0
votes
1answer
26 views

Preventing access to mounted volumes for non-admin users

I have some volumes with sensitive data mounted in my main, admin account. I'd like to give some other users access to the same computer using a "standard" user account. Such a standard account seems ...
0
votes
1answer
62 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
1
vote
3answers
40 views

MBP security and safety

At work, I rely on a public wifi and don't see any good security standards or requirements or tips from Apple. Are there some general tips on first steps to take for securing OS X - if so they would ...
1
vote
3answers
89 views

How can I wipe a disk from a Mac with firmware password set?

I'm in a somewhat odd situation: I need to wipe the disk of a MBP, but I can't boot into Recovery Mode/from a CD/etc. as there is a firmware password set. Is there a way to wipe the disk from within ...
4
votes
1answer
47 views

Anything comparable to Windows' “Network Location” in MacOS?

This is my first Mac. On Windows I can set each network connection as either Home, Work or Public using "Network Location". Each mode has different sharing and security options. Is there a way to do ...
1
vote
1answer
52 views

How do I change askForPasswordDelay from the command line? dwrite alone doesn't work

I normally run my Mac with a very long password delay on the screensaver. Sometimes, though, I want to reduce the delay to just 1-2 seconds. This command is supposed to reduce the time for the delay ...
1
vote
1answer
235 views

Google Chrome would like to control this computer using Accessibility

I installed LastPass and on restarting Chrome got a notification similar to this: http://superuser.com/questions/657015/google-software-update-would-like-to-control-this-computer-what, except it was ...
0
votes
1answer
45 views

Do root actions as non root in Mavericks?

Why does this work as (not) expected? touch filename chown root filename sudo chmod 700 filename rm filename I get asked if I want to delete the file an then!?!? The file gets really deleted! How ...
2
votes
1answer
100 views

codesign reports invalid Info.plist on an app dl'ed from the internet. Has the app been possibly compromised?

I downloaded an app from github (mac2imgur), and it refused to run. $ codesign -vv mac2imgur.app mac2imgur.app: invalid Info.plist (plist or signature have been modified) In architecture: x86_64 It ...
3
votes
2answers
105 views

What are the implications of linking your Apple ID to your Mac User Account in OS X System Preferences?

What are the various effects, in terms of usability, privacy and security, of storing your Apple ID in 'Users & Groups’ in your Mac System Preferences, like so? E.g., could one effect be not ...
1
vote
2answers
104 views

Securely wipe all user data from iBook G4 / OSX 10.4?

I have unearthed an old working iBook G4 which I'd like to clean and then give away. I don't have a copy of 10.4 on hand to install. And I'm not terribly interested in wiping the installed ...
2
votes
1answer
47 views

Secure access to data while retaining convenience and performance

I am looking for a convenient solution to the following problem: I have some large data (tens of GB) that resides on the hard drive of a Mac. Access to the data needs to be restricted so even users ...
1
vote
2answers
764 views

How to recover a compromised Mac OS 10.8.5

Computer got Safari hijacked by the "police" virus. Temporary solved by using Firefox instead. Questions: Read on numerous forums that you could reinstall OS X by holding down cmd + R keys. ...
2
votes
1answer
170 views

Securely delete guest accounts in OSX

I need a way to securely wipe guest accounts accounts off of my machine. On OSX, guests are automatically deleted on logout, with this deletion being done using the "RM" command. I need a way to alter ...
0
votes
0answers
28 views

Where are updated Apple security guidelines for recent OS X versions? [duplicate]

Pardon my paranoia; but with an 80,000-strong[#] global work force, one would think the need to cover important security guidelines for users would easily be met with each new OS X release. Yet a ...
-1
votes
3answers
134 views

Any way to be sure, that Macs don't come with built-in hardware keyloggers?

