If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
2answers
30 views

How to dump the content of keychain from the shell?

I'm testing the following command-line in the Terminal: sudo security dump-keychain -d login.keychain which I'd like to use to save all my passwords into a file. However when I run it, it keep ...
0
votes
1answer
27 views

How do you control the security of Firefox browser in Yosemite to run educational Java app?

I am trying to run the following Java applet in the following web page: http://artint.info/demos/rl/q.html However, Firefox is blocking it due to a security issue. Not sure if it's an Apple issue ...
1
vote
1answer
27 views

MAC Filtering in Internet Sharing

How can I enable MAC Filtering on my MAC OSX 10.9.4? I tried adding <key>allow</key> <array> <string>0:17:43:a3:2d:45</string> </array> to my /etc/bootpd.plist, ...
2
votes
1answer
77 views

How reliable and trustworthy are the Objective-See Security tools (KnockKnock (UI), Dynamic Hijack Scanner and BlockBlock)?

DHS found an issue Is this a false positive? Anybody else with the same message? I installed BlockBlock. What do you think about it? Do you trust those Security tools? BlockBlock (beta) ...
3
votes
1answer
65 views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
1answer
17 views

Can your information security be compromised by opening attachments in Gmail in iOS?

I know people can put virus or other dangerous programs in email attachments and send them to you, but is that just for the computer world and not tablets? I mean, if you get such an email to your ...
0
votes
0answers
25 views

How to manage the output power of WiFi network built with Internet Sharing?

I'm asking myself what is the level of radiofrequencies which are passing through me and my neighbourgs. I discovered that my Wi-Fi network is entering the appartments one floor above mine, one floor ...
0
votes
0answers
78 views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
0
votes
0answers
32 views

OSX firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OSX Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
2
votes
3answers
414 views

How can I install a single app from an unknown developer?

I am new to Mac and am trying to install a Hex Editor. Google sent me to "Hex Fiend", but, when I try opening it, I get "'Hex Fiend.app' can't be opened because it is from an unidentified developer." ...
4
votes
0answers
73 views

How to limit any devices to appear on any Bonjour/Airplay capable devices close by?

This is an issue at my school district where I work as a network admin. Right now, I could see around the list of at least 15-20 Apple TVs that is located across school buildings when I press on ...
0
votes
1answer
32 views

How to set up Mac for multiple user remote access log in and a shared network drive?

I have users who want to share a highpowered mac in a lab. It has a decent processor and a ton of RAM. They want to be able to remotely access this mac from both PC/Mac just like a user would be able ...
0
votes
0answers
41 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
15
votes
2answers
3k views

Invalid certificate after Security Update 2015-004 in Mavericks

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
1
vote
1answer
88 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
6
votes
2answers
390 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...
3
votes
2answers
67 views

Are OS X Security Updates Cumulative?

I can't seem to find a definitive answer anywhere, but are Mac OS X Security Updates cumulative? The update in question is 2015-004. I've checked https://support.apple.com/en-us/HT204659 but it ...
4
votes
2answers
699 views

What lock can secure a 4th generation Time Capsule from theft?

The 4th generation Time Capsule has a security slot at the far right of the back panel: However, the manual does not mention what kind of lock I can attach to it. What locks are compatible? For ...
1
vote
1answer
32 views

password built in an app for restricted download?

I have built an app. It's a magazine and a few brochures with rich content. I will upload it as a multi issue app. Once it's approved and available in the iTunes app store, I would like it to be ...
0
votes
0answers
15 views

How can I securely store passwords in xcode app?

I'm writing an app with Xcode using Applescript-ObjC. I'm wanting to put in some usernames and passwords to automatically check some remote servers. How can I put these login credentials in the app ...
0
votes
0answers
24 views

Any verification tricks for Mac OS X files?

Is there a good way to verify the various files in Mac OS X? Ideally, one wants to verify system files in an installed system, but right now I'm curious about verifying the Yosemite installer. If ...
1
vote
1answer
149 views

How do I encrypt an external drive with FileVault 2 in OSX Yosemite

Ok, so according to https://www.apple.com/osx/what-is/security/ I should be able to encrypt ANY external drive..."with ease" using FileVault 2. I have a brand new (empty) 2TB Fantom Drive model: ...
0
votes
0answers
48 views

Ping being hijacked?

