Skip navigation
This discussion is archived

Q:  Mac mini - Leopard - partitions - safety ?

2247 Views 6 Replies Latest reply: Dec 8, 2008 8:29 AM by AndyO RSS
Artsy Sue Calculating status...
Currently Being Moderated
Dec 5, 2008 1:49 PM
My husband is about to load Leopard onto his Mac Mini / Intel.
He would like to partition it so one partition can "surf the net",
and one partition will have our finances/personal data/private
sorta stuff on it.

Are we right to assume that while on the Internet, no one can
"see" the other "private" partition? [We use Airport Extreme.]

Thanks in advance!
iMac Leopard, Mac OS X (10.5.5), AirPort Extreme
  • AndyO Level 6 Level 6 (17,045 points)
    Currently Being Moderated
    Dec 5, 2008 2:11 PM (in response to Artsy Sue)
    Are we right to assume that while on the Internet, no one can "see" the other "private" partition?


    Strictly speaking, no that's not right.

    A partition is just a division of the hard drive, and to the system, it will appear as a separate hard drive, so you'll see your primary (boot) partition at the top-right of the desktop, and the secondary (private) one below it. There's nothing to prevent anyone who can access your computer from seeing the contents of the secondary partition. For you, the user, to see the contents, it's permissions would have to be set for you to do so, and if you are also logged into the system as the user, that means anyone gaining access to the system can see what you see. As such, there's not much difference in creating a second partition as simply creating a new folder in the primary partition.

    The question therefore is whether, when you are surfing the net, that means you are vulnerable to anyone 'out there' being able to access your system. The answer is that in MacOS, no, you are not. Or at least not in any sense to the same degree as if you were using Windows, because MacOS is inherently more secure than that.

    To my mind, the question to ask here is in what way are you concerned that anyone could gain access to your hard drive when browsing?
    G5 DP/2.0 : Mini/1.25 : Mini/1.50 : 2x iMac 24/2.4 : TiBook : iBook : iPhone, Mac OS X (10.5.5)
  • Rockdoctor Level 1 Level 1 (40 points)
    Currently Being Moderated
    Dec 6, 2008 7:22 AM (in response to Artsy Sue)
    Why not put all your finance stuff on an external hard drive (these can be obtained very cheaply, depending on size). Then you can simply switch off or unplug the drive whenever you are surfing - there's no virus capable of jumping an air gap!

    Personally I think you shouldn't worry. I've been surfing for years, and all my finances are online. The only scams I've fallen victim to all turned out to be out in the real world - my wife's card was cloned in a hairdresser's and used for multiple cashbacks in supermarkets across south london. We got our money back from the bank.

    Online I've never had a problem.
    Mac Mini Intel Core 2 Duo 1.83GHz 2Gb RAM 80Gb HD, Mac OS X (10.5.4), External 750Gb, 80Gb firewire disks
  • AndyO Level 6 Level 6 (17,045 points)
    Currently Being Moderated
    Dec 8, 2008 8:29 AM (in response to Artsy Sue)
    I would certainly not be an advocate of ignoring the risk - quite the opposite - but I think it is useful to ensure the issue is viewed with some perspective, and an acknowledgement that even though the weakest link in the security of almost any system is the actual user, much can be done to secure systems from hacking (meaning unauthorized access as opposed to mistakenly downloading malware) that can reduce the risk of data loss to as close to zero as possible.

    Part of the problem here is that even with an external hard drive, if that drive is running when you are 'hacked' your data is just as vulnerable as ever. As such, while it's certainly more secure to use an external, it is only so if it is off. A more thorough solution is to follow a few basic principles to secure the system against prying eyes in the first instance.

    First is the realization that due to the architecture involved, MacOS (and particularly, the latest versions of it) is considerably more resilient to hacking than Windows. A hacker cannot simply take control of the OS and gain access to the system as a whole.

    Even so, it is better to prevent a hacker from even finding your system in order to attempt access to it, and the first and most significant step is to add a hardware firewall with network address translation (NAT). While that sounds quite complex, it's actually a feature of almost every router, even those intended for domestic use. That way, the ISP's public IP is not assigned to the system but to the router, and private IPs are used 'inside' the network. Hackers might be able to discover the router, but finding systems behind it is then much harder. To obstruct those who manage to find your system even so, switching on the in-built software firewall in MacOS also helps (in Leopard is in the Firewall tab of the Security preference pane), and setting restrictions on which applications can then access the internet, along with restricting incoming connections adds limitations on what they can manage to do - at least without giving some indication to the user. On top of that, a good third-party firewall such as Little Snitch can add a degree of additional security, while still being very easy to set up and use.

    Setting Safari not to automatically open safe files on downloading (in the general tab of Safari's preferences) will help avoid malware from gaining unobstructed access to the system, and using the freeware ClamXav set to monitor email, document and download folders, along with any others that are sensitive to the individual will help protect against the potential for future malware.

    It's also possible to do things with folders and user accounts that help hide data. http://www.tuaw.com/2007/09/17/secure-your-mac-crouching-user-hidden-folder/ for example gives a couple of good starting points that would help keep data away from prying eyes.
    G5 DP/2.0 : Mini/1.25 : Mini/1.50 : 2x iMac 24/2.4 : TiBook : iBook : iPhone, Mac OS X (10.5.5)

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.