VOvoltagex_·Jun 29, 2016
>[PASSED] Disable IPv6
I'd like to see the rationale behind disabling IPv6 outright.
Edit: https://github.com/SummitRoute/osxlockdown/issues/4
In How to Compromise the Enterprise EndpointSummitRoute
osxlockdown
Go2016–2016
SummitRoute / osxlockdown · Archived
osxlockdown
[No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
4Distinct people
4Mentions
0Explicit recommenders
770GitHub stars
What to know before exploring
What it is
[No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by week4 dated mentions
Observed mentions: 2016-01-02 20:31:19 UTC to 2016-06-29 05:43:48 UTC. Weeks start Monday, UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Dec 28 | 2015-12-28 00:00:00 UTC | 2016-01-04 00:00:00 UTC | 1 | 1 | 0 |
| Jan 4 | 2016-01-04 00:00:00 UTC | 2016-01-11 00:00:00 UTC | 0 | 0 | 0 |
| Jan 11 | 2016-01-11 00:00:00 UTC | 2016-01-18 00:00:00 UTC | 0 | 0 | 0 |
| Jan 18 | 2016-01-18 00:00:00 UTC | 2016-01-25 00:00:00 UTC | 0 | 0 | 0 |
| Jan 25 | 2016-01-25 00:00:00 UTC | 2016-02-01 00:00:00 UTC | 0 | 0 | 0 |
| Feb 1 | 2016-02-01 00:00:00 UTC | 2016-02-08 00:00:00 UTC | 0 | 0 | 0 |
| Feb 8 | 2016-02-08 00:00:00 UTC | 2016-02-15 00:00:00 UTC | 0 | 0 | 0 |
| Feb 15 | 2016-02-15 00:00:00 UTC | 2016-02-22 00:00:00 UTC | 0 | 0 | 0 |
| Feb 22 | 2016-02-22 00:00:00 UTC | 2016-02-29 00:00:00 UTC | 0 | 0 | 0 |
| Feb 29 | 2016-02-29 00:00:00 UTC | 2016-03-07 00:00:00 UTC | 0 | 0 | 0 |
| Mar 7 | 2016-03-07 00:00:00 UTC | 2016-03-14 00:00:00 UTC | 0 | 0 | 0 |
| Mar 14 | 2016-03-14 00:00:00 UTC | 2016-03-21 00:00:00 UTC | 0 | 0 | 0 |
| Mar 21 | 2016-03-21 00:00:00 UTC | 2016-03-28 00:00:00 UTC | 0 | 0 | 0 |
| Mar 28 | 2016-03-28 00:00:00 UTC | 2016-04-04 00:00:00 UTC | 0 | 0 | 0 |
| Apr 4 | 2016-04-04 00:00:00 UTC | 2016-04-11 00:00:00 UTC | 0 | 0 | 0 |
| Apr 11 | 2016-04-11 00:00:00 UTC | 2016-04-18 00:00:00 UTC | 0 | 0 | 0 |
| Apr 18 | 2016-04-18 00:00:00 UTC | 2016-04-25 00:00:00 UTC | 0 | 0 | 0 |
| Apr 25 | 2016-04-25 00:00:00 UTC | 2016-05-02 00:00:00 UTC | 0 | 0 | 0 |
| May 2 | 2016-05-02 00:00:00 UTC | 2016-05-09 00:00:00 UTC | 1 | 0 | 1 |
| May 9 | 2016-05-09 00:00:00 UTC | 2016-05-16 00:00:00 UTC | 0 | 0 | 0 |
| May 16 | 2016-05-16 00:00:00 UTC | 2016-05-23 00:00:00 UTC | 0 | 0 | 0 |
| May 23 | 2016-05-23 00:00:00 UTC | 2016-05-30 00:00:00 UTC | 0 | 0 | 0 |
| May 30 | 2016-05-30 00:00:00 UTC | 2016-06-06 00:00:00 UTC | 0 | 0 | 0 |
| Jun 6 | 2016-06-06 00:00:00 UTC | 2016-06-13 00:00:00 UTC | 0 | 0 | 0 |
| Jun 13 | 2016-06-13 00:00:00 UTC | 2016-06-20 00:00:00 UTC | 0 | 0 | 0 |
| Jun 20 | 2016-06-20 00:00:00 UTC | 2016-06-27 00:00:00 UTC | 0 | 0 | 0 |
| Jun 27 | 2016-06-27 00:00:00 UTC | 2016-07-04 00:00:00 UTC | 2 | 0 | 2 |
What Hacker News says
4 sourcesThe first tool I run on new Macs is osxlockdown[1] (use [2] if you want a UI). It disables a bunch of features and enables things like the firewall. Make sure you don't disable things you're actually using, though. I don't run any AV, but I use OpenDNS Umbrella, a DNS-level malware blocking service with the capability to switch to "active" traffic filtering (basically a MitM proxy, though that part is completely optional). It's a neat tool with a nice dashboard, and the pricing is okay with $20/year.
OSSEC is a great tool for servers, but not the kind of "Let's just throw some AV at it so we can tick that compliance box" tool many are looking for.
[1]: https://github.com/SummitRoute/osxlockdown
[2]: https://objective-see.com/products/lockdown.html
In How to Compromise the Enterprise EndpointThese two scripts may help you with your setup:
https://github.com/SummitRoute/osxlockdown
https://github.com/kristovatlas/osx-config-check
In Giant bags of mostly water: Securing your IT infrastructureOsxlockdown: OS X tool to audit and remediate security configuration settings
2 points · Open discussion