Up to this date,there are more than 100 million Mac OS X users around the world.The number has grown at a rapid speed during the past year.Besides the fact that Mac OS X is very user-friendly and easy to work with,the main reason why Macs are so popular is because there is no malware that could affect them…There WERE no malware…Last week,over just two days 600,000 Macs in the US,Canada,Australia and Great Britain were infected with the new version of the Flashback Trojan malware.One of the most essential reasons why people got their Macs infected is because they simply underestimated the existing threats and did nothing to prevent their systems from being affected.
Here are 10 simple steps to improve the security of your Mac:
1. Create a non-admin account for everyday activities
The default account on Mac OS X is an administrator user.Malware writers often take advantage of that to infect your system.That is why,it is a good idea for you to create a non-admin user to perform everyday activities and log in as an administrator only when you need to perform administrative tasks.Go to the “Accounts” pane of “System Preferences”,then create a non-administrator user.This will help you to protect your computer from zero-day threats and drive-by malware attacks.
2. Use a web browser that contains a sandbox and has a solid track record of fixing security issues in a prompt manner.
Google Chrome would be a good choice for quite few reasons.It is updated way more often than Apple’s built-in Safari browser.It has its own sandbox and it ships with a sandboxed version of Flash Player that puts up a significant protection against malicious exploits.Chrome has a silent,automatic mechanism that removes the need of patching security vulnerabilities manually.Make sure you set your new browser as your default web browser.
3. Uninstall the standalone Flash Player.
Adobe’s Flash Player has been a common target for hackers in order to take control over your computer.An old version of Flash Player will definitely put your computer at risk when browsing the internet.To uninstal Flash,you can use two utilities provided by Adobe for versions 10.4-10.5 and 10.6 and later.
4. Solve the Java problem.
Same as Flash Player,Java is a preferred target for malware writers looking to plant viruses on your machine.
You might want to completely uninstall it from your computer.Unfortunately,Apple doesn’t allow Oracle to update Java for Mac directly.They do it themselves,usually several months later.And that leaves your Mac exposed for a long period of time.The Java Preferences utility is in /Applications/Utilities;uncheck the boxes next to the versions listed in the General tab.
If you need to use Java for some certain apps,it’s very important that you,at least,disable Java in Safari and other Web browser. In Safari,go to Preferences>Security>Web Content and uncheck “Enable Java”.
5. Run “Software Update” and patch the machine promptly when updates are available.
Huge number of recent attacks against Mac OS X took advantage of an old or outdated software. The most commonly exploited applications are:Microsoft Office,Adobe Reader/Acrobat and Oracle’s Java,but there are other applications that can be abused as well.Office For Mac 2011 is way better,from a security point of view,than Office For Mac 2008.If you’re using 2008 version – update to 2011 ASAP.Also,whenever you see Apple’s “Software Update” prompt – apply the fixes and reboot your system,if needed.
6. Use a password manager to help cope with phishing attacks.
The great news about Mac is that it comes with a built-in password manager,the “Keychain”.
Whenever possible,try to come up with strong passphrases for your resources and keep them in the keychain,instead of remembering easier passwords.In case cyber-criminals managed to compromise on of your accounts – they will try the same password everywhere – Facebook,Gmail,eBay,PayPal etc.This is why,having a unique strong password on each resource is a huge boost to your online security.
7. Disable IPv6, AirPort and Bluetooth when not needed.
Shut connectivity services when you don’t use them.These include IPv6,AirPort,Bluetooth – three services that might be used as entry points for hacker attacks.
8. Enable full disk encryption (MacOS X 10.7+) or FileVault.
In MacOS X Lion, Apple updated their encryption solution (FileVault) and added full disk encryption. It is now known as “FileVault 2”. This has the advantage of security the entire disk instead of just your home folder and can be very useful if your laptop gets stolen.
9. Upgrade Adobe Reader to version “10” or later.
Adobe Reader has been one of the preferred targets of cybercriminals and it still ranks high among the most exploited software in the world.Version 10 includes numerous security enhancements which make it a lot safer than previous versions.Many of older versions are still vulnerable,so you might want to get the latest.
10. Install a good security solution.
And the final step.The days when there were no viruses for Macs are long time gone.And ignoring this fact is nothing but waiting for another wave of malware attack to turn you from once a happy Mac user into a bitter person that has to deal with stolen passwords etc.There is a big variety of different antivirus programs.Do some research and figure out which one works best for you.
