Preventing outside hack using shared network for control over camera/mic while accessing operational ability and private information
[Re-Titled by Moderator]
Original Title: Personal device hacked from shared wifi
MacBook Pro 13″, macOS 15.6
Hey!
If you’re worried about someone messing with your MacBook Pro over a shared Wi-Fi, here’s what usually works:
• Use a VPN — it encrypts your traffic so no one else on the network can peek.
• Turn off file sharing and AirDrop when on public or shared networks (System Settings → Sharing).
• Enable the firewall (System Settings → Network → Firewall) and keep it on.
• Keep macOS and apps updated — security patches fix holes hackers could use.
• Check camera/mic permissions (System Settings → Privacy & Security → Camera / Microphone) and remove access for anything you don’t trust.
• Avoid sketchy Wi-Fi, or use your own hotspot.
• Strong passwords + 2FA for your accounts.
Doing these things makes it really hard for anyone to access your Mac over shared Wi-Fi.
Remember that in general its only other users INSIDE that network might be a threat. From the Internet at large, you should still be invisible.
Turning on the Firewall on your Mac is a great idea.
--------
Using a VPN the increase security is completely WRONG, so I am completed to refute that idea.
A virtual private network, or VPN, is a private connection over the Internet from a device to a specific network. VPN technology is widely used in corporate environments. If you need to be "present" on an institutional network, a VPN is a great tool for accomplishing this. It is generally issued and controlled by the institution.
Almost all other uses are a SCAM. There is generally no need for you to have a private (and almost always MUCH slower) connection to a VPN vendor's Network, except to make it easier for them to harvest your data to sell. If you are behind a Router you control or Trust, there is NO security advantage whatsoever in using a VPN. Your connections are already encrypted in most cases.
If VPN vendors just stopped there, it would be bad. But many of these packages also insist on scanning all your files, non-stop, -- nominally looking for viruses, but who knows for sure what data they are harvesting. Their non-stop file reading punishes your computer's performance in the process.
Some also break into your other secure connections so they can be FIRST to examine your data, often leaving your Mac MORE vulnerable to attack.
https://gist.github.com/joepie91/5a9909939e6ce7d09e29
How to prevent MacBook Pro from being hacked from shared Wi-Fi
