mighty-snitch VS macOS-Security-and-Privacy-Guide

6 months in to my first pc build. had one other pc for past 2 years from letsbld.

the build is easy, but it will take a full day. it is also a bit nerve racking, but mostly that’s just inexperience. parts are all sturdy and snap together. i will be building every nvidia generation from now on.

i used to code on laptops, then game on a pc. now i have to ssds, one windows one linux. bios boot option is unborkable. it’s a great setup.

it’s nice to be able to play fortnite, compile the linux kernel[1], and do gamedev[2] all in a single session.

be aware ddr5 amd boards boot kind of slow. i’ve heard intel is faster.

if you can afford it, go god spec. otherwise spec down into your price range. letsbld and originpc have good configurators to choose parts. newegg prices will be 30% less.

check out fractal torrent cases and dh15 coolers! 4090 fe fits in the nano and 4090 pny fits in the compact.

1. https://github.com/nathants/mighty-snitch/tree/master/kernel...

2. https://r2.nathants.workers.dev/jetpack_hand_animations.mp4

learning cloud is not necessarily using cloud for all things.

cloud adds legitimate new capabilities to every engineer.

if i’m on coffeeshop wifi with my low power laptop, and i need to do something intense like compile linux, i’m sol.

unless i know aws. then i can open a new terminal, spin up a massive spot instance for 19.27 minutes, get that done, then self destruct. [1]

being able to test lambda to s3 io, or ec2 to s3 io, with the same ease one uses grep and sed, is for great good. also it’s fun.

1. https://github.com/nathants/mighty-snitch/blob/master/kernel...

you jest, but this is actually fine.

do this via mighty-snitch[1] on any postmarketos phone. any network request passing through the linux kernel gets filtered.

still hosed if it’s hardware level nonsense unfortunately.

the only reason i’m not daily driving postmarketos if lack of gpu acceleration for firefox. hopefully soon!

1. https://github.com/nathants/mighty-snitch

i just built 6.2 for arm64. what timing!

https://github.com/nathants/mighty-snitch/releases

use a network snitch[1] on desktop and mobile. The original slogan says it all: makes the invisible visible. i’d love to use a disk snitch too, but no exist yet afaik.

it’s interesting to see firefox or any other legitimate app i’m using make many unsolicited requests to weird domains. it feels good to interactively deny those connections.

make sure that cloud[2], which includes git hosts[3], are untrusted. unencrypted data should never hit remote. keys should never leave local.

consider the tradeoffs with online interactions. engaging with other humans in public on github and hackernews is likely worth. engaging in impassioned op-ed debate with bots on engagement monetization platforms like twitter or youtube is likely not.

1. https://github.com/nathants/mighty-snitch

2. https://cryptomator.org/

3. https://github.com/nathants/git-remote-aws

Hi friends, I followed this guide: https://github.com/drduh/macOS-Security-and-Privacy-Guide and some additional steps to protect my macbook from being accessed by unauthorized people. The key steps I did was a full disk encryption and a custom firmware password. This makes it extremely difficult to repurpose my macbook after for example a theft. The reason I want this is that I often study in university or sometimes work in public places, but I also work as a software developer with sensitive consumer data.

https://github.com/drduh/macOS-Security-and-Privacy-Guide/is...

turn on FileVault , turn on the firewall (built in). install Lulu firewall follow this guide and harden the system https://github.com/drduh/macOS-Security-and-Privacy-Guide

I'm looking for a guide to harden MacOS Ventura, preferably including little snitch/lulu blocklist suggestions for MacOS services. I'm aware of dr druh's guide (that currently doesn't seem to be updated for Ventura though) and isn't including a little snitch/lulu blocklist.

- macos, following https://github.com/drduh/macOS-Security-and-Privacy-Guide for hardening (I haven't compared this to other hardening guides, but doing something is better than nothing)

I remember seeing this, I have never followed it so I don't know what it's worth but it's seems quite comprehensive