Some noob questions

[ghost]

Hi!
First I love what you have created for the public. This windows tool is very cool. I do have some questions though. I am very new to privacy and security. There is a lot of FUD and I just want to make the best decisions.

My first question is should I start with a clean install of the OS or if I buy a new surface machine I will be okay to run the script?

2nd: Do I only need to run the script? Or should I do the script, compliance checking and hardening? I’m a little confused about all that.

3rd how often do I need to run the script for like updates from Microsoft?

4th do you also use a surface machine and if so what do you recommend?

4.5: in the video for total protection you put a 2 instead of a 1 why is that?

5th the privacy community is concerned about the telemetry from Microsoft, do you think there is a need to worry about that?

Thank you so much for the work you have done!

[HotCakeX]

Hi, thank you!

1. You can apply the hardening measures at any time, no clean installation needed. If you clean install your OS, whether on a new device or your current one, make sure it's up to date first by installing updates and then use the module to harden it.

2. Compliance checking is just an extra feature, not necessary to be used. All you need to do is to install the module Install-Module -Name Harden-Windows-Security-Module -Force and then use the protect-WindowsSecurity cmdlet.

3. You can use the watch button on the repository and be notified using Email or GitHub notifications when there is a new version.

like this, just check the box for releases

4. Yes, I use Surface device too, Surface book 3 I have to upgrade soon. Depending on your use cases and budget you need to decide which one to choose :) https://www.microsoft.com/en-US/store/b/shop-all-microsoft-surface

5. I used option 2 for Microsoft security baseline + optional overrides

6. There is absolutely nothing to worry about. Just minimize your exposure to 3rd party services because not all of them handle user data properly.

Feel free to ask any other related questions! Thanks, have a good one!

[ghost]

Sorry for all the questions! Do you recommend using native Microsoft apps like their email client? Or download outlook? I have heard good things about thunderbird

[HotCakeX]

No it's okay,
I use the new Outlook app which replaces the built in Mail app, both of them are great, i'd recommend those. I don't use 3rd party software and solutions when 1st party alternatives already exist, this also minimizes the attack surface and prevents data leaks through 3rd parties.

[ghost]

Thank you for all your help!

[ghost]

This might sound really off topic but since you are very knowledgeable in cybersecurity do you have a mobile recommendation? I’m an Apple person myself.

[HotCakeX]

I use Samsung so I'd recommend that, but I don't really do important stuff on my phone.