If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

2
votes
1answer
28 views

Stolen iPhone: what is the security risk?

Unfortunately today my iPhone 6 Plus was stolen from my pocket on the streets of Sao Paulo. I did not have cellular data turned on. I had Touch ID and a 4 digit number lock in place. How much data ...
0
votes
1answer
26 views

iPhone security question

I think I made a rather stupid mistake My iPhone battery was getting old, so I went to a local repair shop to get it replaced. It's not an Apple Store, just a couple of guys who fix PCs and do odd ...
0
votes
0answers
7 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
2
votes
1answer
47 views

On my iPad, how can I tell if a website is secure on Safari?

Does the web address have to be in green, or is it secure if it's in black?
1
vote
2answers
32 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...
1
vote
1answer
17 views

Sharing folders between 2 users

I just downloaded a virtual box VM which I will be sharing with my wife. Both my wife and I have accounts on our mac. I copied the downloaded VM into /Users/Shared/MyNewVM Then I went into System ...
12
votes
2answers
3k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
1
vote
0answers
40 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
1answer
41 views

Does Facebook's “find friend” algorithm get data from the iOS app?

When I download a Facebook app on my smartphone (e.g. iPhone), what data does Facebook then access? Names? Telephone numbers?
-3
votes
1answer
94 views

Is there a SDK or private framework that can access iMessage contents from an iOS app on a non-jailbroken phone?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", on StackExchange Security, linked below. I wish to know the internal details of how ...
0
votes
0answers
19 views

Mail Failed to Load After Changed Gmail Password or Enable TFA

This happens after either you change your gmail password or enable Two Factor Authentication. Anyone faced this before and how did you resolve this? Thanks.
6
votes
1answer
354 views

Is an Erased, Stolen iPhone, Safe on iCloud?

My wife's iPhone was stolen, and because our iCloud is connected via Family Sharing, I immediately put it on stolen mode and then erase mode to remove all the data once it came online. I checked ...
0
votes
0answers
25 views

How Can Web Sites (Ad Networks) Connect to Different IPs?

I use Safari on my Mac, and I also use Little Snitch (Awesome program, but it can get in the way, from time to time). When I connect to some sites (not always the same ones), it tends to rat out the ...
1
vote
3answers
46 views

How does a Google iOS app save and restore active accounts across app deletion?

On an iOS 8 device, I installed Google Hangouts and upon first launch, it pre-populated an account that was previously associated with a different, and long ago deleted, Google app. Since I had just ...
2
votes
1answer
45 views

Prevent administrator from resetting password of another administrator

I'm running Mac OS X Yosemite. There are multiple administrator accounts in my Mac. I don't want an administrator to snoop into another administrator's account. Is there any way I can prevent an ...
1
vote
0answers
24 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
0answers
39 views

Configuring `fail2ban`

I’ve noticed some attempts to log into my Mac via SSH: 30/07/2015 13:30:59.274 sshd[52991]: error: PAM: authentication error for root from 59.47.0.150 via 192.168.1.68 30/07/2015 13:31:00.217 ...
1
vote
1answer
27 views

Yosemite Security Defaults

I've just made a fresh Yosemite install and noticed two strange security defaults Firewall is disabled User is created as an admin account It is hard for me to imagine how a disabled firewall is a ...
1
vote
1answer
18 views

What are the recommended steps to take before selling an iPhone? [duplicate]

I "lost" my iPhone at work, could not find it anywhere. I reported it lost, and got another through the insurance. A month later, I found it hiding in a file in one my desk drawers. The phone is just ...
1
vote
1answer
197 views

What happens after a stolen Mac was remotely wiped?

A Macbook Air was stolen from us last month and we immediately activated "Find my Mac" and a few minutes later we requested it to be wiped (through iCloud). Today, 1 month later, we received an email ...
0
votes
0answers
40 views

A Macbook was stolen and returned: How can I detect the changes that were made on the OS?

My Macbook Pro running OS X Yosemite and a Windows 7 Bootcamp was stolen a month ago when I left it sitting in Frankfurt airport. I had used FindMyiPhone to add a lock and wipe it but it never came ...
2
votes
0answers
27 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
0
votes
0answers
27 views

Can I use our SSL certificate for digital mail signatures?

