Cocktail is a general purpose utility for macOS that lets you clean, repair and optimize your Mac. It is a powerful digital toolset that helps hundreds of thousands of Mac users around the world get the most out of their computers every day.

Get Cocktail here

Enhance your Mac's security

macOS has some of the best security among today's operating systems, designed to protect your data and your computer from all sorts of security threats ranging from a slightly too curious friend all the way to a malicious hacker.

Having a password is highly recommended so if you haven't set one up already, you can protect your account by going into System Preferences -> Users & Groups and selecting your account. However, the issue with good security is that it all depends on you being able to set a secure password and, crucially, remembering it. What happens of you one day realize that you've forgot the password? Or more likely, what if your parents one day call you up saying they've forgot the password for their account?

There are several ways to do reset the password. The best case is if you still have access to another administrator's account. In this case you can reset the user's password by going to System Preferences -> Users & Groups. Select the account that you want to recover, click the Change Password button and type in a new password. Easy!

If you don't have access to an administrator's account, boot to the recovery partition by holding Command-R at startup (or by holding Option and selecting "Recovery HD" from the boot menu), and then selecting Terminal from the Utilities menu. When this is done and a Terminal window is open, simply type:

resetpassword

and press Return to launch the Reset Password utility. The program will launch, but do not close the Terminal window or the program will be killed as well. With the Password Reset utility now open, you can select the volume and the account, and change the password for that account.

Granted, for an operating system that is supposed to have great security, it is surprisingly simple to gain access to the computer. What if you have some top-secret files that nobody should be able to access? Is there a way to block the methods that we just described?

Of course there is! First, enable FileVault in System Preferences -> Security & Privacy. FileVault encrypts all your personal data so that even if someone manages to steal your computer they will not be able to access your data without the correct password.

You can also set a Firmware password that will be required to boot the computer and enter any of the recovery modes. This password can be set by booting to the recovery partition and selecting the Firmware Password Utility option from the Utilities menu.

After you've set the Firmware password the computer will disable all the methods we've mentioned in this article as well as several other recovery modes (reinstall, repair and so on) so do make sure that you remember the password! In a worst-case scenario you can reset the Firmware password it by opening your computer and removing one of the RAM sticks. When you boot the computer the password will be reset, after which you can replace the missing stick.

The Heartbleed bug

Posted in Security

Apple today released a statement confirming that OS X, iOS and "key web services" were unaffected by the widely publicized security flaw known as Heartbleed.

The Heartbleed bug is a nasty one. It affects web servers - the computers that power websites. It does not affect your computer or iOS device, but it makes you vulnerable because hackers can potentially steal your details from the sites you visit. It’s a flaw in OpenSSL, an encryption technology used by the vast majority of websites on the Internet, although not Apple’s website or its online services like iCloud.

The flaw allows hackers to pull data from a server’s working memory, including the server’s encryption keys. That would allow hackers to decrypt all traffic to and from the server, exposing sensitive data like logins, passwords and everything else.

Users are recommended to change their passwords on all services that may have been affected. Mashable provides a list of services where you should change your password.

Take control over your browser plugins

Posted in Safari Security

Safari 7 now provides finely tuned controls over what websites can use which browser plugins.

This means you can have the Flash player installed on your Mac, but blocked for your wider web experience, while still being allowed on a few select sites that you trust the plugin to run on. This serves as a perfectly reasonable alternative to uninstalling the plugin in it's entirety, and it's easy to configure for all websites and selective websites in Safari for OS X.

  • Open Safari and then go to "Preferences", accessible from the Safari menu.
  • Choose the "Security" tab and look for "Internet plug-ins", then click the "Manage Website Settings…" button.
  • Select "Adobe Flash Player" from the left side to gather a list of websites that have used or attempted to use the Flash plug-in.
  • Pull down the menu alongside each URL to fine-tune Flash for that website, choosing one of five options:

Ask – Safari will ask permission to run Flash if it is encountered.

Block – blocks all Flash for the website from automatically loading, this is essentially like Click-To-Play and can be overruled by selecting a Flash object and choosing to run.

Allow – Flash will always run when encountered for that specific website.

Allow Always – Flash will always run when encountered for specific websites, even if the Flash plugin has been disabled due to being outdated or insecure.

Run in Unsafe Mode – not recommended, overrides any security preferences within Safari to give Flash free reign to run.