0
votes
0answers
13 views

How do I import a SMIME certificate and automatically set the Keychain trust?

We are deploying SMIME certificates to all clients and we need to ensure that these certificates are only trusted for email. Given that our users are "unmanaged" and off the corporate network, how ...
0
votes
1answer
47 views

Is there an actually secure VNC iOS app for use with OS X Screen Sharing?

All iOS VNC clients I have tried use regular VNC authentication. This is insecure because of the 8 character limit on the password, and so on. Some apps such as RealVNC's VNC Viewer, does have info ...
1
vote
2answers
109 views

Prevent installation of malware, spyware… Admin password requirement

I am new in Mac world. I am the only user of my Mac with OS X 10.9.3 but sometimes other people use my computer. My purpose is to prevent installation of malware, spyware and surveillance software. ...
0
votes
1answer
44 views

Why files created by Kaleidoscope App are in quarantine?

I like to use Kaleidoscope (v 2.1.0 - build 133.01 under Mac OS X 10.8.5) to compare 2 directories. But, when I create files by copying them from a directory to another using ...
0
votes
1answer
68 views

Remove Airdrop function to do tightening of OSX

Could you tell me how to remove Airdrop function to do tightening of OSX? Looks somebody accessing my Mac via AirDrop. I would like to remove the function. Please tell me how to remove the function ...
0
votes
0answers
31 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
2
votes
2answers
39 views

Using different passwords for usual login and for admin-requiring actions

I use Mac OS X 10.9.3. Background: I log into my profile very frequently (e.g. after closing lid) and often do it in public. Someone definetely should be able to see it, and no matter if I make it ...
0
votes
1answer
19 views

Java Certificate Issues

Overview We are building a JAVA Application that communicates data over secure HTTPS lines. Problem When we run our application from Eclipse/Terminal, via the command "java -jar ...
2
votes
1answer
79 views

Block an application's read/write access to a specific file in OS X?

The premise is this: I have an app which has been set in its code to only run on OS X versions 10.4 to 10.9.2. (When I try to install it, it gives a message "This version of ____ is for Mac OS X 10.4 ...
0
votes
0answers
29 views

Way to bypass USB lockdown from the ProfileManager via command line?

As I manage a few MacBooks in a company we enforce security policies by Profile Manager. One of those policies is blocking USB ports. We have a group of people that we allow to use USB. It works well, ...
2
votes
3answers
94 views

Software recommendations for locking down a OS X based school computer lab

I am installing a computer lab with 25 brand new iMacs. I would like to secure the machines to prevent students from tampering with them. Some of the things I'd like to prevent including making ...
1
vote
2answers
700 views

Do firewall tools exist for OS X Mavericks for preventing brute force attacks?

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running ...
0
votes
1answer
39 views

Preventing access to mounted volumes for non-admin users

I have some volumes with sensitive data mounted in my main, admin account. I'd like to give some other users access to the same computer using a "standard" user account. Such a standard account seems ...
0
votes
1answer
95 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
1
vote
3answers
42 views

MBP security and safety

At work, I rely on a public wifi and don't see any good security standards or requirements or tips from Apple. Are there some general tips on first steps to take for securing OS X - if so they would ...
1
vote
3answers
228 views

How can I wipe a disk from a Mac with firmware password set?

I'm in a somewhat odd situation: I need to wipe the disk of a MBP, but I can't boot into Recovery Mode/from a CD/etc. as there is a firmware password set. Is there a way to wipe the disk from within ...
3
votes
1answer
961 views

List failed login attempts

I want to see if somebody has tried to log in on my computer, which is running Mavericks. I have seen the Q&A's How do I detect failed remote login attempts and block them? Where do I find the ...
4
votes
1answer
52 views

Anything comparable to Windows' “Network Location” in MacOS?

