Advertising
Advertising

10 Ways To Prevent Your Mac From Being Hacked

10 Ways To Prevent Your Mac From Being Hacked

Information protection is now scrutinized in all commercial and government industries. Theft of information has crippled many organizations and businesses. One of the main reasons information is lost, corrupt, or stolen is because many industries have not fully adopted it as a risk, and have yet to implement strong quality assurance policies and programs.

Some of the most common risks are because of unattended computers, weak passwords, and poor information management practices. Hackers look for the weakest target and tunnel into a business from easy sources, like tablets or cell phones.Using smart encryption software can remediate this threat and vulnerability, making it difficult for competitors or rookie hackers to penetrate your device. However, software alone is not enough to prevent Macs from being hacked. It is the Mac user who has the authority and resources to save it from potential penetration. The top 10 ways to prevent your Mac from being hacked is discussed below. Following all these tips will surely make your Mac hack-resistant. As a word of caution, before starting on the below processes, be sure to back-up your system first.

1. Don’t Surf or Read Mail Using the Administrator Account

Create a non-administrator user in the Accounts pane of System Preferences and use this account for everyday tasks. Only log in with an administrator account when you need to perform system administration tasks.

2. Use Software Update

Regularly applying system updates is extremely important.

For Internet-connected systems: Open the Software Update pane in System Preferences. Ensure that “Check for Updates” is enabled, and set it to “Daily” (or the most frequent setting). There is a command line version available as well, called Software Update. Read its main-page for more details.

Apple-Download-Page

    For systems not connected to the Internet: Retrieve updates regularly from www.apple.com/support/downloads. Be sure to verify that the SHA-1 digest of any download matches the digest published there, using the following command: /usr/bin/openssl sha1 download.dmg

    Advertising

    3. Account Settings

    You want to disable Automatic Login. To do this, open the Accounts pane in System Preferences. Click on “Login Options.” Set “Automatic login” to “Off.” Set “Display login window as” to “Name and password.”

    To disable Guest Account and Sharing, select the Guest Account and then disable it by unchecking “Allow Guest to log in to this computer.” Also, uncheck “Allow guests to connect to shared folders.”

    4. Secure Users’ Home Folder Permissions

    To prevent users and guests from perusing other users’ home folders, run the following command for each home folder: sudo chmod go-rx /Users/username

    5. Firmware Password

    Set a firmware password that will prevent unauthorized users from changing the boot device or making other changes. Apple provides detailed instructions for Leopard (which apply to Snow Leopard) here:
    http://support.apple.com/kb/ht1352

    6. Disable IPv6 and AirPort when Not Needed

    Open the Network pane in System Preferences. For every network interface listed:

    • If it is an AirPort interface but AirPort is not required, click “Turn AirPort off.”
    • Click “Advanced.” Click on the TCP/IP tab and set “Configure IPv6:” to “Off” if not needed. If it is an AirPort interface, click on the AirPort tab and enable “Disconnect when logging out.”

    7. Disable Unnecessary Services

    The following services can be found in /System/Library/LaunchDaemons. Unless needed for the purpose shown in the second column, disable each service using the command below, which needs the full path specified: sudo launchctl unload -w System/Library/LaunchDaemons/com.apple.blued.plist

    • com.apple.blued.plist – Bluetooth
    • com.apple.IIDCAssistant.plist – iSight
    • com.apple.nis.ypbind.plist – NIS
    • com.apple.racoon.plist – VPN
    • com.apple.RemoteDesktop.PrivilegeProxy.plist – ARD
    • com.apple.RFBEventHelper.plist – ARD
    • com.apple.UserNotificationCenter.plist – User notifications –
    • com.apple.webdavfs_load_kext.plist – WebDAV –
    • org.postfix.master – email server

    Other Services Can be found here: /System/Library/LaunchAgents and can be disabled the same exact way as the items listed above.

    Advertising

    8. Disable Setuid and Setgid Binaries

    Setuid programs run with the privileges of the file’s owner (which is often root), no matter which user executes them. Bugs in these programs can allow privilege escalation attacks.

    To find setuid and setgid programs, use the commands:

    • find / -perm -04000 -ls
    • find / -perm -02000 -ls

    After identifying setuid and setgid binaries, disable setuid and setgid bits (using chmod ug-s programname) on those that are not needed for system or mission operations. The following files should have their setuid or setgid bits disabled unless required. The programs can always have their setuid or setgid bits re-enabled later, if necessary.

