If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
1answer
25 views

Hardening OSX 10.11

I'm following the instruction, on hardentheworld.org to harden my OS X 10.11. When I send the following command: sudo defaults write /System/Library/LaunchDaemons/com.apple.mDNSResponder ...
1
vote
1answer
17 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
0
votes
0answers
20 views

Making local web server (nginx) accessible from local network

Previous versions of OS X had a Sharing setting called "Web sharing" I think, which opened port 80 so the local Web server could be accessed from other computers in the same local network. This ...
26
votes
1answer
918 views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
1
vote
1answer
16 views

What determines the relevant version of OpenSSL in a given network connection?

My own system is I think fully "up to date" as far as Apple security updates through the App Store, but the version of OpenSSL installed on my system is 0.9.8zg, a version that was current during the ...
0
votes
0answers
32 views

Security issue on my Mac

I have recently installed kaspersky internet security 2015 on my macbook pro, when I managed to update some applications from the Mac app store it required entering the password, BUT when I entered it ...
6
votes
2answers
151 views

How can I create a user that can login through SSH but not on the local desktop in MacOS X El Capitan?

I would like to have a user account in my MacOS X El Capitan system which is limited to login through SSH. I do not want that user to be able to use the system through any other means, especially not ...
0
votes
1answer
55 views

How (in)vulnerable is OS X to encryption ransomware?

These days, malicious software seems to be infecting Windows computers, encrypting their data against their will, and asking for a Bitcoin ransom in exchange for the encryption key. In order for ...
3
votes
1answer
40 views

How to ensure Slack runs safely in sandbox?

For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless ...
0
votes
0answers
22 views

Should a MacBook emit EMF fluctuations when wifi and bluetooth are turned off?

I have a couple of MacBooks. Both have SSD drives. Using a Trifield EMF meter with radio/microwave capability, if I hold the meter near the laptop (where I understand the wifi antenna is located), I ...
3
votes
1answer
48 views

Safe to allow students to access Terminal.app in a shared environment?

Background: We have a lab of Macintosh computers, all running 10.10.3 currently, that are for classroom instruction. Students typically use their own login/password via Active Directory to log in to ...
0
votes
1answer
39 views

What is Apple's policy for supporting security updates on older versions of iOS?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each iOS release? I observe that many people complain about performance issues with iOS ...
0
votes
0answers
43 views

Adobe Acrobat Reader DC / Acrobat Pro Data Submission TLS Issues

This question is somewhat related to this one (http://apple.stackexchange.com/questions/201310/how-to-activate-tls-1-0-in-adobe-acrobat-on-mac), as I've seen the same behavior in both Adobe Reader DC ...
-1
votes
1answer
31 views

Is a .sparseimage file with a strong password safe?

I have created a .sparseimage file of my Home folder on my 2009 iMac running OS 10.11.2 and have chosen a 17 character password which https://www.grc.com/haystack.htm notes that against an Offline ...
0
votes
0answers
18 views

Can Keychain use the same credentials for multiple sites?

I'm working in an enterprise environment in which one password is used across a number of different websites. Changing my password is painful, because it has to be re-entered for each site. Too many ...
-1
votes
0answers
27 views

iOS: how does app verification through network work

I'm new to iOS development (but not to development in general). I started with Xcode 7.2 and my iPhone running iOS 9.2. Since the development account is not necessary anymore, i didn't purchase it; ...
0
votes
0answers
9 views

Can a backup HD be erased despite it NOT being able to be “unmounted”

An external portable HD simply stopped working [no longer recognised by my Mac] so I took it back for warranty replacement. He couldn't read or "unmount" it either [whatever that means] so I just said ...
1
vote
2answers
43 views

Does FileVault 2 encrypt keys in sleep mode?

I have an early 2015 13" MacBook Pro running OS X 10.11.2 and I'm considering enabling FileVault 2. I realize that the disk is always encrypted, even when the machine is in use and only parts of it ...
0
votes
1answer
44 views

Will changing your Apple ID password affect a pending remote erase request?

I had my iPhone stolen a few days ago so naturally I tried to do a remote erase. However, the device has been offline since it got stolen so the erase is still being requested. I'm thinking of ...
1
vote
1answer
108 views

How can my iPhone status change to online if it was locked when stolen

My iPhone 6s was stolen a few days ago, however because I was running out of data I switched off my mobile data earlier. When I got home I tried to track my phone and lock it using Find My Phone, ...
1
vote
1answer
126 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
1
vote
1answer
45 views

Installing Adobe Reader without granting full administrative privileges

I agree with the OP of the question How can I open a .pkg file manually? that it is not so nice to grant administrative privileges to software that you do not trust "completely". The following ...
0
votes
0answers
38 views

Changing security questions

i have 15$ in my iTunes account and whenever I try to buy something, it says I have to answer security questions, but I do not remember any of them. So when I try to reset my security questions, it ...
0
votes
2answers
22 views

Second password for SSH-only access

TL;DR: I want to have a simple password to unlock my computer with physical access and a complex password to connect over ssh. This, using the same account. I'm looking for a solution to manage ...
0
votes
0answers
23 views

System Preferences saving where you last clicked?

I was wondering if this behaviour is present on anyone else's Macbook. Every time I've set up a new fresh install, I check that all the Sharing preferences are disabled one by one, and I leave it ...
0
votes
0answers
25 views

What causes loginwindow USER_PROCESS/END_PROCESS entries in Console?

