Securing Mac OS X

LogError writes "This paper addresses operating system hardening in terms of patching, administration roles, and setting passwords. It also provides information on Mac OS X network security: namely, basic firewall configuration and hardening of network services such as FTP, SSH, and Apache."

Comments

Securing Mac OS X

[slughead]

1. Put on oversized trench-coat
2. walk into the apple store
3. Insert Mac OS X into trench-coat
4. Walk calmly to your car
5. Drive home

Re:Good to see...

[McAddress]

bah, everybody knows that OS X is full of holes. users needing security should switch to windows.

Re:Securing Mac OS X

[lavaface]

I believe you're missing
6. ???
7. Profit!!!

Problem solved

[Neillparatzo]

1. Delete OSX
2. Install OpenBSD/macppc

Next on Neill's Slashdot Comments: How to secure Linux.

Re:Good to see...

[commodoresloat]

I'm going to have a full of the paper now.

But not, in standard slashdot fashion, before posting a comment here.

Re:Securing Mac OS X

[C-Diddy]

1. Put on oversized trench-coat

2. walk into the apple store

3. Insert Mac OS X into trench-coat

4. Walk calmly to your car

5. Drive home

Otherwise known as the "Sandy Berger" technique.

secure any machine.

[davids-world.com]

shut down, pull the plug and fill with concrete. wait for it to harden. machine secured.

Re:secure any machine.

[TheRaven64]

I recall reading in a UNIX textbook a few years back:

You don't need to bother with hashed passwords if your computer is not connected to a network, or a power point, and is buried under six feet of concrete.

Re:Securing Mac OS X

[slughead]

1. Put on oversized trench-coat
2. walk into the apple store
3. Insert Mac OS X into trench-coat
4. Walk calmly to your car
5. Drive home

Otherwise known as the "Sandy Berger" technique.

Actually you'd have to change 'trench-coat' to 'underpants'

Why was the parent marked troll? I thought it was funny.
Obviously some thin-skinned democrats running around :)

Re:They score some points with me on a first skim.

[Altus]

there is nothing healthy about having a collection of pre-G3 Macs..

not that I dont have one too... but its certainly not healthy. :)

Re:Securing Mac OS X

[JivanMukti]

Sandy Burger, it that you?!

Re:They score some points with me on a first skim.

[Theaetetus]

Chances are that the email you're sending is getting read on a Windows box. If you're forwarding along a mail containing an attachment, you might be unwittingly forwarding a Windows virus which is totally harmless to you, but not so to your recipient. I had one the other day - README.CPL. Mac users don't need to care that that's a Windows control panel, and might not even know.

"Dear Bob,

I received this attachment from a nice Nigerian man - he suggested I open it and put my credit card numbers in to the box that appears to register it. However, being a Mac user, I can't open it. Would you please do so, and put your credit card numbers in?
Thanks!"

Seriously? How many people forward emails with attachments that they can't open?

Prison showers, Apple flowers

[jellyfish_green]

A new user entering the internet is like your first time using the communal prison showers.

Those with previous experience (Custom Linux installation) will know there's security options and will pick, for example, "buttcheeks=open" or "buttcheeks=closed" depending on what they plan to do.

The new users won't know there's an option until it's pointed out to them some time in the future.

MacOSX follows "recommended best practice" and starts you off with buttcheeks=closed, and if that ever becomes a problem, hopefully you'll look into it yourself and figure out which option needs changing to enhance your experience.

Windows apparently starts with buttcheeks=open, because they don't want to deny their users the full internet experience. Or something.

Re:Secure your ...

[catdevnull]

SHHH! Dude, don't tell them WHERE in the Pacific!