MacOS recommendations

• Dylib Hijack Scanner

• KextViewr

• RansomWhere?

• BlockBlock

• Netiquette

• ReiKey

• TaskExplorer

• KnockKnock

• LittleSnitch

  • Add my blocklist here.

• Lynsis

• Santa

• Mullvad Browser

• Brave

• Spoof mac address

• Convert to safe(r) PDFs with Dangerzone

• MacOS Security and Privacy Guide

• Enable Lockdown Mode

• Secretive SSH-Keymanager

• SAP Privileges On the fly request admin permissions and keep them disabled during normal usage.

• use apple configurator or iMazing to make a profile and block anyone from changing privacy and security settings.

Intel-based Mac

• Enable Firmware password protection

  • Generate a strong password and store it securely.
  • Run firmwarepasswd -setpasswd
  • Run firmwarepasswd -verify to make sure you have configured your password right.
  • Run firmwarepasswd -setmode full to request password on each boot. firmwarepasswd -setmode command for change of boot disk. Do not use -allow-oroms unless you really have too. You can always enable this later.
  • Also make sure to run firmwarepasswd -disable-reset-capability to disable Apple's ability to reset your device. Nobody will be able to help you if you lose your firmware password!