The Essential Guide to OS X Lion
Posted 08/15/2011 at 1:50pm
| by Adam Berenstain, Cory Bohon, J.R. Bookwalter, Susie Ochs and Nic Vargus
Security in Lion
Lion is the most secure version of Mac OS X ever, keeping you safe without slowing you down
Security isn’t the most compelling OS feature to read about, but it sure is important. Lion’s new security improvements are relatively unsung -- they toil away in the background, and you might not even notice them unless something goes wrong. Our advice is to check them out (System Preferences > Security & Privacy) when you get started with Lion, then go back to forgetting they’re there.
Although security may not have received as much attention as flashier additions like Mission Control and Multi-Touch gestures, Lion includes an arsenal of new features to keep users safe from harm. Just how secure is Lion? According to researchers, Mac OS 10.7 represents a major overhaul of the operating system’s security that trumps even those in Microsoft Windows 7 or Linux Ubuntu—and so Mac users are encouraged to part with their $29.99 as soon as possible.
“It’s a significant improvement, and the best way that I’ve described the level of security in Lion is that it’s Windows 7, plus, plus,” Dino Dai Zovi, coauthor of The Mac Hacker’s Handbook told The Register. “I generally tell Mac users that if they care about security, they should upgrade to Lion sooner rather than later, and the same goes for Windows users, too.”

Be sure to peruse all the options in System Preferences > Security & Privacy.
Lion’s most visible security component is FileVault 2, a new version of the built-in encryption software found in System Preferences. While users care about security, they tend to care more about speedy performance. And the previous FileVault had a noticeable impact on many systems. Apple made the FileVault 2 encryption/decryption process faster and less obtrusive, securing your computer in the background as you work, even giving up valuable processor cycles to higher-priority tasks such as web browsing or file copying.
FileVault was also limited to encrypting only the user’s Home folder, leaving system-level support files vulnerable. FileVault 2 brings strong XTS-AES 128 encryption to your entire drive structure, with support for external USB or FireWire drives, including your precious Time Machine backup. FileVault 2 also adds instant wipe, the ability to remove an encryption key from your Mac and scrub the entire drive prior to selling or otherwise disposing of your Mac.
Lion also works hard to keep intruders from getting in via other methods. Malware screening alerts are built right into Safari, Mail, and iChat, giving you a chance to opt out of launching an application that may not have your best intentions in mind. Lion also introduces “sandboxing,” a technique already used by iOS to restrict the actions of an application, limiting file access and what other programs can be launched from it. Sandboxing also prevents browser plug-ins such as Adobe Flash Player from crashing and taking down all of Safari with it. (Rejoice!)
Privacy features in System Preferences > Security & Privacy allow you to control which apps have access to your location data. Safari also includes its own set of options (Safari > Preferences > Privacy) to limit or block cookies and website access to location services.

Safari’s preferences let you block websites from leaving cookies and grabbing your location data.
Of course, none of these security features would be worth much if they were complicated for the user. So Apple made it as simple as flipping a switch in the System Preferences > Security & Privacy pane for turning off automatic login, updating the safe downloads list, or even logging you out of the computer after a specified amount of time.
Perhaps Apple’s greatest tool in the fight against malware is the existing Software Update mechanism we all know and love. Following the Mac Defender malware scare at the beginning of May, Cupertino responded quickly with Security Update 2011-003, subsequently rolled into both Mac OS 10.6.8 and now 10.7 Lion. Long considered a bastion of freedom from viruses and malware, Apple has moved quickly to plug holes in their software as soon as they rear their ugly heads.