Amazon.co.uk Widgets

Log in

X
Apple Logo (public domain)

Why a Mac Mini?

I sent back my Apple DTK (the prototype ARM-based Mac computer which was kind of an iPad in a Mac Mini case) and in return Apple sent me a voucher which enabled me to part finance an M1 Mac Mini. I could not justify a Macbook Air or Macbook Pro at that time, (although I have since also bought a Mac Studio and a Macbook Pro M2). It arrived on the twentieth anniversary of the introduction of Mac OS X! It was built to order in Shenzen, China. The logistics at Apple never cease to amaze me.

Anyway, I thought I would document the setup and first impressions here. Mac mini, now with an M1 processor should be an impressive computer. The M1 processor brings an 8-core CPU which Apple claim dramatically accelerates demanding workloads, from compiling a million lines of code to building enormous multitrack music projects. An 8-core GPU delivers up to a massive 6x increase in graphics performance, allowing Mac mini to tackle performance-intensive tasks like complex 3D rendering with ease.

M1 (Source, Apple Newsroom, for personal and editorial use)
M1 (Source, Apple Newsroom, for personal and editorial use)

TL:DR macOS customisations, might be helpful for someone.

Specification

This Mac Mini is 16GB (the maximum) and 512GB of storage (the maximum I could justify to myself). Originally it was provided with macOS Big Sur but can be updated to the latest release of macOS. This article was written when macOS Big Sur was the latest release of macOS.

 

Initial Setup

The initial setup is exactly the same as an Intel based Mac running Big Sur. The Setup Assistant has a series of steps which set the country, accessibility settings, networking and user accounts with Apple ID. It left me with a desktop, and my new user account. I opted not to migrate this time, I fancy a fresh home folder after twenty years! Unfortunately the computer name "Angus's Mac Mini" won't do, but Apple chose it for me and didnt let me adjust it. I chose "m1n1"

Setting the computer name from the command line on macOS Big Sur

% scutil --set ComputerName "m1n1"
% scutil --set LocalHostName "m1n1"
% scutil --set HostName "m1n1" 

Thats better. Computer names are quite important to me, need to be lower case for me, and need to be recognisable.

Hardware considerations.

First things first. Steve Jobs coined the phrase "BYODKM" — Bring your own Display, Keyboard and Mouse back in 2005 and its still true. All that was in the box was a power cable and the usual warranty docs and stickers.

I am well prepared, given I was using the DTK before, I have a 34in Ultrawide Monitor with HDMI input. A handy wired Ethernet, external speakers, and a USB switch which warrants a bit more explanation.

There have been some reported problems with using wired keyboards, even old Apple ones which I prefer, with the new Mac Mini. (see Apple Discussions). I use a 4 in 4 out USB switch made by Aimos which allows up to 4 computer to share 4 USB 2.0 peripherals. I use these for my wired mouse, wired keyboard and 2 USB security keys because I have multiple computers. This is not a monitor sharing device - just the Keyboard, Mouse and Keys. It doesn't need any drivers and it 'just works'. The old wired Apple A1243 standard keyboard I prefer isn't recognised anymore by the keyboard setup utility (and why should it be, it was discontinued years ago) but it works fine!

Security hardening considerations.