This is my first Mac. On Windows I can set each network connection as either Home, Work or Public using "Network Location". Each mode has different sharing and security options. Is there a way to do ...
1
vote
1answer
90 views

How do I change askForPasswordDelay from the command line? dwrite alone doesn't work

I normally run my Mac with a very long password delay on the screensaver. Sometimes, though, I want to reduce the delay to just 1-2 seconds. This command is supposed to reduce the time for the delay ...
1
vote
1answer
542 views

Google Chrome would like to control this computer using Accessibility

I installed LastPass and on restarting Chrome got a notification similar to this: http://superuser.com/questions/657015/google-software-update-would-like-to-control-this-computer-what, except it was ...
0
votes
1answer
57 views

Do root actions as non root in Mavericks?

Why does this work as (not) expected? touch filename chown root filename sudo chmod 700 filename rm filename I get asked if I want to delete the file an then!?!? The file gets really deleted! How ...
2
votes
1answer
176 views

codesign reports invalid Info.plist on an app dl'ed from the internet. Has the app been possibly compromised?

I downloaded an app from github (mac2imgur), and it refused to run. $ codesign -vv mac2imgur.app mac2imgur.app: invalid Info.plist (plist or signature have been modified) In architecture: x86_64 It ...
3
votes
2answers
128 views

What are the implications of linking your Apple ID to your Mac User Account in OS X System Preferences?

What are the various effects, in terms of usability, privacy and security, of storing your Apple ID in 'Users & Groups’ in your Mac System Preferences, like so? E.g., could one effect be not ...
1
vote
2answers
273 views

Securely wipe all user data from iBook G4 / OSX 10.4?

I have unearthed an old working iBook G4 which I'd like to clean and then give away. I don't have a copy of 10.4 on hand to install. And I'm not terribly interested in wiping the installed ...
2
votes
1answer
52 views

Secure access to data while retaining convenience and performance

I am looking for a convenient solution to the following problem: I have some large data (tens of GB) that resides on the hard drive of a Mac. Access to the data needs to be restricted so even users ...
1
vote
2answers
1k views

How to recover a compromised Mac OS 10.8.5

Computer got Safari hijacked by the "police" virus. Temporary solved by using Firefox instead. Questions: Read on numerous forums that you could reinstall OS X by holding down cmd + R keys. ...
2
votes
1answer
247 views

Securely delete guest accounts in OSX

I need a way to securely wipe guest accounts accounts off of my machine. On OSX, guests are automatically deleted on logout, with this deletion being done using the "RM" command. I need a way to alter ...
0
votes
0answers
28 views

Where are updated Apple security guidelines for recent OS X versions? [duplicate]

Pardon my paranoia; but with an 80,000-strong[#] global work force, one would think the need to cover important security guidelines for users would easily be met with each new OS X release. Yet a ...
-1
votes
3answers
135 views

Any way to be sure, that Macs don't come with built-in hardware keyloggers?

What the title says. If this is the case, even if you choose to delete everything OS X related and put entirely Linux in your box; you'd still be screwed. Hardware keyloggers sit between the keyboard ...
6
votes
2answers
435 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
3
votes
2answers
130 views

FileVault2 effect on speeds [duplicate]

I would like to know what kind of speed implications using FileVault2 would have on my MBPr (late 2013). As there are much faster SSD's in these machines I want to know whether there is a noticeable ...
2
votes
1answer
796 views

Adding Apps to “Security & Privacy” Settings (Automatically)

I am looking for a way to automatically add applications to the "Location Services" and "Accessibility" (Mavericks only) lists in the "Security & Privacy" settings pane. Optimally I could just ...
1
vote
1answer
97 views

Remotely disable Macbook Air through network access

My Macbook Air was stolen. The stolen Mac is showing up in Baku, Azerbajan. I don't have the skill to do it myself, but I could imagine that there would be a way to do something nasty. Perhaps a ...
1
vote
3answers
2k views

How To Securely Erase Free Space Using Terminal?

A friend told me that when you delete a file on your Mac in the normal way it actually stays where it is, but it is just no longer usable by your Mac. The addition of more files to your Mac causes ...
0
votes
0answers
131 views

How to stop trusting a self-signed certificate on OSX 10.8.5?

