Here’s an uncomfortable fact: at most companies, employees can download sensitive company data onto any device, keep it there forever, and never even know that they’re doing something wrong.

Kolide’s new report, The State of Sensitive Data, shines a light on an area of security that is often ignored, but is nevertheless a massive hole in many companies’ Zero Trust fortress.

These findings are particularly alarming given the overall state of device security. IT teams routinely struggle to enforce timely OS updates and patch management, meaning that end users are storing your most sensitive data–things like customer records, confidential IP, and plain-text access credentials–on devices that are vulnerable to attack.

This problem has gone unaddressed because until now there hasn’t been a good solution for it. MDM solutions are too blunt an instrument for dealing with sensitive data, and DLP tools are too extreme and invasive for most companies. After all, you’re not trying to ban downloads together, nor regard every download as suspicious. You’re just trying to make sure employees aren’t keeping data for longer than they need or keeping it on an unmanaged or unsecure device.

Kolide offers a more nuanced approach to setting and enforcing sensitive data policies.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide lets admins run queries to detect sensitive data, flag devices that have violated policies, and enforce OS and browser updates so vulnerable devices aren’t accessing data.

Our unique approach makes device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. But instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

Right now, “Zero Trust” is in serious danger of becoming an empty buzzword. The problem isn’t just that marketers have slapped the Zero Trust label on everything short of breakfast cereal–it’s that for all the hype, we don’t seem to be getting any safer.

At the heart of Zero Trust is a good idea, but the way most companies execute that idea is incomplete. Specifically, most security practitioners forget that device compliance is a crucial element of Zero Trust.

Think about it: your identity provider can ensure that only known devices access your company’s apps, but just because you recognize a device, doesn’t mean it’s in a secure state. A malware-infected laptop running an outdated OS can’t exactly be “trusted.” And you can’t count on MDMs to achieve total compliance. Things like unencrypted access credentials are out of their reach, not to mention Linux devices writ large.

Kolide solves the device compliance element of Zero Trust for companies that use Okta.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide’s unique approach works with Okta to make device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. And instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

Kolide works across your Mac, Windows, and even Linux devices, with mobile support coming soon. Our lightweight agent complements your existing tools, brings a lot of compliance issues into scope and under control, and can complete your Zero Trust picture.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

Here’s an uncomfortable fact: at most companies, employees can download sensitive company data onto any device, keep it there forever, and never even know that they’re doing something wrong.

Kolide’s new report, The State of Sensitive Data, shines a light on an area of security that is often ignored, but is nevertheless a massive hole in many companies’ Zero Trust fortress.

These findings are particularly alarming given the overall state of device security. IT teams routinely struggle to enforce timely OS updates and patch management, meaning that end users are storing your most sensitive data–things like customer records, confidential IP, and plain-text access credentials–on devices that are vulnerable to attack.

This problem has gone unaddressed because until now there hasn’t been a good solution for it. MDM solutions are too blunt an instrument for dealing with sensitive data, and DLP tools are too extreme and invasive for most companies. After all, you’re not trying to ban downloads together, nor regard every download as suspicious. You’re just trying to make sure employees aren’t keeping data for longer than they need or keeping it on an unmanaged or unsecure device.

Kolide offers a more nuanced approach to setting and enforcing sensitive data policies.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide lets admins run queries to detect sensitive data, flag devices that have violated policies, and enforce OS and browser updates so vulnerable devices aren’t accessing data.

Our unique approach makes device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. But instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

SaneBox is the all-in-one solution to email overload, so you can spend less time managing email and more time on what matters. It works with any email client or service, and any device - literally anywhere you check your email. Oh, and there’s nothing to download or install. It just works.

SaneBox is like having a personal email assistant that automatically organizes your inbox, so you don’t have to, saving valuable time. SaneBox works in the background, so your most important messages always reach your inbox. The rest of your messages are carefully organized into designated folders like SaneLater and SaneNews for later. You can snooze emails, too, setting them aside to deal with when you have the time.

Better yet, if there’s something you never want to see again, drag in into the SaneBlackHole folder. It’s far easier than the hit or miss process of unsubscribing from email lists.