What the title says. If this is the case, even if you choose to delete everything OS X related and put entirely Linux in your box; you'd still be screwed. Hardware keyloggers sit between the keyboard ...
4
votes
2answers
217 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
3
votes
2answers
123 views

FileVault2 effect on speeds [duplicate]

I would like to know what kind of speed implications using FileVault2 would have on my MBPr (late 2013). As there are much faster SSD's in these machines I want to know whether there is a noticeable ...
2
votes
1answer
615 views

Adding Apps to “Security & Privacy” Settings (Automatically)

I am looking for a way to automatically add applications to the "Location Services" and "Accessibility" (Mavericks only) lists in the "Security & Privacy" settings pane. Optimally I could just ...
1
vote
1answer
79 views

Remotely disable Macbook Air through network access

My Macbook Air was stolen. The stolen Mac is showing up in Baku, Azerbajan. I don't have the skill to do it myself, but I could imagine that there would be a way to do something nasty. Perhaps a ...
0
votes
3answers
1k views

How To Securely Erase Free Space Using Terminal?

A friend told me that when you delete a file on your Mac in the normal way it actually stays where it is, but it is just no longer usable by your Mac. The addition of more files to your Mac causes ...
0
votes
0answers
116 views

How to stop trusting a self-signed certificate on OSX 10.8.5?

This is an odd one. I have a web server that presents a self-signed certificate when accessed over HTTPS. Previously, I marked this certificate as "trusted", so it appeared as such in the Keychain ...
4
votes
1answer
335 views

How to isolate an application from the system (fully sandboxed application)?

Is it possible to do something like the concept of sandboxing (like all apps on iOS have its own system software resources) for all existing applications (so - not while designing an own new ...
3
votes
1answer
1k views

Remove personal data without doing a full reinstallation

I am selling an old Mac with OS X 10.4 (Tiger), and I don't have the installation CD anymore so I can't format and re-install; I have to leave the current installation intact. Obviously, I'd like to ...
0
votes
1answer
123 views

Trim Enabler Safety

I have a quick question. I am a bit anal about what I run on my Mac, tend to use the apple apps (aperture/terminal) rather than alternatives (Picasa/iterm2) because I like to make sure I'm running ...
2
votes
1answer
1k views

Is there a detailed activity log on Mac OS X that lists my recent commands and actions?

How can I see what I just did on my computer? For example, an activity log showing that I copied a file from here to there?
0
votes
1answer
55 views

Checking the security over WLAN

I've become majorly concerned when reading this article that describes a bad actor that use Terminal access from his/her Mac to change the syslog and have stealth access to all data and passwords. ...
2
votes
1answer
27 views

Require Admin level to mount removable media or network attached storage device

Is there a way to require Admin level privileges on a MacBook in order to mount any type of removable media or network attached storage device?
0
votes
0answers
79 views

Why does System Preferences -> Security & Privacy get a spinning rainbow beach ball (i.e. 'Not Responding') when accessing it?

When in System Preferences, if I click on Security & Privacy, I get a well-known spinning rainbow beach ball, meaning that I cannot access the Firewall settings from System Preferences. What could ...
1
vote
1answer
555 views

I can't find a setting to disable WINS in Network settings

In my Network settings under WINS I have the NetBios name (elly) that I would like to disable (kill). The message shows that the "elly"is currently been used ? By whom, for what ? There a bunch of ...
3
votes
2answers
102 views

Set OS X Server for remote-only administration

I have a Mac Mini with OS X Server in another room with nothing attached but the network cable. I manage it remotely using Apple's Server and Remote Desktop. Is it possible to disable "locally" using ...
1
vote
2answers
3k views

How Do I Know if my MacBook Pro is Using WPS?

I have learned that WPS is not secure. There is a WPS button on my XFinity modem; but how do I know if it's enabled so I can know if I need to adjust my router settings (or perhaps decline to use an ...
2
votes
2answers
256 views

Where to target when doing a Brute Force attack on an extended mac OS drive?