    • /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent – Apple Remote Desktop
    • /System/Library/Printers/IOMs/LPRIOM.plugin/Contents/MacOS/LPRIOMHelper – Printing
    • /sbin/mount_nfs – NFS
    • /usr/bin/at – Job Scheduler
    • /usr/bin/atq- Job Scheduler
    • /usr/bin/atrm – Job Scheduler
    • /usr/bin/chpass – Change user info
    • /usr/bin/crontab – Job Scheduler
    • /usr/bin/ipcs – IPC statistics
    • /usr/bin/newgrp – Change Group
    • /usr/bin/postdrop – Postfix Mail
    • /usr/bin/postqueue – Postfix Mail
    • /usr/bin/procmail – Mail Processor
    • /usr/bin/wall – User Messaging
    • /usr/bin/write – User Messaging
    • /bin/rcp – Remote Access (Insecure)
    • /usr/bin/rlogin – /usr/bin/rsh
    • /usr/lib/sa/sadc – System Activity Reporting
    • /usr/sbin/scselect – User-selectable Network Location
    • /usr/sbin/traceroute – Trace Network
    • /usr/sbin/traceroute6 – Trace Network

    9. Configure and Use Both Firewalls

    The Mac system includes two firewalls: the IPFW Packet-Filtering Firewall, and the new Application Firewall. The Application Firewall limits which programs are allowed to receive incoming connections. It is quite easy to configure the Application Firewall. Below, I mention how to configure Mac’s Application firewall. Configuring the IPFW Firewall requires more technical expertise and cannot be fully described here. It involves creating a file with manually written rules (traditionally, /etc/ipfw.conf), and also adding a plist file to /Library/LaunchDaemons to make the system read those rules at boot. These rules depend heavily on the network environment and the system’s role in it.

    How to Configure Application Firewall in Mac

    In only Four steps you can easily configure the Application Firewall in Mac.

    1. Select System Preferences from the Apple Menu

    Advertising

    how to prevent mac from being hacked

      2. From the System Preferences Pane select Security. Then click on the Firewall Tab. Ignore the other Tabs (General and Firevault ).
      3. On the Firewall tab, you may need to unlock the pane, if it is locked. To unlock, click on the small pad lock on lower left corner and enter your Administrator Username and Password.

      how to prevent mac from being hacked

        4. Click Start to enable Mac’s Application Firewall. The green light beside Firewall Status and the ON notification will ensure that the Firewall is running smoothly.

        You can further customize the Firewall configuration by clicking on the Advance button on the right side.

        There are three Advance option in the Firewall Tab

        1. Block All Incoming Connections: Blocking all incoming connections will disable most of the sharing services like File Sharing, Screen Sharing and others. It will only allow basic internet service. Keeping it checked or unchecked depends with on the user.

        how to prevent mac from being hacked

          2. Automatically allow signed software to receive incoming connections:I prefer to keep this option unchecked. This will automatically add software signed by “any” valid authority to the allowed list of Software rather than prompting the users to authorize them.

          3. Enable stealth mode: I always keep this option checked. This prevent your Mac from responding to ping requests and port scans

          Advertising

          10. Safari Preferences

          Safari will automatically open some files by default. This behavior could be leveraged to perform attacks. To disable, uncheck “Open safe files after downloading” in the General tab. Unless specifically required, Safari’s Java should be disabled to reduce the browser’s attack surface. On the Security tab, uncheck “Enable Java.”Also, private browsing in Safari is a great way to stop hackers from picking up bread crumbs and using them against you later.

          Bonus Tip: Disable Bluetooth and Airport

          The best way to disable Bluetooth hardware is to have an Apple-certified technician remove it.If this is not possible, disable it at the software level by removing the following files from /System/Library/Extensions:

          IOBluetoothFamily.kext

          IOBluetoothHIDDriver.kext

          The best way to disable AirPort is to have the AirPort card physically removed from the system.If this is not possible, disable it at the software level by removing the following file from /System/Library/Extensions:

          IO80211Family.kext

          If followed carefully, the above mentioned tips can outdo a hacker’s technology to compromise your Mac. However, as technology advances, hacker use ever-more innovative ways to penetrate your Mac. If you know other ways to hack into a Mac, please share with us in the comments below!

          More by this author

          how to prevent mac from being hacked 10 Ways To Prevent Your Mac From Being Hacked

          Trending in Mac

          1 20 Best Productivity Apps for Mac You Should Have in 2019 2 15 Mac Hacks You’ve Probably Never Heard Of 3 10 Ways To Prevent Your Mac From Being Hacked 4 3 Things to Consider When Uploading Videos to YouTube 5 Top 5 Reliable Backup Apps for Data on Mac

          Read Next

          Advertising
          Advertising
          Advertising

          Last Updated on June 17, 2019

          40 Top Productivity Apps for iPhone (2019 Updated)

          40 Top Productivity Apps for iPhone (2019 Updated)

          Over the years here at Lifehack, we’ve discussed plenty of apps that you can use to improve your overall productivity.

