If you build a dystopian and cynical security program born out of fear, mistrust, and suspicion, then you will inevitably make your fellow employees your enemies.

That’s a quote from Honest Security, Kolide’s mission statement, and North Star. It was written by their CEO, Jason Meller, who spent his career in cybersecurity before founding Kolide. 

He was troubled by the widely-accepted idea among cybersecurity professionals that end users should be treated, first and foremost, as threats. This way of thinking informs the traditional approach to device management, which relies on MDMs that take control of devices and come with surveillance capabilities that most companies don’t need or even really want.

Kolide works by notifying your employees of security issues via Slack, educating them on why they’re important, and giving them step-by-step instructions to resolve them themselves.

Kolide’s open-source agent collects data across 43 categories on Mac, Windows, and Linux devices. It can answer questions like:

• Do any of my developers have unsecured SSH keys floating around?
• Does everyone have disk encryption, screen lock, and password managers set up?
• Are there any Macs in my fleet in need of a new battery?

And while Kolide can provide insights that MDMs can’t, it’s Kolide’s commitment to transparency really sets them apart. Employees can visit the User Privacy Center for an explanation of precisely what data is being collected, by whom, and for what purpose.

Want to see how it works for yourself? Click here for a free trial, no credit card required, and let us show you what we’re all about.

Our thanks to Kolide for sponsoring MacStories this week.

Kosmik is a dashboard for your creativity. Built for designers, researchers, and writers, Kosmik’s infinite canvas for the iPad and Mac lets you bring together notes, your writing, images, websites, PDFs, and more on a single canvas called a Universe, so you can stop switching between apps and focus on what you’re creating.

Everything in a Kosmik Universe is a card, and cards from one canvas can be incorporated into another, making the first canvas app with the sort of transclusion found in note-taking apps like Roam Research and Obsidian. It’s a powerful yet simple architecture that reduces friction, so you can focus on your work.

The flexibility of Kosmik’s canvas means you can take notes, browse the web, collect PDFs, images and other resources, and write all in one place. That encourages spatial thinking, making new connections and links between materials, and reduces distractions all at once in a single easy-to-use interface.

Kosmik is a completely native, peer-to-peer solution that respects your privacy. The app syncs your data between devices with no central server. Everything is encrypted end-to-end too.

You can publish your Kosmik canvases and cards to the web for sharing with colleagues, and even more collaboration features are coming later this year. Kosmik is available on the web now, too, making it accessible in more places and to more users than ever before.

If you’re looking for a new way to organize your thoughts, writing, and, really, anything else, sign up for Kosmik today. MacStories readers can enjoy a free year of access just by following this link. From ideation to production, Kosmik lets you think better and more freely to uncover insights and have some fun too!

Kosmik is available to download on the App Store and also offers great resources for new users like its Substack newsletter and Discord community.

Our thanks to Kosmik for sponsoring MacStories this week.

We are now well into the two-year transition window Apple began with the release of their M1 chip. In fact, the second generation of Apple Silicon processors – the M2 – is now available.

Apple will continue to support Intel-based Macs, but the power found with Apple Silicon is proving to be worth the jump for users and developers. Forward-thinking technology companies seek to release software that leverages the new features released by Apple each year.

In order to use new features possible with Apple Silicon, dev teams will first need to incorporate the latest hardware and software available from Apple. This includes M1/M2 machines and the latest versions of macOS and Xcode. This will enable them to build and test for these new machines.

The need to replace development machines themselves can be costly, but the prospect of replacing an entire data center worth of Macs that run on-premise can be downright cost prohibitive. This presents a challenge for macOS development teams that use continuous integration (CI) to safely make changes to their existing codebases – a generally accepted best practice throughout the industry.

In addition, introducing new hardware architecture may call for a change in the software approach. Does the current orchestration software support Apple Silicon? It’s not likely.

MacStadium is here to help.

Orka, MacStadium’s macOS-based orchestration software, supports both Apple Silicon and Intel in a mixed cluster. Rather than retooling an entire in-house data center, macOS-focused development companies can simply migrate their CI processes to the cloud and build for all current Mac users. MacStadium provides the private Mac cloud and a skilled team to help you securely scale to your needs.

Reach out to a MacStadium sales engineer to learn more about Orka and how it can accelerate your iOS and macOS Development workflows.

Our thanks to MacStadium for their support of MacStories this week.

In 2021, Kolide went through the SOC 2 Type 1 audit, and they found out just how challenging it can be to prove compliance to a third-party auditor. They also learned firsthand something their customers had been telling them for a while: that they couldn’t have gotten their SOC certification without using their own product.

That product is Kolide, an endpoint security solution for Mac, Windows, and Linux devices. Kolide gives IT admins a single dashboard, through which you can prove that your fleet has the security measures that auditors care about.

With Kolide, you can instantly see whether:

• Firewalls and screen lock are enabled
• Operating systems are up-to-date
• Password managers are installed

Kolide also provides visibility into nuanced issues that MDMs can’t address, like whether developers have unencrypted SSH keys or plaintext 2FA backup codes.

Moreover, Kolide balances this visibility with respect for user privacy and autonomy. Users can visit the Privacy Center to see what device data is being collected and why. And when Kolide detects a vulnerability on a user’s device, it reaches out via Slack to notify them of the problem and provides step-by-step instructions on how to solve it. 

Kolide has helped hundreds of customers achieve compliance–for SOC 2, ISO27001, or their own internal security goals. And they’ve done so in ways that go beyond “checking the boxes” and actually increase transparency and collaboration between IT and end users.