I forgot the new password to my external hard drive (Mac OS Extended Journal Encrypted). I know. Stupid. I got my hands on John the Ripper and I know some parameters that will help narrow down the ...
0
votes
2answers
721 views

Forcing use of SSL connections in web dependent applications

Many websites allow it, to use an SSL connection. But how can I force my web dependent applications (Safari e.g.) to establish such a more secure (I know, that SSL is not the solution for all security ...
0
votes
1answer
86 views

Does Secure Keyboard Entry Prevent All Forms of Keyloggers?

I had an understanding that Secure Keyboard Entry (or EnableSecureEventInput) was a feature that essentially disabled keyloggers. Is that the case? Are there ways around it?
14
votes
1answer
183 views

Can I ensure keyboard commands don't get trapped by browser scripts?

Is it possible to tweak Safari to ensure command key combinations like ⌘H or ⌘L go to Safari as opposed to Safari's window contents? This comes up for me most often on this site because the editor ...
1
vote
1answer
555 views

How to tell whether Little Snitch is running or stopped?

I am running Little Snitch in demo mode: After a few hours, how can I tell whether Little Snitch is running or stopped? From the official website: Free Evaluation License Little Snitch ...
6
votes
2answers
11k views

How to block internet traffic of an application?

Little Snitch can block internet traffic of a particular app. Can I do something similar without (paying) Little Snitch?
1
vote
2answers
1k views

Password protected partitions on mac os x

I have two partitions first is primary with os x installed and second is empty, I want to password protect this second partition so when I double click it must ask for password and then tell me read ...
1
vote
1answer
78 views

Printers compatible with case sensitive hardened Mountain Lion

For security improvment, I'm running all my MacOS X on case sensitive and journaled file systems (then any ill written program which one day open a file named conf, and the day after try to open it ...
5
votes
2answers
480 views

How should I use VPN on a Mac to prevent compromise before the VPN starts?

As most experienced users will have heard, using a Mac in a public untrusted Wi-Fi can be potentially harmful. A tool like Firesheep1 has made it very easy to intercept unencrypted communication. ...
1
vote
0answers
1k views

Do Java security settings in Mountain Lion cause java.lang.ExceptionInInitializerError?

In a nutshell, I have a java app that crashes in java.lang.ExceptionInInitializerError and I'm looking to see if my OS/Java settings might be causing this error. I cannot change the security settings ...
6
votes
2answers
570 views

“Airplane Mode” in OS X. Alternative command for `rfkill`?

This question is an exact duplicate of this post from superuser.exchange.com. I believe this is a valid question for both of sites and hope I am not (if any) violating stackexchange policies. ...
4
votes
1answer
761 views

Remove app from Location Services?

I've used App Cleaner which clears preference and associated files, but I can't clear it from Location Services permissions list in System Preferences > Security & Privacy > Privacy. Any idea how ...
1
vote
2answers
455 views

How can I ensure only “whitelisted” applications run on OS X

There is a security technique called whitelisting (available in Windows 7) that ensures that only specific applications and processes will run. This is different from email whitelisting and only ...
1
vote
1answer
616 views

How to determine which traffic goes over the PPTP VPN?

I setup a PPTP VPN on mac os x lion, on the advanced tab I do not have the send all traffic over VPN connection checked. I only want traffic to a specific server connected to go through the vpn, ...
4
votes
4answers
276 views

Is there a way to limit how frequently you can start an application?

On my phone, I'm am enjoying a new tweak called MailStop which sole purpose is to limit my reflex of checking my mail far too often. I have set it to not allow me to start the Mail app for five hours ...
0
votes
1answer
786 views

Can I safely remove /usr/bin/java from Mountain Lion 10.8.2?

If I do so, will something, such as a service, break?
11
votes
5answers
1k views

Will it work well to use a .dmg as an encrypted folder?

I have a folder containing files including Wills, Trusts, personal financial statements etc. Most of these files are word docs, excel spreadsheets, PDF's and jpegs. I would like to protect this folder ...
3
votes
1answer
787 views

When will I use the FileVault 2 recovery key?

I enabled FileVault 2 on my Mac, and I remember that it gave me a recovery key. When will I use this recovery key?