41–50 of 55 posts
Don't forget a privacy filter for the screen. Amazing how much information you can glean just from shoulder surfing.
Don't forget a privacy filter for the screen. Amazing how much information you can glean just from shoulder surfing.
Can't speak for other OSes but OS X constantly phones home to Cupertino, sometimes not even using encryption, thus leaking data when you're booked into a public Wifi. I literally spent weeks last year grepping the entire Mavericks base installation for hardcoded URLs, domain names and IP addresses and setting up entries in /etc/hosts and NAT rules to hardwire that stuff to 127.0.0.1. I also had to disable lots of Lau…
But I definitely agree, OS X phones home (and other places) all the time. Everytime my phone rings my mac tries to connect to some apple server. ...
Can't speak for other OSes but OS X constantly phones home to Cupertino, sometimes not even using encryption, thus leaking data when you're booked into a public Wifi. I literally spent weeks last year grepping the entire Mavericks base installation for hardcoded URLs, domain names and IP addresses and setting up entries in /etc/hosts and NAT rules to hardwire that stuff to 127.0.0.1. I also had to disable lots of Lau…
> I literally spent weeks last year grepping the entire Mavericks base installation for hardcoded URLs, domain names and IP addresses and setting up entries in /etc/hosts and NAT rules to hardwire that stuff to 127.0.0.1 I don't know how OSX works, but can't there still be addressed you missed that are hiding in the proprietary code? Also, if you are this worried about security, wouldn't you be better off just using…
Some others have provided their inputs, my one is just short: take your devices with you, all the time. Yes, that includes the quick toilet break at starbucks. I can't remember how many times I heard total strangers asking around "can you look after my stuff quickly?". You can do that for your beach towel, but not for your devices.
Provided that you lock your device before you leave, have the disk encrypted and do regular backups, what's the problem here?
Can't speak for other OSes but OS X constantly phones home to Cupertino, sometimes not even using encryption, thus leaking data when you're booked into a public Wifi. I literally spent weeks last year grepping the entire Mavericks base installation for hardcoded URLs, domain names and IP addresses and setting up entries in /etc/hosts and NAT rules to hardwire that stuff to 127.0.0.1. I also had to disable lots of Lau…
Some others have provided their inputs, my one is just short: take your devices with you, all the time. Yes, that includes the quick toilet break at starbucks. I can't remember how many times I heard total strangers asking around "can you look after my stuff quickly?". You can do that for your beach towel, but not for your devices.
Earlier quoted context omitted.
I agree with the above post--I can't even count all the times I've seen people bring in a corporate laptop (complete with an asset tag and call if lost sticker--that's just begging for theft attention) at a public coffee house left unattended. If you are going to bother using a VPN 2-factor token and privacy screen, please keep your laptop in your custody and view at all times. Ideally, work from a private executive…
re: "asset tag and call if lost sticker". I think it's also a great idea to not have your user and hostname set to be "johnbigbucks@bestinvestconsulting" but something more generic or randomized. I use something like this to randomize my hostname. awk 'length==6' /usr/share/dict/words | grep -v '[^[:alpha:]]' | shuf -n 1 | tr '[:upper:]' '[:lower:]'
egrep '^[[:alpha:]]{6}$' /usr/share/dict/words | shuf -n 1 | tr A-Z a-zI don't particularly have any security measures other than a secure password, full disk encryption and locking the screen after a few minutes. If you are taking a device outside of the office (e.g. to take home to work over the weekend) you should be using those anyway. Pretty much all the services (even internal systems for staff only) I interact with are available publicly and have HTTPS, so using a VPN isn't reall…
> using a VPN isn't really going to change much I disagree, using a VPN on open wifi protects against HTTP downgrade attacks, weak cypher compromise, replay attacks... HTTPS for most sites is just not as secure as it should be. It also masks your traffic so outsiders can't even see what servers you are accessing, or how. Wrapping the traffic in a VPN and securing access to your internal assets to office and VPN IPs o…
Earlier quoted context omitted.
> I literally spent weeks last year grepping the entire Mavericks base installation for hardcoded URLs, domain names and IP addresses and setting up entries in /etc/hosts and NAT rules to hardwire that stuff to 127.0.0.1 I don't know how OSX works, but can't there still be addressed you missed that are hiding in the proprietary code? Also, if you are this worried about security, wouldn't you be better off just using…
Apple locks in IOS developers to OSX - I'm not aware of any practical way of building IOS apps and submitting them to the app store without running OSX. That doesn't mean you need to use it as your regular personal use OS, but if you're spending your days writing IOS apps you don't have any other choice.
XCode (like itunes) is a worthless piece of garbage. It's unfucking unbelievable how little this "IDE" accomplishes. And uploading to app store (with certificates, provisioning profiles, launch images, icons etc) sucked all the brain juice out of me.
The error messages are even much more cryptic than Windows 95. Why on earth is this piece of locked up abomination so popular? Why are we crying about freedom from government so much and then rushing to buy this crapware?