If you want to know how you can get compliant without compromising your values, then we want to talk to you.

Try Kolide for 14 days free; no credit card required.

Our thanks to Kolide for its support of MacStories this week.

Device security is a lot like Mount Everest: it’s tough to scale.

When you’re a small company dominated by engineers, you can keep up with fleet management with nothing more than trust and a spreadsheet. But once you start to hire marketers, designers, and the rest, the number of laptops balloons and the line between “work” and “personal” devices gets fuzzy. 

But fuzzy isn’t going to cut it. You have to prove you’ve got device security under control to close deals with customers, pass a third-party audit, and prove you’re ready for acquisition or an IPO. 

At this point, you start looking for a tool that will give you visibility across all these devices. And you have two options. 

Option one is an MDM, which acts as the puppet master for your whole fleet, forcing compliance through intrusive agents. But for all an MDM’s power, it still can’t answer your most nuanced questions. And when it comes to Linux devices? Good luck with that.

Your other option is Kolide. 

Kolide is an endpoint security solution that gives IT teams a single dashboard for all devices, regardless of their operating system.

Kolide can answer questions MDMs can’t. Questions like:

• Do you have production data being stored on devices?

• Are all your developers’ SSH keys encrypted?

• And a host of other data points you’d otherwise have to write a custom shell script to learn about.

Want to see how it works for yourself? Click here for a free trial, no credit card required, and let us show you what we’re all about.

Our thanks to Kolide for sponsoring MacStories this week.

Do you know the old thought experiment about the AI designed to make paper clips that quickly decides that it will have to eliminate all the humans to maximize paper clips?

Many security teams have a similar idea when meeting compliance goals: it would be much simpler if it weren’t for all the pesky users.

That way of thinking has brought us to the current state of endpoint security, dominated by MDMs that hamper device performance and turn every laptop into Big Brother. This approach to security is bad for culture and morale; moreover, it doesn’t actually work. If it did, no company with an MDM and annual security training would have a data breach.

Kolide is endpoint security and fleet management that takes a different approach. They help their customers meet their compliance goals–whether for auditors, customers, or leadership–by enlisting the support of end users.

Kolide works by notifying your employees of security issues via Slack, educating them on why they’re important, and giving them step-by-step instructions to resolve them themselves.

For IT admins, Kolide helps you prove compliance via a single dashboard. From there, you can monitor the security of your entire fleet, whether they’re running on Mac, Windows, or Linux. (You read that right; Kolide can finally provide visibility into your Linux users.)

If you’ve read this far, it’s because you’re intrigued by an approach to endpoint security that gets end users involved. Click here to learn more about how it works. If you like what you see, you can sign up for a free trial; no credit card required.

Our thanks to Kolide for sponsoring MacStories this week.

SaneBox is your personal email assistant that automatically organizes your inbox, saving you loads of valuable time. SaneBox works with your existing email service, so your most important messages always reach your inbox. The rest of your messages are carefully organized into designated folders like SaneLater and SaneNews for later. You can snooze emails, too, setting them aside to deal with when you have the time.

Better yet, if there’s something you never want to see again, drag in into the SaneBlackHole folder. It’s far easier than the hit or miss process of unsubscribing from email lists.

SaneBox has a built-in reminders system too. SaneReminders are a terrific way to stay on task. Send yourself a reminder to do something later, or get a reminder when someone hasn’t responded to one of your messages. For example, bcc: [email protected] and the message will show up back in your inbox only if the recipient doesn’t reply within three days. SaneReminders is perfect for making sure that nothing falls through the cracks.

Also, because SaneBox works with your existing email setup, there’s no app to download or new email account to set up. You can use any email service and client you want.

Sign up today for a free 14-day SaneBox trial to take back control of your email. You’ll see big benefits immediately as the message count in your inbox drops, and you’ll be able to maintain control going forward with SaneBox’s help. MacStories readers can receive a special $25 credit automatically by using this link to sign up.

Our thanks to SaneBox for sponsoring MacStories this week.

Backblaze offers unlimited computer backup for Macs and PCs for just $7 a month. Backblaze will backup your music, photos, videos, drawings, projects, and all the other data you have, so it’s safe and secure.

If you need to restore a file, that’s simple too. You can restore files from anywhere by downloading them directly from the web or Backblaze’s excellent mobile apps for iOS and Android. You can even have a backup shipped to you on a hard drive or flash key.

Backblaze offers a Restore Return Refund Program too. Buy a hard drive to restore your data, send the hard drive back to Backblaze within 30 days, and get a full refund on the drive’s price. It’s the perfect solution for restoring large sets of data.

If you’ve ever worried about deleting a version of an important project file, Backblaze has you covered. For just $2/month more, Backblaze will extend your file retention history to a full year. If you need to roll back to a previous version of a file, Backblaze makes it as easy as picking a date in the calendar.

Recently listed on the Nasdaq Stock Exchange under BLZE, Backblaze is committed more than ever to bringing easy and affordable data storage that you can trust. Over the years, the company has restored over 55 billion files for customers and is recommended by The New York Times, Inc, Macworld, PCWorld, Lifewire, Wired, Tom’s Guide, 9to5mac, and more, so you can rest assured that Backblaze has you covered.

Start a fully-featured free 15-day Backblaze trial with no credit card required today by going to Backblaze.com/macstories. Once you give it a try, you’ll see why so many users swear by Backblaze to protect their data.

Our thanks to Backblaze for sponsoring MacStories this week.