How to maximally secure my new rMBP?

Discussion in 'MacBook Pro' started by f0ku5, Aug 2, 2015.

  1. f0ku5 macrumors member

    Joined:
    Jul 15, 2014
    #1
    Hello all! :)
    I own Mid-2015 rMBP 15" and I need second advice from you guys.
    I'm often using my MacBook in public places so I'm kind of afraid of it being stolen or something like that.
    How can I maximise my security software wise? I currently have FileVault enabled and recently discovered an option to create firmware password. Turned this on also. Firewall is on too ;)

    Is there anything else that I can do to make my rMBP more secure?
     
  2. TheIguana macrumors 6502a

    TheIguana

    Joined:
    Sep 26, 2004
    Location:
    Canada
    #2
    Don't leave your laptop alone in an unsecured place?

    I know at my University campus security used to walk around the library and put these little bookmarks on unattended laptops. From what I recall they handed a ton out.

    security-bookmark_1.jpg
     
  3. f0ku5 thread starter macrumors member

    Joined:
    Jul 15, 2014
    #3
    Great note! :D
    I'm not leaving my laptop alone but we all know that laptop can be stolen even when you're typing on him or something ;)

    I was rather asking about steps that can be done via software like the things I've just did - FileVault, firmware password etc. Things that can make thief life harder when he will have my laptop (which I pray will never happen!)
     
  4. campyguy macrumors 68030

    Joined:
    Mar 21, 2014
    Location:
    Portland / Seattle
    #4
    Decent advice here, which I bookmarked: http://lifehacker.com/how-to-configure-os-x-to-protect-your-privacy-1716352334

    I also put all of my Macs in Stealth Mode, and (I have a few dozen Macs in my small business) work from Standard User Accounts, even mine - no work/surfing happens in an admin account. I clear out my browser caches and cookies at least 2-3 times per week, and I don't use Flash (I've banned Flash from my company computers - it's a security nightmare, and only use Private sessions in Chrome for the occasional cat video...).

    I'm also from NY - I never leave any of my stuff unattended - think of it this way, if I dropped a $100 bill on the floor and left it there for 90 seconds, would I expect it to be there when I returned? If the answer to that question is "I dunno" or "no", then pick up your sh** and deal with it, it's that simple.
     
  5. thekb macrumors 6502a

    Joined:
    May 8, 2010
    #5

    You may already be aware of this, but fyi, I understand that FileVault only works when the computer is shut down. Closing the lid or putting it to sleep does not enable it.
     
  6. f0ku5 thread starter macrumors member

    Joined:
    Jul 15, 2014
    #6
    Thanks for both replies! I have turned on Stealth Mode, that's a nice feature especially when I'm using unsecured Wi-Fi in public places.
    And yes - I know that FileVault only "works" when I'm turning my MacBook on but that's exactly what I want :)

    Any more advices?
     
  7. MBHockey macrumors 68040

    MBHockey

    Joined:
    Oct 4, 2003
    Location:
    New York
    #7
    Stealth mode doesn't protect you while using unsecured/unknown wifi. I think you're confusing it with a VPN.
     
  8. f0ku5 thread starter macrumors member

    Joined:
    Jul 15, 2014
    #8
    I'm not thinking about it "protecting me" but rather instead about being a little more secure. Nobody can ping my rMBP or such.
    At home while I'm behind my router NAT that's not needed but while outside... who knows! :)
     
  9. scaredpoet macrumors 604

    scaredpoet

    Joined:
    Apr 6, 2007
    #9
    In Preferences, under "Security and Privacy," enable "require password x minutes after sleep or screen saver begins." Set it up to do this within a short period, say, 1 minute. This will allow your mac to automatically lock and require a password shortly after the screen dims or goes to screen saver.

    Then, go to Applications -> Utilities and launch "Keychain Access." Select the "Keychain Access" pull down menu from the menu bar, and open "Preferences." Check the box labeled "Show Keychain Status in menu bar."

    You'll now see a lock icon in your menu bar. From that icon, there's a "lock screen" option. Whenever you leave your Mac, use that option to lock your screen immediately. Your password will be required to unlock it each time.

    As for network security, enabling the firewall should be plenty secure to prevent most network-based intrusions. Though you should consider using a VPN service if you frequently use public WiFi.
     
  10. barbu macrumors regular

    barbu

    Joined:
    Jul 8, 2013
    Location:
    ott.on.ca
    #10
    It depends on the level of paranoia at which you want to operate. Stealth mode does very little for security, unless you are not using the network at all.. If you are, then I will be able to see that your machine is there, stealth mode or not. Sometimes, false security is as bad as no security. If you are properly paranoid, you would be using a paid VPN service from a reputable company whenever you used public Wi-Fi. Alternatively, use the hotspot from you phone.
    If you are really serious about firewalling your Mac, learn about the built-in BSD firewall, pf.
    You should be encrypting your filesystem and have find my Mac activated. You should have an exceptionally strong password, 12-16 characters at least (make one up and type it out a few times, you will have it memorized in a very short while). You should use a utility like 1Password to handle all your passwords, recovery keys, etc, and use it to create and store unique, strong, random passwords for every single one of your accounts and services. You should have two-factor authentication enabled for all services that support it.
    And scaredpoet is absolutely right about enabling the Keychain menu item to allow for quick locking, you could also use the keyboard shortcut (Control-Shift-Eject) which blanks the screen, which should invoke a lock screen if you set your mac to lock on display sleep.
     
  11. Big Ron macrumors 6502

    Big Ron

    Joined:
    Dec 7, 2012
    Location:
    United Kingdom
    #11
     
  12. newellj macrumors 601

    Joined:
    Oct 15, 2014
    Location:
    Boston, MA, US
    #12
    Turn on Find My Mac.
     
  13. newellj macrumors 601

    Joined:
    Oct 15, 2014
    Location:
    Boston, MA, US
    #13
    Nice tip, thanks for that one.
     
  14. MBHockey macrumors 68040

    MBHockey

    Joined:
    Oct 4, 2003
    Location:
    New York
    #14
    what is the difference between "protecting me" and "secure"? you aren't making much sense man.
     
  15. SlCKB0Y macrumors 68040

    SlCKB0Y

    Joined:
    Feb 25, 2012
    Location:
    Sydney, Australia
    #15
    Who cares if someone can ping you?
     
  16. maflynn Moderator

    maflynn

    Staff Member

    Joined:
    May 3, 2009
    Location:
    Boston
    #16
    As others stated, don't let the laptop leave your side.

    Get a different firewall that masks your ports, i.e., stealth mode.
     
  17. MBHockey macrumors 68040

    MBHockey

    Joined:
    Oct 4, 2003
    Location:
    New York
    #17
    he doesn't know what he's talking about and instead of admitting it he just keeps digging himself deeper :p
     

Share This Page