Live data from Hacker News

Ask HN: How to keep the information on your Macbook safe

news.ycombinator.com

1–10 of 12 posts

Ask HN: How to keep the information on your Macbook safe

#1
Last year, my backpack with my Macbook was stolen in some pub. Yep, my fault for bringing it there. I got good travel insurance, so I had a new one the day after.

I'm good with backups, so no stuff was lost, but the person that stole my Macbook did of course have access to the source code of dozens of projects I was working on at that moment. What kind of precautions do you take to keep the data on your laptop safe?

Re: Ask HN: How to keep the information on your Macbook safe

#2
#1 Always ensure you have a password set on your computer. Whether first booting up or coming back from sleep, it should ask for a password. If they are going to steal your laptop, at least make them have to do some work of having to wipe your data.

#2 Glue all electronics to your hip. I don't care where you are or what you have to do. Get a backpack for all of your electronics and never let it out of your sight.

#3 I believe Apple was the first to do it with iPhone, might be available for Macbook, but if password is wrong 10 times, all data is wiped from phone, though I believe password is left intact.

Re: Ask HN: How to keep the information on your Macbook safe

#4

#1 Always ensure you have a password set on your computer. Whether first booting up or coming back from sleep, it should ask for a password. If they are going to steal your laptop, at least make them have to do some work of having to wipe your data. #2 Glue all electronics to your hip. I don't care where you are or what you have to do. Get a backpack for all of your electronics and never let it out of your sight. #3…

In addition to these 3, make sure you enable FileVault. This will encrypt all of your data at rest

Re: Ask HN: How to keep the information on your Macbook safe

#5
1) Make sure your harddrive is encrypted using Filevault (It's actually firevault 2). Make sure that you require a password to login and that if you're away from your computer for 5 minutes that you need to login with a password. I believe that Mac's have a find your laptop/remote wipe your laptop.

If you're working for a company suggest setting up a MDM management system like Jamf or Fleetsmith (GSuite may also support macs, but I'm not sure). These will allow you to automate setups including the forcing of encryption. Jamf at least has the remote wipe ability built in.

Re: Ask HN: How to keep the information on your Macbook safe

#8
If you store source code on your personal laptop[1] you have to enable encryption. That should be like 'security 101'. Especially if you go to tech conferences where people who might steal your laptop actually know what the "~/.aws/config" is and what "~/Work/" might worth. I would be very skeptical of ppl running around with laptops containing proprietary source code without encryption on.

If you own a mac:

  * Enable FileVault
  * Enable 'require password immediately'
  * Choose a password with 8 or more chars
  * Never leave the keyboard unattended
You can lock your mac with: "open -a ScreenSaverEngine" or even better:

echo 'alias klock="open -a ScreenSaverEngine"' >> ~/.profile'

[1] If this is a work laptop then the company should have some kind of security policy and encrypting everything is where everyone would/should begin.

Re: Ask HN: How to keep the information on your Macbook safe

#9
post #8

If you store source code on your personal laptop[1] you have to enable encryption. That should be like 'security 101'. Especially if you go to tech conferences where people who might steal your laptop actually know what the "~/.aws/config" is and what "~/Work/ " might worth. I would be very skeptical of ppl running around with laptops containing proprietary source code without encryption on. If you own a mac: * Enabl…

Easier way to lock your mac: ctrl-shift-power button

Re: Ask HN: How to keep the information on your Macbook safe

#10
post #9
post #8

If you store source code on your personal laptop[1] you have to enable encryption. That should be like 'security 101'. Especially if you go to tech conferences where people who might steal your laptop actually know what the "~/.aws/config" is and what "~/Work/ " might worth. I would be very skeptical of ppl running around with laptops containing proprietary source code without encryption on. If you own a mac: * Enabl…

Easier way to lock your mac: ctrl-shift-power button

Or close it?
Post reply on HN