#security

Create an outbound Windows Firewall rule that cuts a program off from the network.

Let Debian/Ubuntu install security patches on its own with unattended-upgrades.

The standard passwd command — no sudo needed for your own account.

List surrounding Wi-Fi networks with signal, channel, and encryption type using the hidden airport scan command.

Use Set-MpPreference to enable controlled folder access so only trusted apps can modify your documents.

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Look up passwords Safari saved for websites using security find-internet-password.

Generate a modern Ed25519 public/private key pair in ~/.ssh for authenticating to servers and Git platforms without passwords.

Encrypt an archive from Terminal before emailing or uploading it.

Encrypt your drive with BitLocker from the command line and get a recovery password.

One of the first hardening steps: no more direct root connections from the internet.

Make Windows log into your account automatically at boot using the Winlogon registry values.