Privacy Guides
Make page for a ios or mac under Operating System. #205
Replies: 0 comments 28 replies
-
|
Here's a list of some ideas for future macOS & iOS pages: And I should clarify, these aren't things that I think should/shouldn't be recommended. Just a list of things that should probably be researched. macOS
iOS
|
Beta Was this translation helpful? Give feedback.
-
Agree.
Agree.
This could work, but not without mentioning that this does give Apple the potential to snoop on your emails. Keyword is potential; I don't believe they actually would or will.
Requiring an Apple ID in and of itself does mean that everything you get on the App Store is tied to an identity. On the other hand, even apps outside the App Store do have to be reviewed by Apple. Both connect to a central server ( |
Beta Was this translation helpful? Give feedback.
-
Agreed |
Beta Was this translation helpful? Give feedback.
-
Mail Privacy Protection is a separate feature from Private Relay, with its own separate toggle. |
Beta Was this translation helpful? Give feedback.
-
|
You're right, I was thinking of Mail Privacy Protection. My bad. |
Beta Was this translation helpful? Give feedback.
-
|
MPP should be mentioned too, since MPP is on by default (I think) and most users will likely be using the stock mail client. |
Beta Was this translation helpful? Give feedback.
-
|
Perhaps just disable iCloud altogether and look for better alternatives (iCloud Notes -> Joplin, Standard Notes, Cryptee..., iMessage -> Signal) |
Beta Was this translation helpful? Give feedback.
-
|
Ideally, yeah, one wouldn't rely on iCloud services. I still think it's fair to recognize that for a lot of simple threat models, iCloud doesn't need to be completely disabled (I don't even think you can fully disable it on iOS, could be wrong). It should absolutely be pointed out which iCloud services are not end-to-end encrypted, such as iCloud backup 🤮 https://support.apple.com/en-us/HT202303 Luckily it's pretty easy to pick and choose which iCloud services are enabled and which aren't. |
Beta Was this translation helpful? Give feedback.
-
|
Yeah, I don't think you can fully disable iCloud on iOS either, but you can disable a large portion of it! Yes, pointing out which iCloud services are not end-to-end encrypted is important too, but it's also important to note that some services are only partially end-to-end encrypted (iMessage does store metadata about who you contact iirc). There's also jailbreaking; while it can lower the security of your device, this is a privacy guide where arguably making those adjustments is more important. Also, I meant to reply to your comment instead of make a new one-- oops! |
Beta Was this translation helpful? Give feedback.
-
|
Yes, you're right about iMessage metadata! This is the first time I've heard about that, thanks for bringing it up. https://www.imore.com/imessage-metadata-and-law-enforcement-what-you-need-know Also no worries, I still got the notification of the "reply." |
Beta Was this translation helpful? Give feedback.
-
|
And as for jailbreaking, I don't think there is a world where that would be recommended. Undermines security too much. |
Beta Was this translation helpful? Give feedback.
-
|
I disagree with your statement on jailbreaking, but I can say it's definitely not for those who don't know what they're getting themselves into. And also largely not relevant now that I think on it more. Will say more suggestions in the main replies 👍 |
Beta Was this translation helpful? Give feedback.
-
This should not be "paranoid". I can see how this would make sense to be on in some cases, but in general, having this always on is actually a battery drain 99% of the time as these apps constantly ping servers. This is really more so just "go through app permissions, do you really need this on?" |
Beta Was this translation helpful? Give feedback.
-
|
Plus, from my experience at least, disabling background app refresh for most apps has very little effect on usability. I still need to research what it actually does beyond my assumptions though. |
Beta Was this translation helpful? Give feedback.
-
|
I've never had issues turning this off either. |
Beta Was this translation helpful? Give feedback.
-
Same here |
Beta Was this translation helpful? Give feedback.
-
Found a typo 😄 ! |
Beta Was this translation helpful? Give feedback.
-
Is this really necessary? Since you need your password for an administrative action anyway, even on an admin account. |
Beta Was this translation helpful? Give feedback.
-
|
I actually agree the benefit to a separate admin account is likely minimal, but it is not exactly inconvenient on macOS seeing as it will prompt standard accounts for admin credentials as necessary and you can enter them without switching users. If you really don't want to be admin, it might also be worth considering having no admin account and escalating your account as necessary with Privileges. |
Beta Was this translation helpful? Give feedback.
-
|
When doing more research, I found this from apple in macOS Monterey user guide
It sounds like more like a physical protection as to prevent someone from messing with the device(which likely be the intended use of separate accounts if you have multiple people using the device) |
Beta Was this translation helpful? Give feedback.
-
|
I think we should refer to apple's guide on privacy and security instead drduh's macOS hardening guide as it is more up to date. |
Beta Was this translation helpful? Give feedback.
-
|
I think both are extremely valuable resources and can be nicely combined. Just because something is slightly outdated (which is the case here) does not mean that the information in it cannot be transferred to higher macOS versions. |
Beta Was this translation helpful? Give feedback.
-
|
it probably helps to have a separate admin and user account but it could make things worse if you use a weak password on one of them |
Beta Was this translation helpful? Give feedback.
-
|
@loolalaapple since you are the op, can you create the topic in the forum for further discussion? |
Beta Was this translation helpful? Give feedback.
-
Basic,
-Settings-Privacy-Tracking.(default to on,change to off)
-Settings-Privacy-Apple Advertising-Personalized Ads.(depend on setup,may change to off)
-Settings-photos-Siri&Search-Learn from this App.(default to on,change to off)
-Settings-photos-iCloud photos.(default to on,change to off)
-Settings-photos-Mobile Data.(default to on,change to off)
-Settings-Voice Memos-Siri & Search-Learn from this App.(default to on,change to off)
-Settings-Voice Memos-Siri & Search-Show on Home Screen.(default to on,change to off)
-Settings-Voice Memos-Siri & Search-Suggest App.(default to on,change to off)
-Settings-Voice Memos-Mobile Data.(default to on,change to off)
.........
Secure!=private.but YMMV.
-Settings-Privacy-Tracking-Motion&Fitness-Fitness Tracking.(default to on,change to off)
-Settings-Privacy-Analytics &Improvements-Share iPhone Analytics.(depend on setup,change to off)
-Settings-Contact-Siri & Search-Learn from this App.(default to on,change to on)
-Settings-Translate-Mobile Data.(default to on,change to off)
-Settings-Translate-On-Device Mode.(default to off,change to on)*NOTE
Paranoid
-Settings-General-Background App Refresh(default all on,change to off)
A small list of some possible change
Beta Was this translation helpful? Give feedback.
All reactions