On my Mac terminal, I typed cat /etc/resolv.conf nameserver 8.8.8.8 nameserver 8.8.4.4 and I do a dig dig www.facebook.com ; <<>> DiG 9.8.3-P1 <<>> www.facebook.com ;; ...
1
vote
1answer
95 views

iMac password stopped working, Apple Persistent State Encryption shows a recent modified date

I'm not sure if we should be worried... Mom does not change passwords for her iMac system login, nor do I, but when I went to update some software this morning, the password doesn't work, nor can I ...
1
vote
0answers
32 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. Notably, DNSSSec is a prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec ...
1
vote
1answer
31 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
0
votes
1answer
50 views

“File” NOT “App”… can't be opened because it is from an unidentified developer

got an mp3 via email from a musician friend of mine today. when i try to open it (in any app... itunes, quicktime, vlc, etc), i get this message as if it's a new Application that i just downloaded ...
0
votes
0answers
36 views

I can't find the adware to remove it [duplicate]

I have some pretty invasive adware going on right now. It is in both Safari and Chrome, so I don't believe it is an extension (I have also looked through all extensions). I have also tried searching ...
0
votes
0answers
19 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
1
vote
1answer
27 views

Safari for one user can't connect to local server via https due to new cert

This is similar to Safari can't connect to https, but is just for one single https site. Safari can't connect to my local NAS' HTTPS site anymore because it "can't establish a secure connection". ...
2
votes
1answer
72 views

Accessing iCloud passwords without a Mac

I mostly use Macs and iOS devices, so I've started using the iCloud password manager for better account security. Of course, all the world is not a Mac, but passwords are ubiquitous. When I am using ...
3
votes
2answers
58 views

What are the risks if you install an app that's not from the App Store?

On my iPhone (iOS 8.2), I installed an app that wasn't coming from the App Store. I chose to trust it because a serious news website had spoke about it, but now I'm a little bit worried of what this ...
1
vote
1answer
96 views

Security Update 2015-002 Asks To Setup Mac

I just had to install the latest Security Update from the Mac App Store and it started auto updating. Then when I completed the update (and restarted) my Mac asked me to enter in my Apple ID ...
0
votes
1answer
50 views

Mac OSX : How to protect daemon process from stopping by root/admin

I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1. The daemon I've currently can ...
0
votes
1answer
75 views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...
2
votes
1answer
138 views

Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root

I'm working on a security agent. Wherein I do not want to allow any user/admin/root to delete my security agent application normally. If user/admin/root try to delete the .app file then OS should ...
2
votes
1answer
343 views

JetDrive 725 - SHould I use TRIM enabler?

I just installed a JetDrive 725 and it is really nice! As I am using Yosemite, TRIM can not be enabled that easily, and the TRIM Enabler is needed. Now there is a certain risk when using it, as ...
0
votes
1answer
46 views

Will OS X ever install anything suspicious without my express permission?

I clicked a link (turned out to be Breitbart) that said "your Flash is not updated", despite the fact that I just installed it yesterday. The two choices were "Update" and "Ok". Strangely, there was ...
2
votes
1answer
34 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
1
vote
1answer
31 views

How to be sure my Mac is fully disconnected?

On many occasion thinking that my Mac was disconnected from any form of network (with or without wire), I discovered that in fact it was confortably chating at full speed with the rest of the world ...
0
votes
1answer
31 views

Lock computer without disabling output to external monitor

I want to display a video on an external monitor while the computer is locked (so that no one can walk up and stop the video, access my account, etc.). Can I do this in OS X? If not, are there any ...
9
votes
1answer
220 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
2
votes
1answer
109 views

Sandbox browser for safely viewing malicious websites

I'm looking for a quick and safe way to browse potentially malicious / infected websites. So far all of the products I've found are PC only. I can run a Virtual PC environment but it's a pain and I'm ...
1
vote
0answers
29 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
2
votes
1answer
28 views

Is there any way to let apple know shellshock patch download is broken?

I am trying to patch Lion (10.7.5). According to shellshocker.net, I am vulnerable to 6 out of 7 possible exploits. The download link for Lion is broken: ...
0
votes
0answers
41 views

How to update Mac OS X 10.9 keychain access

I am using Mac OS X 10.9 and I am trying to update my keychain password. I have just changed some Facebook password so that now when I log into Facebook, the password that is put by my Mac OS X system ...
3
votes
1answer
327 views

Can't remember security questions and rescue email ends with .cim instead of .com so I can't use it to reset my questions

My cousin wanted to buy something from the app store. I let her use my account to do so. It asked us to answer security questions but I couldn't remember them. So I tried to reset it but the link to ...
1
vote
1answer
105 views

Is there a security tools package for Mac OS X?

I mean a package of tools like those in the Kali Linux distribution.
1
vote
2answers
72 views

Mysteriously, a rectangle has appeared in the middle of the screen. How to get rid of it?

I have a iMac (27-inch, Late 2009) running OS X Yosemite v 10.10.2. Mysteriously, a rectangle has appeared in the middle of the screen. Proportionately, it looks like a golden section. It floats on ...
0
votes
0answers
77 views

How to lock down safari?

I'm a Linux user, but a friend comes to me with tech support questions from time to time. Generally, I refer him to the genius bar. He's getting spyware due to browsing habits, and, apparently, the ...