New checks

[zupo]

What checks should we add to Pareto Security app?

[zupo]

Support Lastpass, besides 1Password.

[jimmhay]

i believe Dashlane is also popular

[zupo]

A few more ideas:

• TimeMachine backup in last 10 days
• TimeMachine disk is encrypted
• Password hint disabled
• Root user login disabled
• Disk less than 90% full

[dmurko]

TimeMachine backup in last 10 days

Keep in mind, TimeMachine has its own reminder.

[zupo]

Only if you have "Back Up Automatically" ticked in Time Machine preferences. I disable it from time to time, for example, when I travel, so that I don't get annoyed by it.

[jimmhay]

Yeah, +1 for including TM - having all checks in one place is convenient, and also makes more sense if using it with a group of devices.

What's the security benefit of being less than 90% full?

[zupo]

What's the security benefit of being less than 90% full?

TimeMachine can do granual snapshots on the local disk: https://support.apple.com/en-us/HT204015

Time Machine stores snapshots only on disks that have plenty of free space. I don't know what exactly "plenty of free space" means though.

Another one: software upgrades can get stuck if disk is completely full.

There are also noticeable performance benefits.

[zupo]

This article says 15% free disk is the bare minimum to avoid performance drawbacks: https://www.lifewire.com/how-much-free-drive-space-needed-2260187

[zupo]

A bunch of checks that I'd personally love to have: https://github.com/kristovatlas/osx-config-check

[zupo]

Similar: https://github.com/alichtman/stronghold

[zupo]

Can we also check battery health?

[dz0ny]

https://github.com/ParetoSecurity/pareto-mac/releases/tag/0.0.11a for testing

[jimmhay]

I'm failing this test, despite buying my laptop less than a month ago. FruitJuice is saying 5 of 1000 cycles, 101% of factory capacity

[dz0ny]

Yep, this is only working now in debug builds, there are entitlements that we need to research to properly support it.

[karantan]

• not used installed apps
• not used apps that start on startup (and run in the background)

[dmurko]

MacOS: up-to-date

App Store: outdated apps or check automatic updates.

[dmurko]

Software Update

[dmurko]

Find My

[zupo]

Make sure AirDrop is set to Contacts Only.

Submitted by a user.

[zupo]

Refs https://secure.helpscout.net/conversation/1814480971/36493?folderId=4882163

[DotTheI]

Apple Passwords

[zupo]

Can you expand on what you mean?

[DotTheI]

Sure. I mean, even though Passwords app is installed by default, PS says 'Password manager is not installed'