It doesn't matter really because nowadays all of them are just a front-ends to Windows Firewall.
Also legitimate software (i.e. firewall/AV) cannot use "oldschool" tricks like system service descriptor table hooks to obtain godlike privileges these days, while malware sometimes can do this by exploiting vulnerabilities, so in such cases it may be an unequal fight.
It's the best one I found after trying a few, because it's pretty easy to use, and lets me disable notification popups which is a part that always frustrates me about other options.
Why am I hearing about that specific FW in year 2026, this seems really good, at least the features written if it really supports rules based on parent processes, wildcards, SvcHost granularity without gotchas.
Been wrangling with Windows FW for ages, trying to get some badly behaved programs to update like Discord, Teams and others that change install paths or updater executable names or hiddenly use msedgewebview2.
PolicyAppId and tagging based rules have given some success but Windows FW is still really broken. Definitely giving Fort a try.
> A "Core Isolation: Memory Integrity" feature of Windows 10+ prevents creating such memory area (leading to BSOD).
> We tried to attestation sign the driver via new EV certificate by MS to fix the driver's limitation, but failed (see #108).
> So for now users have to disable the "Core Isolation: Memory Integrity" feature
Disabling HVCI doesn't sound like a good idea honestly. I mean they abuse kernel memory protection to bypass EV Certificate restrictions leaving the system in a state where another driver can mess with FW's internal structures using the same trick.
If I may use your expertise a bit: I need air quality data for two cities, one of which doesn't have any air quality monitoring stations. Is there anything I can use as a proxy for air pollution, like satellite data? Also, do you know any sources for that data?
Thanks!
P.S.: I'm passionate about air quality, given I have alergies and was an active member of the bicycle activism movement for about 10 years.
Hi, Vlad. We've met before, I'm the person whose 70-year-old mother is using Kagi. I also have actively been trying to move people to Kagi for some time - even paying for their accounts. The biggest block I face is not brand recognition. It's a lack of An Android app.
To move my mother to Kagi, I had to install Brave Browser on her android cell phone, make it the default browser on Android, change Brave's default search engine and create a desktop shortcut to it.
Android is ubiquitous in Brazil. I won't be able to move much people to Kagi with a process this involved.
Happy to chat further about this topic if you wish, privately or publicly.
reply