          There are certain ones that many of our contributors and editors (past and present) have adopted over the long-term — there are always the stalwarts that stick around. But there are also new apps that crop up every day, adding more and more depth to the app category.

          Some of the apps are incredibly plain and simple, while others are more robust and offer more features than you can shake a stick at. And everyone has the one they prefer.

          It’s been our job (and still is our job) to keep abreast of all of the productivity-type apps out there. As a result — and as a bit of a refresher — we’ve put together a list of 40 best productivity apps for iPhone (all categorized based on their functions) to provide you with an all-in-one resource for you.

          For Getting Things Done

          1. OmniFocus

          This app is, while pricey, considered to be one of the (if not the) most robust and full-featured productivity apps on the market.

          Download it here.

            2. Forest

            Train yourself to put your phone down and stay focused on the task at hand by playing with this planting game. It’s fun and will help you achieve more.

            Download it here.

              3. Things

              Another robust choice, this app is a favorite amongst “productivityists”.[1]

              Download it here.

                4. 30/30

                Recently covered here at Lifehack

                , 30/30 is a newcomer to the game that incorporates lists and timing of tasks into an elegant and easy-to-use interface.

                Download it here.

                  5. Any.Do

                  A beautiful-looking app that is both easy on the eyes and your wallet.

                  Download it here.

                    6. PocketLife Calendar

                    This calendar app is specifically designed to be stylish and super easy-to-use. You can organize your life easily with different modern features.

                    Download it here.

                      7. Asana

                      We’ve covered Asana here at Lifehack

                      , and it is being actively developed by a strong team committed to making collaborative task management a more efficient and effective experience.

                      Download it here.

                      Advertising

                        8. ToDoist

                        This app keeps track of everything – from simple errands to your most important projects – so you can get it all done and enjoy more peace of mind along the way.

                        Download it here.

                          9. FlowTasks

                          From the folks at MetaLab, Flow is a gorgeous collaborative task management app that is easy-to-use and incredibly functional.

                          Download it here.

                            10. Calendars 5

                            This calendar app focuses on events that help you to keep track of upcoming events and tasks easily. It has everything you need to organize, track and complete your to-dos.

                            Download it here.

                              11. Clear – Tasks, Reminders & To-Do Lists

                              A fun and innovative list-making app that relies on swiping and pinching to make things happen. Clear created a lot of buzz when it launched, and might be the perfect to-do list gateway app for many.

                              Download it here.

                                12. Due

                                A robust reminders app that lets you store and maintain reminders of all types. It’s replaced Reminders for me when it comes to the basics, and it’s worth a look if you want to keep the mundane stuff out of your head and cluttering your mind.

                                Download it here.

                                  13. Checkmark 2

                                  I use this app

                                  for location-based reminders (such as groceries I need to get or single items I need to pick up from various locations). Checkmark is simple to use and a valuable addition to my productivity arsenal.

                                  Download it here.

                                    14. TeuxDeux

                                    Created by Tina Roth Eisenberg and Fictive Kin — Teux Deux is simple and incredibly stellar in terms of design. If you like lists (including the popular “Someday Bucket”) and want to associate dates with tasks, then Teux Deux will be right up your alley.

                                    Download it here.

                                      15. Wunderlist 

                                      Another incredibly popular choice is Wunderlist. Part of 6Wunderkinder’s software family, it sports a gorgeous design and is incredibly functional. We’ve talked about the app a couple of times here at Lifehack, so check those posts out here.

                                      Download it here.

                                      Advertising

                                        16. Nirvana

                                        For the GTD enthusiasts, there’s Nirvana. Straight from the source: “Nirvana frees your mind to focus on actually getting things done. If you’ve had enough of generic to-do lists, it’s time for Nirvana.”

                                        Download it here.

                                          17. Priorities

                                          An elegant-looking task management app that has received decent reviews,[2] this could be the one for you if you’re not a fan of OmniFocus or Things — especially if you need (or want) to share tasks with others.

                                          Download it here.

                                            For Building Habits

                                            18. Productive

                                            With this app, you can plan your habits with an easy-to-use interface, schedule habits for any time of the day, set smart reminders for each time of the day and stay on track with useful feedback. This app is perfect for anyone who wants to build a habit that sticks.

                                            Download it here.

                                              19. Habitica: Gamified Taskmanager

                                              You can complete tasks and build habits in a more fun way with this app. Input your Habits, your Daily goals, and your To-Do list, and then create a custom avatar. Check off tasks to level up your avatar and unlock features such as armor, pets, skills, and even quests.

                                              Download it here.

                                                20. Streaks

                                                This app follows the model of the popular “don’t break the chain method” in that you use the app to track how you are donig in the pursuit of your goal. Great for goal-setting — and an easy and elegant interface to boot.

                                                Download it here.

