalCDN addon.

 

[oldschool]

added LocalCDN addon.

Are you using this in Edge? Be aware that it has limitations compared to FF version.

 

[wat0114]

Are you using this in Edge? Be aware that it has limitations compared to FF version.

No, only in Firefox.