I've noticed a lot of this under my Console when I logged into my admin account tonight (I do regular internet stuff from the standard). Dec 2 21:25:41 [Name's]-MacBook-Pro loginwindow[1650]: ...
0
votes
1answer
95 views

Issue with receiving Apple ID account change notification emails

I was changing the password and recovery key to my Apple ID tonight. Every other time I've done this, I receive a notification email for both password and recovery key changes and then another ...
0
votes
0answers
24 views

Time Machine not restoring properly, System Preferences not saving or malware?

Yesterday, I wiped the drive on my Macbook Pro and reinstalled OS X 10.11.1 using Internet Recovery on my home wifi network (a Netgear router that had just set up before I reinstalled with my sister's ...
0
votes
1answer
32 views

Full, encrypted, point-in-time Mac OS X (including data) backup and restore employing Drobo as backup-storage device?

Summary I want to restore any of the OS and data files my Mac OS X computers to any previous state I "save" (aka "backup"), so I can revert back to a known-working software state when a change causes ...
4
votes
2answers
84 views

How to suppress transient display of passwords on an iPhone?

Once you have defined a passcode to unlock an iPhone, and for every application asking a password, when waiting for a password an iPhone makes a transient display of any character you type. It is ...
0
votes
1answer
43 views

mDNSResponder - incoming connection from “[name of my Macbook]'s-macbook-pro.local”

As I logged into my admin account to set some things up on my Macbook (I surf using a standard account), I noticed via my third-party firewall application, Little Snitch, that mDNSResponder had ...
2
votes
1answer
75 views

Removing Air Watch without removing WiFi/Exchange profiles

Is it possible to do either of the following: Remove Air Watch from an iOS device without deleting WiFi/Exchange profiles Backup the profile and restore it after removing Air Watch?
1
vote
1answer
98 views

Can I reset firmware password via Find My Mac?

I would like to find out if I can set a new firmware password via Find My Mac? I already have my MacBook added but the firmware lock is active and I have no idea what it is, I've tried all ...
1
vote
0answers
65 views

Upgrade/Move OpenSSL in OS X to alternate Apache version/folder location

We are running a Mac Apache web server. It currently has OpenSSL/0.9.7l running on it which is not compatible with SHA2. OpenSSL is running within a special user-interface called iTools 9; iTools is ...
0
votes
1answer
58 views

How to create/write file under /usr in OS X 10.11 [duplicate]

I was going to compile a php extension using phpize, but it reported some files not found. I googled and found some solutions, In OS X 10.9, we can make a symbol link from ...
0
votes
2answers
257 views

Os X El Capitan: will System Integrity Protection patch .AppleSetupDone exploit/hack?

I'm unsure whether this was possible in OS X Yosemite, however OS X Mavericks has a security flaw in which : Should a individual have physical access to a computer, he need only launch in Single User ...
1
vote
1answer
153 views

El Capitan: will System Integrity Protection defence stop sandbox program from accessing System.log?

OS X El Capitan apparently has this new security feature known as System Integrity Protection, which limits root access to an array of files including: /system, /bin, /sbin, /usr, /etc, /tmp and /var. ...
0
votes
2answers
86 views

How can I reinstall OS X without a valid App Store connection?

I have a Mid 2009 MacBook Pro that was used by a "less than responsible" user. As such, it seems to have become infected with malware that rewrites all SSL certificates. These certificates cannot be ...
0
votes
2answers
258 views

Is iPhone being remotely accessed?

On a consistent basis, I try to close any open apps to save battery life. I close the apps by double clicking the home screen button & then swipe the apps upward on the touchscreen to close. ...
0
votes
1answer
58 views

List failed login attempts on Yosemite

I want to see if somebody has tried to log in on my computer, which is running Yosemite. I am primarily interested in tracking ssh log in attempts, as well as tracking people physically typing ...
1
vote
1answer
35 views

Application Password

I'm looking for a simple application that password-protects selected applications. Can anyone help please? Just bought an Apple device after several years using Android.
1
vote
1answer
276 views

Keychain won't reveal forgotten password; how to fix?

Skype automatically logs me in by getting the password from my login keychain. This means I haven't typed the password in a long time, and I have forgotten it. When I select Skype (or anything else) ...
2
votes
1answer
38 views

Logging in automatically without removing the password

Is there any way to have OSX log in automatically in a certain account when starting up, without asking for the password, while preventing remote (or even local network) connections without password? ...
1
vote
1answer
34 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security ...
1
vote
1answer
264 views

How to get the hash linked to a GeneratedUID in El Capitan?

Trying to find the GeneratedUID in OS X still works (see example below): dscl localhost -read /Search/Users/<username> | grep GeneratedUID | cut -c15- But entering the following into the ...
3
votes
1answer
83 views

How to find out why OS X is requesting privilege elevation for an app?

I occasionally see the standard OS dialog stating something like "Application-so-and-so wants to make changes to your system. Enter Administrator credentials to authorize." How would I find out ...
0
votes
0answers
48 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
13
votes
6answers
3k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, ...
1
vote
1answer
93 views

Is this a security flaw for Other, Others, Others… accounts having 0 (root) UID?

When running this command dscl . -list /Users UniqueID, I get duplicate UID, for the Other, Others, Others... accounts, which is the same UID root uses. daemon 1 Guest 201 ...
0
votes
1answer
126 views

What are Apple's Update and End-Of-Life policies in 2015?

I have a couple of Macs that are required to be held back from upgrade. The requirements are due to (1) use of earlier iPhone/iPad devices, (2) operational requirements, like a particular piece of ...