macOS-Security-and-Privacy-Guide
macOS-Security-and-Privacy-Guide copied to clipboard
drduh
Guide to securing and improving privacy on macOS
This pull request adds a mention of OSXDaily method's to download ISO from terminal. Fixes : https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/397
I have difficulties wrapping my head around [this recommendation](https://github.com/drduh/macOS-Security-and-Privacy-Guide/commit/0bb911d4ba7df9bf7e9a274edf6efd5f2e41f6f0#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R344): > The admin account can also be removed from FileVault. What is the benefit of not being able to unlock the...
Verify installation integrity - output of `pkgutil --check-signature` or `codesign -dvv` commands showing Big Sur SHA-256
I should start by saying that I am by no means a security expert, just a curious bystander. I was wondering if opening a mp4 or mp3 in Google Chrome...
It came to my attention this news: https://sneak.berlin/20201112/your-computer-isnt-yours/ TL;DR Apple ~Analytics~ Certificate Validation (OCSP) requests can't be turned off with firewall and are unencrypted. Here is shown that it can't...
Going through the guide I notice a reference to "download" Mojave, instructions for creating an installer using Catalina, creating a recovery partition using Lion, etc. Is there any idea on...
Hello, To me, downloading the installer to create the usb was very confusing. For some reason, the installer wouldn't show up on the appstore or on any other Apple web...
Hi, thanks for great guide. I’ve one comment and questions: * Apple M1 is not mentioned here…or maybe I’m missing it? If I’m correct, Mojave method is not applicable for...
Macs with T1 or T2 chip use CPRNG from the Secure Enclave (MacBook's from 2016 and newer) and [other sources](https://support.apple.com/en-ie/guide/security/seca0c73a75b/1/web/1) to gain entropy. Mac's before the T1 chip used intels...
Hey, I was trying to install OpenSSL from brew instead of the default one on the MacOS which turned out to be impossible. Specifically here is the error on `brew...
