3 ms·
As long as you had FileVault enabled (& good password management), that's basically all you needed. Without FileVault, you can totally still access the laptop
by lathiat 10y ago
As long as you had FileVault enabled (& good password management), that's basically all you needed.
Without FileVault, you can totally still access the laptop and data. Sadly Macs do not have anywhere near the device protection that iPhones do - even the new ones. But data encryption is what you need.
You can do that same in the installer for Ubuntu Linux. I personally prefer the encrypt home directory option over the full disk option, but there are trade-offs.
- hackuser 10y ago> As long as you had FileVault enabled (& good password management), that's basically all you needed. Does that protect your computer if it's asleep? My guess is most Macbooks are either asleep or on 99% of the time.
- cimnine 10y ago> You may wish to enforce hibernation and evict FileVault keys from memory instead of traditional sleep to memory: $ sudo pmset -a destroyfvkeyonstandby 1 $ sudo pmset -a hibernatemode 25 > If you choose to evict FileVault keys in standby mode, you should also modify your standby and power nap settings. Otherwise, your machine may wake while in standby mode and then power off due to the absence of the FileVault key. See issue #124 for more information. These settings can be changed with: $ sudo pmset -a powernap 0 $ sudo pmset -a standby 0 $ sudo pmset -a standbydelay 0 $ sudo pmset -a autopoweroff 0 See [1] for more macOS hardening tricks. [1] https://github.com/drduh/macOS-Security-and-Privacy-Guide#full-disk-encryption https://github.com/drduh/macOS-Security-and-Privacy-Guide#fu...
- donza 10y agoApple's own Best Practices doc for FileVault 2 is also useful read for those interested: http://www.training.apple.com/pdf/WP_FileVault2.pdf http://www.training.apple.com/pdf/WP_FileVault2.pdf