Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

How to maximally secure my new rMBP?

F

f0ku5

macrumors regular
Original poster
Jul 15, 2014
130
136
Hello all! :)
I own Mid-2015 rMBP 15" and I need second advice from you guys.
I'm often using my MacBook in public places so I'm kind of afraid of it being stolen or something like that.
How can I maximise my security software wise? I currently have FileVault enabled and recently discovered an option to create firmware password. Turned this on also. Firewall is on too ;)

Is there anything else that I can do to make my rMBP more secure?
 
f0ku5 said:
I'm kind of afraid of it being stolen or something like that.
Click to expand...

Don't leave your laptop alone in an unsecured place?

I know at my University campus security used to walk around the library and put these little bookmarks on unattended laptops. From what I recall they handed a ton out.

security-bookmark_1.jpg
 
  • Like
Reactions: imlovinit and ABC5S
Great note! :D
I'm not leaving my laptop alone but we all know that laptop can be stolen even when you're typing on him or something ;)

I was rather asking about steps that can be done via software like the things I've just did - FileVault, firmware password etc. Things that can make thief life harder when he will have my laptop (which I pray will never happen!)
 
Decent advice here, which I bookmarked: http://lifehacker.com/how-to-configure-os-x-to-protect-your-privacy-1716352334

I also put all of my Macs in Stealth Mode, and (I have a few dozen Macs in my small business) work from Standard User Accounts, even mine - no work/surfing happens in an admin account. I clear out my browser caches and cookies at least 2-3 times per week, and I don't use Flash (I've banned Flash from my company computers - it's a security nightmare, and only use Private sessions in Chrome for the occasional cat video...).

I'm also from NY - I never leave any of my stuff unattended - think of it this way, if I dropped a $100 bill on the floor and left it there for 90 seconds, would I expect it to be there when I returned? If the answer to that question is "I dunno" or "no", then pick up your sh** and deal with it, it's that simple.
 
f0ku5 said:
Hello all! :)
How can I maximise my security software wise? I currently have FileVault enabled and recently discovered an option to create firmware password. Turned this on also. Firewall is on too ;)
Click to expand...


You may already be aware of this, but fyi, I understand that FileVault only works when the computer is shut down. Closing the lid or putting it to sleep does not enable it.
 
Thanks for both replies! I have turned on Stealth Mode, that's a nice feature especially when I'm using unsecured Wi-Fi in public places.
And yes - I know that FileVault only "works" when I'm turning my MacBook on but that's exactly what I want :)

Any more advices?
 
f0ku5 said:
Thanks for both replies! I have turned on Stealth Mode, that's a nice feature especially when I'm using unsecured Wi-Fi in public places.
And yes - I know that FileVault only "works" when I'm turning my MacBook on but that's exactly what I want :)

Any more advices?
Click to expand...

Stealth mode doesn't protect you while using unsecured/unknown wifi. I think you're confusing it with a VPN.
 
  • Like
Reactions: barbu
I'm not thinking about it "protecting me" but rather instead about being a little more secure. Nobody can ping my rMBP or such.
At home while I'm behind my router NAT that's not needed but while outside... who knows! :)
 
In Preferences, under "Security and Privacy," enable "require password x minutes after sleep or screen saver begins." Set it up to do this within a short period, say, 1 minute. This will allow your mac to automatically lock and require a password shortly after the screen dims or goes to screen saver.

Then, go to Applications -> Utilities and launch "Keychain Access." Select the "Keychain Access" pull down menu from the menu bar, and open "Preferences." Check the box labeled "Show Keychain Status in menu bar."

You'll now see a lock icon in your menu bar. From that icon, there's a "lock screen" option. Whenever you leave your Mac, use that option to lock your screen immediately. Your password will be required to unlock it each time.

As for network security, enabling the firewall should be plenty secure to prevent most network-based intrusions. Though you should consider using a VPN service if you frequently use public WiFi.
 
  • Like
Reactions: MartyF81 and barbu
It depends on the level of paranoia at which you want to operate. Stealth mode does very little for security, unless you are not using the network at all.. If you are, then I will be able to see that your machine is there, stealth mode or not. Sometimes, false security is as bad as no security. If you are properly paranoid, you would be using a paid VPN service from a reputable company whenever you used public Wi-Fi. Alternatively, use the hotspot from you phone.
If you are really serious about firewalling your Mac, learn about the built-in BSD firewall, pf.
You should be encrypting your filesystem and have find my Mac activated. You should have an exceptionally strong password, 12-16 characters at least (make one up and type it out a few times, you will have it memorized in a very short while). You should use a utility like 1Password to handle all your passwords, recovery keys, etc, and use it to create and store unique, strong, random passwords for every single one of your accounts and services. You should have two-factor authentication enabled for all services that support it.
And scaredpoet is absolutely right about enabling the Keychain menu item to allow for quick locking, you could also use the keyboard shortcut (Control-Shift-Eject) which blanks the screen, which should invoke a lock screen if you set your mac to lock on display sleep.
 
f0ku5 said:
Great note! :D
I'm not leaving my laptop alone but we all know that laptop can be stolen even when you're typing on him or something ;)

Can you explain how I could physically steal your laptop whilst you were typing on it??????
Or do you mean via WiFi??

I was rather asking about steps that can be done via software like the things I've just did - FileVault, firmware password etc. Things that can make thief life harder when he will have my laptop (which I pray will never happen!)
Click to expand...
 
f0ku5 said:
Hello all! :)
I own Mid-2015 rMBP 15" and I need second advice from you guys.
I'm often using my MacBook in public places so I'm kind of afraid of it being stolen or something like that.
How can I maximise my security software wise? I currently have FileVault enabled and recently discovered an option to create firmware password. Turned this on also. Firewall is on too ;)

Is there anything else that I can do to make my rMBP more secure?
Click to expand...

Turn on Find My Mac.
 
scaredpoet said:
Then, go to Applications -> Utilities and launch "Keychain Access." Select the "Keychain Access" pull down menu from the menu bar, and open "Preferences." Check the box labeled "Show Keychain Status in menu bar."

You'll now see a lock icon in your menu bar. From that icon, there's a "lock screen" option. Whenever you leave your Mac, use that option to lock your screen immediately. Your password will be required to unlock it each time.
Click to expand...

Nice tip, thanks for that one.
 
f0ku5 said:
I'm not thinking about it "protecting me" but rather instead about being a little more secure. Nobody can ping my rMBP or such.
At home while I'm behind my router NAT that's not needed but while outside... who knows! :)
Click to expand...

what is the difference between "protecting me" and "secure"? you aren't making much sense man.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back