What is your security setup these days?

Windows 7 Pro SP1 x64

Firewall & Anti-Virus
Router NAT/SPI (Password Protected) (McAfee Secure Home Internet)
Windows Firewall
Emsisoft Anti-Malware 2019.2.0.9269 (with hpHosts file updated daily)

Blocking/Hardening
AppGuard 6.2.9.1113 (powershell, cscript & wscript added to User Space "yes." Several apps added to Guarded Apps)
HitmanPro.Alert 3.7.9 Build 777 RC (CryptoGuard only)
Quad9 DNS

Mozilla Firefox (Avira & Emsisoft Browser Safety & HTTPS Everywhere)

 

After a few years of paranoia for nothing, I realized you only need:

A good 3rd party firewall; I use Windows Firewall Control with as much 'red' as possible.

Data moved off the OS drive and a backup program; I use Macrium Reflect.

Then all internet sanboxed or in a VM; loving Ubuntu for that.

 

I run Parrot in a VM and it works great! Firejail comes pre-installed and is setup to work with Firefox and Tor Browser.

Aside from that, I run OSArmor and MBAE just for giggles along with TunSafe + a VPN supporting it.

No complaints so far!

 

A host running trusted programs, a VM for everything else, occasional backup; nothing else needed.

 

Interesting, can you install Parrot it like you can Whonix on a virtualbox VM?

 

Really looking forward to Windows Sandbox. I'm hoping I'll be able to run videos inside of it without the standard VM lag

Not sure what you mean, but you can download a prepared .ova, all you have to do is double click it and you can start it and start using it.

Default password is "toor"

https://parrotsec.org/download-home.php

 

I'm over the whole security paranoia, just run the video in the host on VLC. If streaming, the sites should be trusted enough to run in Chrome on the host.

I used Sandboxie for years but it annoyed me one too many times, it lives, but just for rare occasions I need browsing in the host.

I'm not judging, I've been there with locked down security. I just decided I don't want to live like that anymore.

 

Hallelujah! I've gotten rid of all the fluff. Know what you use, and know you can trust it = peace of mind!

 

I've decided to stop acting like a kid in a toyshop and run the set of simple programs in my sig that, hopefully, will give me pretty tight protection.
Time will tell.

 

Until you install a compromised "safe"soft that toasts your system and then it`s back to the trenches for you.

Regards Eck

 

I've got Reflect, my house could burn down and I would be back in a few days.

 

Nice. Though for me Stuff is more important than Some.

 

I'm mostly just curious to see if virtualization will ever match "real" Chrome when it comes to speed.

I'm currently streaming everything in Chrome, using AppContainer. It's working great, but I have this strange dream of doing all my browsing in Application Guard

 

That worked thanks!

FYI the Surf Anon app is pretty nice for anonymity.

 

Yes you seem to have yourself well covered with VM + Macrium.

Regards Eck

 

Thank you. And I can't argue with your preference. Sometimes even Other gets the nod.

 

I use VirtualBox and even streaming radio is a challenge. I ran Cinebench in a Win10 guest and clocked over 900 with an 8700K, with 1600 in the host. The internet speed test is around the same.

The VM has plenty of power, but the weakness is how it engages with the real world; especially display. This will change, we will just have to wait, and I share your curiosity.

 

Use KVM passthrough gpu if you have necessary hardware setup. You need to use Linux as host OS, of course.

 

Wedded to Win 10 for life as host unfortunately. But very interesting...

 

It's good to see that paranoia is still abundantly prevalent in this thread!
It amazes me that some people can actually use their systems given the amount of armour plating and kevlar armor they're carrying.

 

This is where multi-core processors and lots of ram come in handy, you can layer your defenses with little or no impact.

 

my new ultralight combo:

webroot antivirus + voodooshield free + nvt syshardener

 

yep, since switching everything over to MacOS, I only use MBAM free for periodic scanning.

 

Windows XP Home (My PC)
Windows Firewall
AdGuard DNS - CloudFlare DNS
PsExec
DEP Always ON
Trick POSReady 2009 (EOL)
Black Viper's List +

Control panel -> Pc security center -> Automatic updates -> Disable automatic updates.
services.msc -> Pc security center -> Stop the service -> Start type disabled.
service.msc -> Automatic Updates -> Stop the service -> Start type disabled

No NET Installed
SMB Protocol Disabled
MBAE Premium
OSArmor
I.E.8 No Flash
I.E.8 (Script blocking) - F12 -> Disable -> script ******
I.E.8 (Trick 1803) - Block the downloadable executable files.

New Moon (Pale Moon fork for XP) - Custom Setting About:Config
UBO
UBO Updater
NoScript
HTTPS Always
Decentraleyes
No Resource URI Leak
Super Start

****** = Causes a problem with Outlook Express

 

Never thought I'd say it but man I miss XP.