SaneBox has a built-in reminders system too. SaneReminders are a terrific way to stay on task. Send yourself a reminder to do something later, or get a reminder when someone hasn’t responded to one of your messages. SaneReminders is perfect for making sure that nothing falls through the cracks.

Also, because SaneBox works with your existing email setup, there’s no app to download or new email account to set up. You can use any email service and client you want.

Sign up today and save $25 on any subscription. You’ll see big benefits immediately as the message count in your inbox drops, and you’ll be able to maintain control going forward with SaneBox’s help.

Our thanks to SaneBox for sponsoring MacStories this week.

Backblaze offers unlimited computer backup for Macs and PCs for just $7 a month. Backblaze will backup your music, photos, videos, drawings, projects, and all the other data you have, so it’s safe and secure.

If you need to restore a file, that’s simple too. You can restore files from anywhere by downloading them directly from the web or Backblaze’s excellent mobile apps for iOS and Android. You can even have a backup shipped to you on a hard drive or flash key.

Backblaze offers a Restore Return Refund Program too. Buy a hard drive to restore your data, send the hard drive back to Backblaze within 30 days, and get a full refund on the drive’s price. It’s the perfect solution for restoring large sets of data.

If you’ve ever worried about deleting a version of an important project file, Backblaze has you covered. For just $2/month more, Backblaze will extend your file retention history to a full year. If you need to roll back to a previous version of a file, Backblaze makes it as easy as picking a date in the calendar.

Listed on the Nasdaq Stock Exchange under BLZE, Backblaze is committed more than ever to bringing easy and affordable data storage that you can trust. Over the years, the company has restored over 55 billion files for customers and is recommended by The New York Times, Inc, Macworld, PCWorld, Lifewire, Wired, Tom’s Guide, 9to5mac, and more, so you can rest assured that Backblaze has you covered.

Start a fully-featured free 15-day Backblaze trial with no credit card required today by going to Backblaze.com/macstories. Once you give it a try, you’ll see why so many users swear by Backblaze to protect their data.

Our thanks to Backblaze for sponsoring MacStories this week.

SaneBox is the all-in-one solution to email overload, so you can spend less time managing email and more time on what matters. It works with any email client or service, and any device - literally anywhere you check your email. Oh, and there’s nothing to download or install. It just works.

SaneBox is like having a personal email assistant that automatically organizes your inbox, so you don’t have to, saving valuable time. SaneBox works in the background, so your most important messages always reach your inbox. The rest of your messages are carefully organized into designated folders like SaneLater and SaneNews for later. You can snooze emails, too, setting them aside to deal with when you have the time.

Better yet, if there’s something you never want to see again, drag in into the SaneBlackHole folder. It’s far easier than the hit or miss process of unsubscribing from email lists.

SaneBox has a built-in reminders system too. SaneReminders are a terrific way to stay on task. Send yourself a reminder to do something later, or get a reminder when someone hasn’t responded to one of your messages. SaneReminders is perfect for making sure that nothing falls through the cracks.

Also, because SaneBox works with your existing email setup, there’s no app to download or new email account to set up. You can use any email service and client you want.

Sign up today and save $25 on any subscription. You’ll see big benefits immediately as the message count in your inbox drops, and you’ll be able to maintain control going forward with SaneBox’s help.

Our thanks to SaneBox for sponsoring MacStories this week.

Embarking on a healthy 2023 is easy with Funn Media’s trio of top-rated health and fitness apps: WaterMinder, FitnessView, and Calory. Together, they’ll help you track what you eat and drink and push your fitness to new levels.

WaterMinder makes tracking hydration simple. The app features an elegant interface and myriad ways to input the water and other drinks you consume throughout the day. The app is available on all of Apple’s platforms, is highly customizable, and includes support for Shortcuts, widgets, and Apple Watch complications. With WaterMinder’s rich charts for tracking, hydration reminders, and integration with Apple Health, you’ll have your hydration on track in no time flat.

Fitness tracking is essential to maintaining healthy habits and preventing injury. FitnessView has you covered on both fronts with deep insights into every workout, along with trend-spotting that lets you train smarter than ever before. The app, which is available on the iPhone and Apple Watch, offers deep integration with Apple Health. With extensive stats and goal tracking, FitnessView provides a holistic overview of where your fitness stands today and where you’re heading. The fully-customizable app also includes Home Screen widgets for monitoring your progress at a glance, a long list of workout types, and workout sharing with friends.

