What is your security setup these days?

It will never remember my whitelist. I've put it in training mode, rebooted three times, a system shutdown, and manually whitelisting some programs. Yet I was still being presented with various popups when I wanted to shutdown/reboot the PC after I exited the training mode. Also, I got popups about HKLM while I only put HKUS in the protected registry list.

 

Well that does pose a problem. That's a shame it is really a good program otherwise.

 

hi kjdemuth
if you've set up cfw using chiron's guide, could you tell us the reason why you chose not to disable the hips component, please? thanks

 

VTchromizer is just what I needed, thanks.

 

Remember that OA in its default settings uses a whitelist and auto trusts signed files. I have all of that disabled and its pop up hell when i install/run new software. (Now i disable it and re enable the protection after installing)

 

Well after messing around, I've finally made the switch to Chrome. It feels quite a bit faster than FF + Sandboxie. I'm running Adblock Plus with the following lists: easy list, fanboys social blocking, fanboys annoyance, and malware domains. I'm also using Scriptsafe which is blocking from: MVPS HOSTS, hpHOSTS, Peter Lowe's HOSTS Project, MalwareDomainList.com, and DNS-BH – Malware Domain Blocklist. Combine these with Google's built in malware and phishing protection and I think I'm pretty set in terms of filtering

 

using chrome now too,super fast.

 

It may be a good browser but I just can't go with Chrome myself, especially after their recent privacy policy change. To some degree I feel Google is worse than the NSA about spying on you. They already have a wealth of information about you and then using their own browser only makes that easier for them to fingerprint you and actions you take even on another computer.

If you're happy with your choice then that's good, just saying I myself steer clear of their stuff as much as possible. Difficult to beat their search engine but I'm on the fence about possibly actually switching over to Bing for some stuff at least. Though the new changes with their Hummingbird search really pays off with voice activated searching - much more accurate now.

 

What about Dragon and Iron?

 

AdvancedSetup, I think you and I agree on this:

Firefox with NoScript

Bo

 

I had similar concerns when I moved from Firefox to Chrome. I took some precautions that can make tracking me a little "harder":
- I changed settings in browser (do-not-track, location services...)
- I NEVER surf the net while being logged into Google account
- every time I close the browser (and that is quite often) everything from my session is cleared (cookies, history, temp files, searches...). Sandboxie takes care of all that.

I know they can still track me by installation ID, IP or some other ID connected to my computer. But tracking across different computers would be IMO harder. Maybe by browsing habits or something similar.

I know this is not 100% private browsing, but I think that this can't be achieved any more.

 

My main laptop setup:

- Windows 7 Ultimate:
SUA,
AUC - max
no system backup as I have Eaz-Fix
automatic Windouws Update
I stopped using SRP and Applocker due their high user unfriendliness.
I have many unnecessary services disabled thanks to Black Vipre.

- Imaging - Macrium and Paragon freebies
- Eaz-Fix (=Rollback Rx 9.1 + imaging - cool thing, now discontinued)
- CIS: HIPS - Safe,
FW - Custom,
AutoSandbox - Limited,
Stealth ports.
- EMET 4.0 - the max my PC allowed to have:
DEP - OptOut,
SEHOP - OptOut,
ASLR - OptIn,
Cert.Trust - Disabled - just not interested in it for now.
Deep Hooks - Off,
Anti Detours - On,
Banned Functions - On.
Almost all user's apps and all Internet facing apps are covered with all 12
mitigations whenever it's possible.
Skin - Dark Style - the real reason why I use EMET 4.0 and often open it to tune some app

- Blue Coat K9 Web Protection - actually I don't feel that I get additional protection but recently I found out you can tune it to bark so let it bark .

- Malwarebytes Anti Exploit - very lite and very user friendly - install and forget. And I believe it'll be cooler then EMET when it grows out of beta.

Cheers!

 

There's always Chromium, which you can compile yourself or obtain from other companies.

I don't share anything private online without proper safeguards anyways, so Chrome can have my public info.

 

I like the HIPS running because I like the additional control it gives me. I don't mind getting some pop ups. Chiron's guide does recommend it off because of it being to chatty. Coming from the earlier versions of comodo firewall I've had chattier than this version.

 

Minimum effort/resources with maximum effect.

 

Of course. Hehehe

 

Your song has got a nice tune.

 

Just give WSA a try for six months.https://www.wilderssecurity.com/showthread.php?t=354285 You'll love it. You'd never wanna leave it.

 

Music to my ears.

 

I've added Outpost Firewall to my setup. So far all three are playing nice together. Like having three musketeers guarding my system

 

Reinstalled CIS 6.3 and so far running smoother than its forerunners.

 

Is it the same laptop where it caused sluggishness?

 

Yes it is.

However im using the default "internet security" configuration and it runs just fine.
When i previously installed comodo i may not have removed remnants of previous software correctly.

At the moment i cant fault its performance.

 

Wait, I thought this was your song.

http://www.youtube.com/watch?v=MYeN0j_G6g4

Bo

 

Yes...that too...you're on your "A" game today!