1760995376_maxresdefault.jpg

Security is a journey not a destination. Let’s go over all the ways you aren’t secure and how you can minimize your footprint.

Website Guide: https://christitus.com/creating-a-secure-system/

Chapters:
00:00 Hardware
03:50 Operating Systems
07:10 Browsers
07:50 Password Managers
09:45 Network
13:35 The Truth about VPNs .

►► Digital Downloads ➜ https://www.cttstore.com
►► Patreon ➜ https://www.patreon.com/christitustech
►► Twitch ➜ https://www.twitch.tv/christitustech
►► Website and Guides ➜ https://christitus.com

source

40 thoughts on “Creating a Secure System

  1. Finally someone that say the truth about VPN's. I'm so sick of youtubers that promotes insert random vpn name here and talk shit about security.

  2. Brave browser sucks completely. Too much bloated browser with crappy ads which cant be disabled, it re-enables them with every update and brave search also cant find anything. While it has some useful features like built-in support for Adblock/Ublock filter lists which are updated on the fly. Overall it operates with same downsides as of chromium engine – incompatible with large amount of tabs usage. Impossible to open it with 2000 tabs. It doesn't support discarded tabs on the launch and if opening session with 2000 tabs it will kill CPU, network, which will result in sites to temporarily block your ip because of too many connection attempts. And Brave after eating 70-90% of CPU will eventually crash. And there is no way to disable, this is how poorly made Chromium engine works – it doesn't support preventing background tab load and discarded tabs on launch. Nothing can help with this. With Firefox I can open and restore a session with 20k tabs open, which are in discarded state. Firefox is much better than any chromium based browser will ever be.

  3. Security is just common sense lol if u go downloading and clicking what ever and use public wifi then you get what u asked for.

    I've personally haven't been infected in years last time i think installed a malware of some sorts when i was 12 years old barely knew anything about computers and still learning i'm now 27 lol using linux as my main os after windows 11 garbage came out.

  4. Tried GRC and I have a quandary: I would like to know how to still port 113. I've tried to search for a solution, but have come out more confused (I use ufw). What advise do you have regrading this port?

  5. Also, I'm trying to find a way to configure my firewall to overall stealth mode. As far as I can tell, the ufw doesn''t have this option (drop and not deny or reject). In this I would really appreciate you input as to what should I use – firewalld/iptables/nftables? -something cpletely different (not a monty python firewall..)

  6. First ad foremost: thanks for your tutorials. I've been learning and implementing a lot of your recommendations. However, I now have a question: I installed firejail & profiles, but did not run 'firecfg' on them. When i did, it broke a lot of my PC functionality. Then I found out that there is a debate on whether it is beneficial or not. I ended up just removing and purging it, and got back my desire functionality. -I would appreciate you opinion on if/how to use it, and your recommendations.

  7. Using openvpn on router. To disable response to pings it looks like VPN services have to be disabled. Not sure if its a limitation of openvpn or just some artificial limitation that my router has.

  8. Except iDrac doesn't have access to the Memory Bus and it runs as an actual separated embedded computer, not in the same microcontroller that the main chipset uses.

    Intel used the same thing for everything to save cost it seems.

  9. Well the journey just hit pot-holes. No kvm's in Ubuntu, no working snap gui in Ubuntu server. Keeps asking me if I was root….Now to effectuate this journey more video's are needed for trouble shooting Proxmox straight out of the box.

  10. Hi Chris. I have a question that goes on the contrary road: how can I fully disable ELAM? I have made an image of my old laptop that had a AV application on it, I no longer have that AV license, I uninstalled it, but Windows won't boot straight away until I F8 and select "disable ELAM" everytime.

  11. Hello Chris, I have a question: When you remove a big chunk of the windows OS be it 10 or 11, aren't you putting your OS at risc? I'm thinking intrusion and other online riscs?

  12. Hi, if possible can you make a video on microsoft services which are safe to disable in msconfig ? I feel like quite a bit of them can be avoided

  13. Key takeaway from this video :
    "Don't blame others as an excuse for you not working hard enough." 👍👍👍
    Brave browser taming the laziness outta me. 👌👌👌

  14. @Chris, Arch uses iptables, ufw is just a user interface frontend over iptables. Also, there is almost no mention about how many CVE's get marked as fixed for a Linux Distro but are not really fixed. Your video isn't really providing much value aside from the link to Meshcentral, and that only provides value in terms of additional visibility. Dbus (a requirement for any systemd init) is also not mentioned at all.

  15. You should make a video on how to update Intels Management Engine. I've been looking for a guide or a video and anyone I see says to go to your PC manufacturer's website but mine is custom built. Would be really useful to show how to do it using the official tools and that Mesh Central thing.

  16. I usually find all these shell prompt customizations ridiculous. But I have to admit your's look really beautiful. I am tempted to ask – hell I have to ask – What is this?

  17. This is another video (like the debloat one) I'll keep coming back for the next years to come! Thanks for such comprehensive display of information!!!

  18. What I did to my "smart" camera is I blocked the API servers of it's cloud junk on the router side, now it only works via LAN only. And you can do the same to your 😀 "smart" toaster as well

  19. If you have a router with firewall, why do you need a firewall on your host, both router and hosts are using the same iptables for a firewall. Let's say we have a wired only LAN, without wifi API exposing then LAN. I am talking about home labs, not a server environment.

Comments are closed.