Calory rounds out Funn Media’s health and fitness trio with the most intuitive calorie tracker on the App Store. The app’s rich visualization of the calories you’ve consumed and easy input system remove the friction from tracking your goals. Available on all Apple platforms, Calory lets you log what you eat from anywhere, so you never forget to log a meal. Coupled with glanceable charts plotting your progress and access to more detailed stats and a journal view, Calory offers a complete overview of the food and drink you consume, along with deep nutritional data.

Get started down the road to health and fitness with WaterMinder, FitnessView, and Calory by visiting Funn Media’s website today to learn more about these fantastic apps.

Our thanks to Funn Media for sponsoring MacStories this week.

Zones makes time zone conversions effortless. It’s simple, beautifully designed, and available on your iPhone, iPad, and Mac, so no matter where you are or what you’re doing, knowing the best time to connect with family and friends in other cities is easy.

With just a glance, you’ll always know exactly what time it is no matter where your friends and family live. Plus, Zones includes:

• Detailed weather information with Apple Weather integration for every time zone you track
• Information about holidays around the world
• The ability to create reminders for each time zone, so you’ll recall the best time to reach out to someone on their birthday or an upcoming holiday, for example

Zones is perfect for remote teams too. The app has a built-in event creation feature that integrates with Apple’s Calendar app, making it easy for colleagues to coordinate meetings and calls.

With Zones, you also get support for the latest Apple technologies. Lock and Home Screen widgets, iCloud sync between devices, an iMessage app for sharing time zone information, and a Mac menu bar app add up to a fantastic user experience.

Of course, Zones is also privacy-focused. It doesn’t collect user data, the app doesn’t require an account, and all versions are ad-free.

Download Zones today for free on the App Store to stay in touch with family and friends. And when you’re ready to take Zones even further, sign up for Zones+ for just $1.99 per month or $19.99 per year to unlock holiday and weather information, plus the ability to create reminders.

Our thanks to Zones for sponsoring MacStories this week.

WinterFest 2022: The Festival of Artisanal Software is back with a fantastic collection of carefully-crafted software for writing, research, thinking, and more at tremendous prices. As in past years, software artisans from around the globe come together to offer discounts direct to you on 19 carefully-crafted apps and a book collection to assist you with everyday knowledge work:

• Aeon Timeline: The timeline tool for creative thinking
• BBEdit: The leading text and code editor for the Mac
• Bookends: The reference manager you’ve been looking for
• DEVONagent Pro: Your smart research assistant
• DEVONthink: Your powerful information and knowledge manager
• Easy Data Transform: Merge, clean, reformat data without coding
• Hookmark: Supplies the missing links
• HoudahGeo: Photo geotagging for Mac
• HoudahSpot: Powerful file search
• HyperPlan: Flexible visual planner
• ImageFramer Pro: Add creative borders and frames to photos
• Panorama X: Collect, organize, and understand your data
• Scapple: Quickly capture and connect ideas
• Scrivener: Your complete writing studio
• SmallCubed Mail Suite: Manage mail like a maven
• Take Control Books: eBooks from top authors that help you navigate the latest Apple tech and apps
• Tinderbox: Visualize and organize your notes, plans, and ideas
• Trickster: Your recently used files, at your fingertips
• Yojimbo: The Mac app that empowers users to effortlessly and securely manage the onslaught of information

There are no gimmicks, no bundles, no gotchas – just saving of hundreds of dollars on great software from thoughtful developers. 

Visit the WinterFest website now for links to these amazing deals or use the coupon code Winterfest2022 at checkout.

Also, in mid-January, the WinterFest folks are organizing an online symposium about the art and craft of software. There will be interviews and panel discussions with leading designers and thinkers, tackling the big issues in software design, including:

• Interlinked systems 
• Tiny methods, tiny objects
• Software ecologies
• AI, agents, and self-organizing documents
• Test-driven development and Improvisatory architecture
• Community and synergy
• Digital humanities

Stay tuned for more information soon.

Our thanks to WinterFest 2022 for its support of MacStories this week.