11–20 of 55 posts
You can use it to disable (blacklist) all the Windows crapware (xbox, etc). Or in the extreme case, whitelist only specific files.
I still prefer a text config file over the GUI, but this thing is insanely powerful.
Interesting list. Any idea of the 'why' behind this? > No "Tuning" tools (not even stuff like Ccleaner!) Also what is a better alternative to 7zip > avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support)
For zips the windows built in support might be adequate, but I've yet to find a safe 7z unarchiver :(
> create another Admin account and transform your current one to limited/ restricted/ standard user account to reduce the attack surface enormously. Don't use Admin account for your tasks! It's crazy how Windows doesn't have a sane way for users to became administrators temporarily. LAPS is a weird hack and Azure PIM doesn't work for local admin.
Interesting list. Any idea of the 'why' behind this? > No "Tuning" tools (not even stuff like Ccleaner!) Also what is a better alternative to 7zip > avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support)
> avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support) MOTW support has been introduced in v22.00 [1]: >- New option "Propagate Zone.Id stream" in Tools/Options/7-Zip menu. [1] https://www.7-zip.org/history.txt
Interesting list. Any idea of the 'why' behind this? > No "Tuning" tools (not even stuff like Ccleaner!) Also what is a better alternative to 7zip > avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support)
> avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support) MOTW support has been introduced in v22.00 [1]: >- New option "Propagate Zone.Id stream" in Tools/Options/7-Zip menu. [1] https://www.7-zip.org/history.txt
This is such bad advice that I can't take the rest of this guide seriously.
Edit: The rest is even worse than I was expecting. E.g.:
> execute/ open new files with one-day-delay because after one day, the malware is not 0-day anymore
> use the only browser on Windows that natively supports hardware isolation: Edge
As a long time Linux user, I recently got confronted with the Windows group policy editor. You can use it to disable (blacklist) all the Windows crapware (xbox, etc). Or in the extreme case, whitelist only specific files. I still prefer a text config file over the GUI, but this thing is insanely powerful.
`gpedit.msc`, `regedit.msc`, PowerShell, and Active Directory are pretty much the standard toolset for any Windows sysadmin.
Earlier quoted context omitted.
> avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support) MOTW support has been introduced in v22.00 [1]: >- New option "Propagate Zone.Id stream" in Tools/Options/7-Zip menu. [1] https://www.7-zip.org/history.txt
I didn't know anybody saw MOTW as a positive. I hate it and I don't see what problem it solves.
Interesting list. Any idea of the 'why' behind this? > No "Tuning" tools (not even stuff like Ccleaner!) Also what is a better alternative to 7zip > avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support)
> avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support), Open/ LibreOffice, Firefox, True/Veracrypt, ... This is such bad advice that I can't take the rest of this guide seriously. Edit: The rest is even worse than I was expecting. E.g.: > execute/ open new files with one-day-delay because after one day, the malware is not 0-day anymore > use the only browser on Windows that natively sup…
E.g. "7-Zip doesn't have anti exploit support". Dug in to the source for that claim - it's a forum post of someone running Windows XP in 2020 (!) with an ancient version of Malwarebytes.