  • Handoff — Handoff needs to send some data to Apple iCloud in the US to work, so in some way it is leaking your data. If you value security over convenience you can disable it in System Preferences -> General and Un-check "Allow Handoff between this Mac and your iCloud devices".
  • While you are there set "Show Scroll Bars" to "Always". It is better that way.
  • Guest User — System Preferences -> Users & Groups -> Guest User is off by default. Make sure it is off to disable guests ability to log in to this computer"
  • Diagnostics — You can disable sending stuff to Apple in System Preferences -> Security & Privacy -> Privacy -> Analytics
  • Privacy — You should periodically review the other privacy settings in System Preferences -> Security & Privacy -> Privacy - Does your weather app need to know your location? Probably. Does it need Accessibility control to read your keystrokes and spy on you? Time to find a better weather app.
  • Locking — Enable password locking in System Preferences -> Security & Privacy -> General to secure your computer should you walk away from it.
    • Enable the Require Password option and choose Immediately or 5 seconds from the pop-up menu and you’ll be required to enter a password to use your Mac after it’s gone to sleep or the screen saver has started. The shorter the time interval you use in this feature, the better. Again it is a balance between security and convenience.
  • Advanced Security and Privacy settings - Go to: System Preferences -> Security & Privacy > Advanced.
    • Check "Require an administrator password to access system-wide preferences".
    • Enable logout after 60 minutes of inactivity while you are there.
  • Firewall - Enable the firewall in System Preferences -> Security & Privacy -> Firewall. The firewall is a network filter that allows you to control which apps, programs and services can accept incoming connections.
    • Click the Turn On Firewall button. This basic option is the best for most purposes. Developers will need to set Firewall options for dev tools and utilities to work.
  • FileVault - Enable FileVault in System Preferences -> Security & Privacy -> FileVault. It encrypts folders including OS X system files, applications, caches and other temporary files; any of which may contain personal or sensitive information.
    • To set up FileVault, Turn On FileVault. Note this may take a very very long time. Once started leave it to finish. A Friday evening task.
  • Network interfaces - Lessen the attack surface for attackers by disabling unused network interfaces in System Preferences -> Networks
    • To disable, go to Network system preferences, and then unlock the preference pane, after which you will be able to Click the gear for a particular setting to mark it as inactive. As a rule you probably only need Ethernet and WiFi. If you dont know what it is you probably dont need it.
    • For Ethernet and Wi-Fi network interfaces, find the Internet Tab and set ipv6 to "link local only"
    • Turn Bluetooth off altogether if you dont use it
  • Spotlight - Disable Siri Suggestions in System Preferences (it sends your search to Apple) -> Spotlight, Un-check "Siri Suggestions" in "Search Results". Review private folders you do not wish to show up in search results.

Finder customisations

Ive adjusted grid spacing, text size and turned on item info, in "view options". You have to do this with no window open so it applies to the desktop. Ive also in Finder preferences set Hard disks to visible, new finder windows to my home folder, and to show all filename extensions.

See also: -


Apple's Own Guide - Mac mini Essentials

Licences, trademarks, source code licences and attributions

Licences, trademarks, source code licences and attributions

Multizone and this site is not affiliated with or endorsed by The Joomla! Project™. Any products and services provided through this site are not supported or warrantied by The Joomla! Project or Open Source Matters, Inc. Use of the Joomla!® name, symbol, logo and related trademarks is permitted under a limited licence granted by Open Source Matters, Inc. 928uk® is a trademark of Multizone Limited, registered in the UK. AdMob™, AdSense™, AdWords™, Android™, Chrome OS™, Chromebook™, Chrome™, DART™, Flutter™, Firebase™, Firestore™, Fuchsia™, Gmail™, Google Maps™, Google Pixel™, Google Play™, Pixelbook Go™, and Pixel™ and other trademarks listed at the Google Brand Resource center are trademarks of Google LLC and this site is not endorsed by or affiliated with Google in any way. Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. The OSI logo trademark is the trademark of Open Source Initiative. UNIX® and the X® logo are registered trademarks of The Open Group. Any other product or company names may be trademarks™ or registered® trademarks of their respective holders. Use of these trademarks in articles here does not apply affiliation or endorsement by any of them.

Where the source code is published here on ezone.co.uk or on our GitHub by Angus Fox, Multizone Limited it is licenced according to the open source practice for the project concerned.

BSD 3-Clause "New" or "Revised" Licence
Original source code for mobile apps are licenced using the same licence as the one used by "The Flutter Authors". This Licence, the BSD 3-Clause "New" or "Revised" Licence (bsd-3-clause) is a permissive licence with a clause that prohibits others from using the name of the project or its contributors to promote derived products without written consent.
GNU General Public Licence v2.0 or later
Original source code for Joomla! published here on ezone.co.uk by Angus Fox, Multizone Limited is licenced using the same licence as the one used by Joomla!. This Licence, the GNU General Public Licence Version 2 or later (gpl-2.0) is the most widely used free software licence and has a strong copyleft requirement. When distributing derived works, the source code of the work must be made available under the same licence.

You can use any code you find here, just respect the licences and dont use the name of this site or our company to promote derived products without written consent. I mean, why would you? You're not us!

Amazon Associate
As an Amazon Associate we earn from qualifying purchases.
Logo
Our Logo Image is by Freepik. We chose it because its an M and also the letter A twice - and that represents us.