2. Enable FileVault, if the password is entered wrong too many times it will wipe the drive. I've never heard of FileVault wiping the user's encrypted sparse i

2. Enable FileVault, if the password is entered wrong too many times it will wipe the drive. I've never heard of FileVault wiping the user's encrypted sparse image after too many bad password attempts. Googling gives me nothing. If too many bad passwords do wipe the sparse image, how do I disable that? I have backups, but I don't want anyone to be able to delete my data so easily. 4. Never use open WiFi. Umm... why? Pretty much every site uses HTTPS or hashes your password in JavaScript before sending it over the wire. Sure there's a chance of HTML injection if the login form is sent over HTTP, but it's a very small one. Unless you're at DEF CON or something, open wifi isn't a major risk. I guess if you're super paranoid, set up a VPN server and connect to it when you're on an untrusted network. I think the ideal solution is to use FileVault or some sort disk encryption, then also have a cron job runs a script every hour/day/whatever. This script would check a certain URL for a message (say https://your-website/is/my/computer/stolen https://your-website/is/my/computer/stolen). If that message says, "yes I am stolen", the script would activate the camera, e-mail the picture to you, and run shred on the drive. Basically a poor man's version of http://www.orbicule.com/undercover/mac/ http://www.orbicule.com/undercover/mac/