Live data from Hacker News

Ask HN: How do you secure your Mac?

news.ycombinator.com

21–30 of 75 posts

Re: Ask HN: How do you secure your Mac?

#21
I used to use little snitch and now came across lulu [0].

> LuLu is the free, open-source macOS firewall that aims to block unknown outgoing connections, unless explicitly approved by the user.

I would love to know if anyone else has switched over and what's missing. I haven't had a whole lot of time to do a thorough investigation.

[0]: https://objective-see.com/products/lulu.html

Re: Ask HN: How do you secure your Mac?

#22
Filevault, no antivirus (except what comes with macOS), Objective See's Do Not Disturb [1], 2F SSH depending on the host.

What's your threat model? My recommendations are going to be based wholly on that. Are you an average Joe/Jane, or a reporter for The Intercept?

1. For evil maid attacks. https://objective-see.com/products/dnd.html

Re: Ask HN: How do you secure your Mac?

#26

My primary concern is someone physically stealing my Macbook or iMac. They are personal devices and the content on them would not be much of interest to others, foreign governments or other entities. I have Prey[1] installed. On both devices, I have "admin" credentials taped to the back. The account is actually a locked down user-level account with very little authority, other than being able to get on wifi/browse th…

Wow that's a great idea to provide a fake admin account, so that you can get usage data. Could be useful even if you don't use prey if you have find my mac turned on.

Re: Ask HN: How do you secure your Mac?

#27
post #9

Full disk encryption, that's it. When I get up, I lock the screen.

To add to this: the shortcut key for locking the screen is Cmd+Ctrl+Q. There's also the possibility of configuring a Hot Corner for this.

Didn't know this, I was using an Alfred command instead. Thanks!

Re: Ask HN: How do you secure your Mac?

#28

I used to use little snitch and now came across lulu [0]. > LuLu is the free, open-source macOS firewall that aims to block unknown outgoing connections, unless explicitly approved by the user. I would love to know if anyone else has switched over and what's missing. I haven't had a whole lot of time to do a thorough investigation. [0]: https://objective-see.com/products/lulu.html

I have been using lulu for several months and love it. The interface for managing rules is easy to follow.

Re: Ask HN: How do you secure your Mac?

#30

The thin I do that I think is most important is use Little Snitch ( https://www.obdev.at/products/littlesnitch/index.html ) to track/block/approve incoming and outgoing network requests. It's how I caught a new Seagate external hard drive making calls to Baidu and Google. https://fosstodon.org/@lukewrites/100907932236227641

>> I thin I do that

I appreciate that Quickstray.

I think FDE plus a VPN and DNS blocker tends to be enough for not state level actors.

Post reply on HN