GENIUS TIPS

Howard Oakley solves all your Mac hardware, software and iOS and iPadOS issues

QShould I strengthen my current anti-malware protection with Little Snitch, Hazel, or what?

ASecurity systems built into macOS and third-party anti-malware products are primary protection, as they try to detect and stop malicious software from being run in the first place. Software firewalls like Little Snitch and tools like Hazel are secondary protection, as they only come into play when the malware is already running.

A software firewall can block attempts by any software to make outgoing network connections from your Mac. As that’s common behaviour in malware and unwanted software, it may be a valuable defence and alert you. But many apps legitimately call home too, so if you’re not careful you can create more problems. Software firewalls aren’t set and forget, and are best for advanced users who understand how to use them properly.

Hazel isn’t intended for security use: it automates actions on folders. But one of its valuable features is that it can watch folders and notify you when anything changes inside them. Malware and its relatives often install scripts in LaunchAgents or LaunchDaemons folders in Library folders, something that Hazel can readily warn you about. It’s simple to set up and doesn’t stop other software from functioning normally.

Those apps therefore won’t stop malware, but as secondary protection can be valuable when used wisely.

Set Hazel to watch important folders like LaunchAgents and LaunchDaemons so it can catch apps which use them.