                                                  21. Remember The Milk

                                                  Another popular to-do list app, Remember The Milk has a huge following. It has plenty to offer, including the ability to share tasks with others.

                                                  Download it here.

                                                    22. Day One Journal

                                                    When it comes to journaling, nothing really beats Day One. Its latest update added a slew of features that will make you want to start making journaling a habit.

                                                    Download it here.

                                                      For Files Organization

                                                      23. Evernote

                                                      Touted as the world’s most widely-used productivity app, Evernote an be used simply as a notetaking app or can be customized to be your GTD app of choice — among other things.

                                                      Download it here.

                                                        24. Pocket

                                                        You can save an article, video or link you want to read or watch later to Pocket from anywhere including your computer, Safari, email, and your favorite apps like Facebook, Twitter, Flipboard, and Feedly.

                                                        Download it here.

                                                        Advertising

                                                          25. Sync.Me

                                                          This app identifies unknown phone calls, warns you from annoying spam calls, and adds a caller picture to your contacts from Facebook, Twitter and Google+.

                                                          Download it here.

                                                            26. Droplr

                                                            One of the most popular file-sharing apps out there today. Straight from the source: “Stay productive on the go. Droplr for iPhone keeps you in sync and makes sharing on the iPhone natural.”

                                                            Download it here.

                                                              27. Dropbox

                                                              Before iCloud, there was Dropbox. And there still is Dropbox, which is still widely used by both Mac and PC users all over the globe. It’s like having a flash drive in your iPhone. A must-have.

                                                              Download it here.

                                                                28. iDolly 

                                                                In conjunction with Dolly Drive and DollySync, iDolly allows you to edit and share your documents from your iPhone.

                                                                Since all your changes sync automatically to all your devices, the current version of a document will always be accessible because Dolly Sync keeps everything in sync. Very handy.

                                                                Download it here.

                                                                  29. Soulver

                                                                  It may seem odd that a calculator app shows up on this list, but this is no ordinary calendar app. Ben Brooks over at The Brooks review describes Soulver as follows: “It is what calculators would have been if they were invented at the same time computers were, instead of what we have with most calculator apps.” [3]

                                                                  Download it here.

                                                                    For Working Smarter

                                                                    30. Captio

                                                                    A simple capture tool. Straight from the developers: “It’s simple. Open Captio and start typing. When you’re done, hit Send. The note is immediately delivered to your email inbox.”

                                                                    Download it here.

                                                                      31. Drafts

                                                                      A tremendous capture tool that allows for simple capture, followed by sending items to various applications such as OmniFocus, Things and more.

                                                                      Download it here.

                                                                        32. NoteShelf 2

                                                                        This is a perfect note-taking app for you. You can take beautiful handwritten notes, type, annotate PDFs, record audio & create lists. You can organize them into categories or groups.

                                                                        Download it here.

                                                                        Advertising

                                                                          33. Doodle

                                                                          This app links directly with the Doodle service, which is one that allows you to plan and organize meetings far more efficiently and effectively. Lifehack contributor Steve Dotto has written about Doodle more in-depth here.

                                                                          Download it here.

                                                                            34. TextExpander (Legacy)

                                                                            I have saved countless hours of time with TextExpander, and despite its inability to be as robust on iOS as it is on the Mac, it is still a worthy app to have in your arsenal.

                                                                            Download it here.

                                                                              35. Launch Center Pro

                                                                              A quick launcher for the iPhone that doesn’t just launch an app…with some of them it can do much more. This app saves you time by launching complex actions in a single tap.

                                                                              Download it here.

                                                                                36. GoodReader

                                                                                This may seem to be an odd one to make this list, but here are plenty of reasons why it is here with this article.

                                                                                Download it here.

                                                                                  37. LogMeIn

                                                                                  Want to be able to control your Mac from wherever you are? Then get this app.

                                                                                  Download it here.

                                                                                    For Improving Security

                                                                                    38. 1Password

                                                                                    There is simply no better password manager out there. I’ve even put together a 1Password Emergency Kit worth looking at here.

                                                                                    Download it here.

                                                                                      39. LastPass Password Manager

                                                                                      You can store passwords and logins, create online shopping profiles, generate strong passwords, track personal information in photo and audio notes.

                                                                                      All you have to do is remember your LastPass master password, and LastPass autofills web browser and app logins for you.

                                                                                      Download it here.

                                                                                        40. Truecallers

                                                                                        Identify and block spammers, search for unknown numbers and call friends easily with this app. With a community-based spam list from over 250 million users, you’ll need this app.

                                                                                        Download it here.

                                                                                          There are plenty of other options out there (and we’ve heard from readers in the past as to what they enjoyed using), but these 40 are among the best.

                                                                                          More Great Apps Recommendations

                                                                                          Reference

                                                                                          Read Next