What is your security setup these days?

Hi.
I have faster navigation.
I don't use a fiber but a 4G+ LTE router.

 

Wow, I assume this your work machine? Because almost everything you use are corporate security tools. And what do you mean with MBAM by Microsoft? I mean Malwarebytes has got nothing to do with MS.

 

Microsoft BitLocker Administration and Monitoring

https://learn.microsoft.com/en-us/microsoft-desktop-optimization-pack/mbam-v25/

 

OK thanks, I always associate MBAM with Malwarebytes, my bad.

 

You're not alone ;-)

 

lol same, i had to look this up.

 

Windows 11 22H2

Backup: Macrium Reflect Home
Real-time protection: Eset Nod32 Antivirus
Content blocker: uBlock Origin
On-demand scanners: Norton Power Eraser, HitmanPro
On-demand tools: Veracrypt, KeePass, Mullvad

 

Hi Sampei
can I ask you if is 4G+ LTE router healthy ?
I mean it 's like to have a phone without Wifi always on , just because i was thinking about it
thanks Sampei

 

Hi,
I didn't quite understand your question.

 

Hi
well take a smartphone always on and with internet on and without wifi with internet , it's not healthy (for radiation and others problems)
seeing I would like to buy a 4G+ LTE router
thanks

 

Sphinx Firewall
AppGuard Solo
DeepFreeze

 

Changed home page:


https://start.duckduckgo.com/

 

I always liked it, but: Last updated on Feb 21st 2023 - OK / Windows 11 supported - OK
But they really should consider changing the name - Windows 10 Firewall Control - NOT OK

Yeah, me too, it seems to be the only reasonable search, but I was just suggested - https://presearch.com

 

@TairikuOkami
Have you tried https://search.disroot.org/? Excellent meta search. No BS!

 

It seems to me that it does not return sharp images in explicit content.
Probably because it is affected by Google's safesearch filter.



With the smartphone too many ads.
I don't like it.

 

W.10 Home x64 22H2
Local Account - Standard user - Limited permissions
UAC maximum - Always notify
Cloudflare DNS
Onedrive,Cortana,Advertising ID,Web Search - disabled
Usage of location data for Cortana disabled
Telemetry OFF
Removed some Windows optional features.

Microsoft Defender Firewall hardened with H_C.
Microsoft Defender hardened with Configure Defender (Customized level) - Cloud Block Level

• Ransomware protection - disabled
• No run in a sandbox
• Core Isolation: Memory integrity - disabled
• Some softwares hardened with maximum AE protection
• All Windows Exploit Protection options - enabled

MS Edge --disable-webgl --no-pings --enable-features="IsolateSandboxedIframes,EnableCsrssLockdown,EncryptedClientHello"

• Home page: https://start.duckduckgo.com/
• Search engine = DDG
• Enabled Security Mitigations - Strict
• Detection Protection - Strict
• Clipboard permissions - blocked
• Next DNS DOH - OISD Full + EasyPrivacy
• Share browsing data with other Windows features - disabled
• TLS_RSA_WITH_AES_256_GCM_SHA384 - enabled
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA - enabled

Policies:

• AutomaticHttpsDefault = 2
• DnsOverHttpsMode = secure
• DnsOverHttpsTemplates = Next DNS
• TLSCipherSuiteDenyList = "0x002f","0x0035","0xc013","0x009c"
• HubsSidebarEnabled - false
• CryptoWalletEnabled - false
• SyncDisabled - true
• AudioSandboxEnabled - true
• NetworkServiceSandboxEnabled - true
• RendererAppContainerEnabled - true
• SandboxExternalProtocolBlocked - true
• Edge3PSerpTelemetryEnabled= 0
• ExtensionManifestV2Availability= 2
• WebWidgetAllowed - false

Edge://flags:

Enabled:

• Block scripts loaded via document.write
• Block insecure private network requests
• Parallel downloading
• Enable experimental cookie features
• Experimental QUIC protocol
• Use DNS https alpn
• Enable Back/Forward Cache
• Back-forward cache - Enabled force caching all page
• Project Robin experiment
• Automatic HTTPS
• Disable opening mhtml in IE mode from web
• Strict-Origin-Isolation
• Show block option in autoplay settings
• Experimental Tracking Prevention Features
• Enable Digital Signature for PDF
• Microsoft Edge tracking prevention
• Third-party Storage Partitioning
• New PDF Viewer
• Origin-keyed Agent Clusters by default
• Origin-keyed Processes by default

Disabled:

• Show feature and workflow recommendations
• Enable system notifications
• Combine sync consent and sign in
• Allow Microsoft Search with Bing for any default search engine
• Allow preloading of pages by other applications
• Enable First-Party Sets
• Enable Drop's custom notification

Extensions:

Edge Store:

• UBO - Hard Mode with TLD's
• Video DownloadHelper

Chrome Web Store:

• SwiftDial
• Stream Recorder - download HLS as MP4
• Don't add custom search engines
• (Off) - AdGuard MV3 - Hard Mode with TLD's

 

ReviOS (debloated windows 10 22h2)
Hard_Configurator (Recommended settings)

• ConfigureDefender (Max setting)
• FirewallHardening ( Recommended & LOLBins blacklist enabled)

Process Lasso FREE
Brave Browser

• JShelter extension
  
• Mullvad DNS
  
• NoScript
• disable non-proxied UDP

Faronics Deepfreeze Standard

 

@Sampei Nihira
Hi
may I ask you if it could be disabled or turned off the Telemetry in w10 and w11 completly ?
because i have stopped the service and group policy
thanks

 

With Windows 11 I don't know,I assume so.
I still refuse to upgrade to Widows 11 and just don't know if I will.

 

hi
and with windows 10 , can you disable at 100% telemetry ?
just because i can't disable at 100% in w10 pro 64bit
thanks

 

iMac running macOS Catalina 10.15.7

• Malwarebytes Premium for Mac
• Malwarebytes Browser Guard for Firefox / Safari
• AdGuard Premium (Lifetime) for Firefox / Safari
• Backup ~ Time Machine, iCloud, Manual External HD and SuperDuper
• RoboForm Password Manager
• Firefox / Safari Browsers

Windows 10

• Webroot Complete
• Glasswire Firewall
• Cyberlock Pro
  
• AdGuard Premium (Lifetime)
• uBlock Origin
  
• RoboForm Password Manager
  
• Firefox / Edge Browsers

Some changes from my last post:

• Added Cyberlock Pro to Windows 10
• Added RoboForm Premium to Mac and Windows 10. (Deleted my LastPass Account in September 2023)

 

I cannot say with certainty whether it is possible to reach 100%.

 

W.10 Home x64 22H2
Local Account - Standard user - Limited permissions
UAC maximum - Always notify
Cloudflare DNS
Onedrive,Cortana,Advertising ID,Web Search - disabled
Usage of location data for Cortana disabled
Telemetry OFF
Removed some Windows optional features.

Microsoft Defender Firewall hardened with H_C.
Microsoft Defender hardened with Configure Defender (Customized level) - Cloud Block Level

• Ransomware protection - disabled
• No run in a sandbox
• Core Isolation: Memory integrity - disabled
• Some softwares hardened with maximum AE protection
• All Windows Exploit Protection options - enabled

MS Edge --disable-webgl --no-pings --enable-features="IsolateSandboxedIframes,EnableCsrssLockdown,EncryptedClientHello"

• Home page: https://start.duckduckgo.com/
• Search engine = DDG
• Enabled Security Mitigations - Strict
• Detection Protection - Strict
• Clipboard permissions - blocked
• Next DNS DOH - OISD Full + EasyPrivacy
• Share browsing data with other Windows features - disabled
• TLS_RSA_WITH_AES_256_GCM_SHA384 - enabled
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA - enabled

Policies:

• AutomaticHttpsDefault = 2
• DnsOverHttpsMode = secure
• DnsOverHttpsTemplates = Next DNS
• TLSCipherSuiteDenyList = "0x002f","0x0035","0xc013","0x009c"
• HubsSidebarEnabled - false
• CryptoWalletEnabled - false
• SyncDisabled - true
• AudioSandboxEnabled - true
• NetworkServiceSandboxEnabled - true
• RendererAppContainerEnabled - true
• SandboxExternalProtocolBlocked - true
• Edge3PSerpTelemetryEnabled= 0
• ExtensionManifestV2Availability= 2
• WebWidgetAllowed - false

Edge://flags:

Enabled:

• Block scripts loaded via document.write
• Block insecure private network requests
• Parallel downloading
• Enable experimental cookie features
• Experimental QUIC protocol
• Use DNS https alpn
• Enable Back/Forward Cache
• Back-forward cache - Enabled force caching all page
• Project Robin experiment
• Automatic HTTPS
• Disable opening mhtml in IE mode from web
• Strict-Origin-Isolation
• Show block option in autoplay settings
• Experimental Tracking Prevention Features
• Enable Digital Signature for PDF
• Microsoft Edge tracking prevention
• Third-party Storage Partitioning
• New PDF Viewer
• Origin-keyed Agent Clusters by default
• Origin-keyed Processes by default

Disabled:

• FedCmWithoutThirdPartyCookies
  
• Show feature and workflow recommendations
• Enable system notifications
• Combine sync consent and sign in
• Allow Microsoft Search with Bing for any default search engine
• Allow preloading of pages by other applications
• Enable First-Party Sets
• Enable Drop's custom notification

Extensions:

Edge Store:

• UBO - Hard Mode with TLD's
• Video DownloadHelper

Chrome Web Store:

• SwiftDial
• Stream Recorder - download HLS as MP4
• Don't add custom search engines

 

Using Kaspersky Antivirus Free, with Windows Firewall hardened with H_C