This is an odd one. I have a web server that presents a self-signed certificate when accessed over HTTPS. Previously, I marked this certificate as "trusted", so it appeared as such in the Keychain ...
5
votes
1answer
526 views

How to isolate an application from the system (fully sandboxed application)?

Is it possible to do something like the concept of sandboxing (like all apps on iOS have its own system software resources) for all existing applications (so - not while designing an own new ...
4
votes
1answer
3k views

Remove personal data without doing a full reinstallation

I am selling an old Mac with OS X 10.4 (Tiger), and I don't have the installation CD anymore so I can't format and re-install; I have to leave the current installation intact. Obviously, I'd like to ...
0
votes
1answer
140 views

Trim Enabler Safety

I have a quick question. I am a bit anal about what I run on my Mac, tend to use the apple apps (aperture/terminal) rather than alternatives (Picasa/iterm2) because I like to make sure I'm running ...
2
votes
1answer
2k views

Is there a detailed activity log on Mac OS X that lists my recent commands and actions?

How can I see what I just did on my computer? For example, an activity log showing that I copied a file from here to there?
0
votes
1answer
58 views

Checking the security over WLAN

I've become majorly concerned when reading this article that describes a bad actor that use Terminal access from his/her Mac to change the syslog and have stealth access to all data and passwords. ...
2
votes
1answer
33 views

Require Admin level to mount removable media or network attached storage device

Is there a way to require Admin level privileges on a MacBook in order to mount any type of removable media or network attached storage device?
0
votes
0answers
90 views

Why does System Preferences -> Security & Privacy get a spinning rainbow beach ball (i.e. 'Not Responding') when accessing it?

When in System Preferences, if I click on Security & Privacy, I get a well-known spinning rainbow beach ball, meaning that I cannot access the Firewall settings from System Preferences. What could ...
1
vote
1answer
880 views

I can't find a setting to disable WINS in Network settings

In my Network settings under WINS I have the NetBios name (elly) that I would like to disable (kill). The message shows that the "elly"is currently been used ? By whom, for what ? There a bunch of ...
3
votes
2answers
104 views

Set OS X Server for remote-only administration

I have a Mac Mini with OS X Server in another room with nothing attached but the network cable. I manage it remotely using Apple's Server and Remote Desktop. Is it possible to disable "locally" using ...
1
vote
2answers
5k views

How Do I Know if my MacBook Pro is Using WPS?

I have learned that WPS is not secure. There is a WPS button on my XFinity modem; but how do I know if it's enabled so I can know if I need to adjust my router settings (or perhaps decline to use an ...
2
votes
2answers
319 views

Where to target when doing a Brute Force attack on an extended mac OS drive?

I forgot the new password to my external hard drive (Mac OS Extended Journal Encrypted). I know. Stupid. I got my hands on John the Ripper and I know some parameters that will help narrow down the ...
0
votes
2answers
854 views

Forcing use of SSL connections in web dependent applications

Many websites allow it, to use an SSL connection. But how can I force my web dependent applications (Safari e.g.) to establish such a more secure (I know, that SSL is not the solution for all security ...
0
votes
1answer
95 views

Does Secure Keyboard Entry Prevent All Forms of Keyloggers?

I had an understanding that Secure Keyboard Entry (or EnableSecureEventInput) was a feature that essentially disabled keyloggers. Is that the case? Are there ways around it?
14
votes
1answer
193 views

Can I ensure keyboard commands don't get trapped by browser scripts?

Is it possible to tweak Safari to ensure command key combinations like ⌘H or ⌘L go to Safari as opposed to Safari's window contents? This comes up for me most often on this site because the editor ...
1
vote
1answer
660 views

How to tell whether Little Snitch is running or stopped?

I am running Little Snitch in demo mode: After a few hours, how can I tell whether Little Snitch is running or stopped? From the official website: Free Evaluation License Little Snitch ...