We have a GoDaddy SSL Certificate that we use on our OS X Server for securing some web sites and the Mail Service running on it. Our company website FQDN is one of the 5 named on that certificate but ...
0
votes
1answer
33 views

How do i know if install isn't malicious

I just got my first osx device (a late 2012 mac mini), the last owner said he did a fresh install of yosemite. Is there a way to check that he didn't install any mallware/spyware?
1
vote
2answers
46 views

Guest Account as Thief Trap in case of losing MacBook

One week ago my MBPro has been stolen, and unfortunately no "Where's My Mac" like's helped. My idea for securing my next MacBook is to create Password-free/guest-like account in case of another bad ...
1
vote
1answer
35 views

Empty Firmware Password?

I was wanting to reveal the EFI password on my Mac using this in the Terminal: sudo nvram security-password but instead of outputting hex data, it gives me this: nvram: Error getting variable - ...
1
vote
1answer
74 views

Keychain Issue - Yosemite

Apologies for the vague title - I couldn't really think of any other way to sum up my problem. I've been trying all day to work my own way around this issue but I've ultimately hit a brick wall so ...
0
votes
0answers
69 views

“Delete references & files” with keychain using security delete-keychain

I have a script that uses a keychain to store various privates keys and certificates into a certain keychain (different from login and System). I'd like to enable it to purge all the content of its ...
0
votes
0answers
17 views

Is CUPS (Common Unix Printing Service) a security issue?

Is this service, using port 631 being open create any security risks ? And by this I mean a way for hackers to somehow compromise a system by injecting some type of code to elicit a connection or ...
1
vote
1answer
31 views

Earphone security risk

Can plugging public earphones in our iPhone 5's audio jack pose any security risk? Can our data (pictures, videos) be accessed? How often one can try a unknown earphone into iPhone 5c's audio jack in ...
0
votes
0answers
30 views

Mac mini 2007 (Core 2 Duo) with OS X Lion - better OS options?

I have a Mac mini 2007 (Core 2 Duo) running OS X Lion 10.7.5. It has a 32 bit EFI and does not officially support any newer version of OS X. After a long time, I'm now concerned about not having ...
-1
votes
0answers
19 views

I see this answer a lot about securing a Jailbroken device, but can't find any answers on how to do it

I see this answer around a lot. But where is the links or information on how to do it? Every time I Google it in sections, it takes me to the same general answer(s). "secure a jailbroken phone by ...
3
votes
1answer
193 views

How to prevent storing the WiFi password on the recovery partition?

I always wondered how my Mac could connect to the internet when the recovery partition is booted and my main system partition is locked (filevault2). Some googling revealed today (e.g. here, here, ...
-2
votes
1answer
33 views

iCloud login issue [closed]

I have lost my @me.com password and answer to 2nd security question. I have tried many ways but all suggestions ends at verify via email which I have lost password to access and 2nd is answer the ...
0
votes
1answer
55 views

Where does OS X get defaults from in Guest User Web access Parental Controls?

I did not put these here, I don't know where they came from. WHOIS by IP seems to indicate they are from Amsterdam? (149.154.175.50 copy-pastable for anyone who wants to check)
0
votes
0answers
12 views

Missing Items From KeyChain Dumps

I'm using the process outlined here to export my OS X keychain items to .csv files. After getting many blank .csv files, I adapted the script using this guy's suggestion. After making this change, ...
0
votes
2answers
98 views

How can I upgrade Mac OS without the administrator password?

I recently received an old iMac secondhand. I have no way to reach the original owner. I am trying to upgrade the OS software, but the prompts demand the administrator's name (which is auto-filled) ...
2
votes
1answer
85 views

What information is accessible through iCloud? Can the administrator on my home PC access these files?

Recently my texts were accessed somehow and I'm not exactly sure how this person did it. We share the same PC at home but have separate user accounts with passwords on them. My iCloud and iTunes also ...
2
votes
0answers
48 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
0
votes
0answers
24 views

How to prevent AutoOpen feature for apps

Several vendors provide their drivers with AutoOpen feature: image file contains single application SomeApp usually installs drivers or connection manager. I've discovered how it works: Mac OS X ...
0
votes
0answers
44 views

Messages bug on iOS 8.2, how to clean or restore Messages or iOS?

I have a serious security bug on iOS 8.2 I am able to reproduce. This bug is well known and within Messages. When I start Messages the application displays a white screen for a few seconds and exit ...
0
votes
1answer
31 views

What is the worst thing that will happen if I do not update iTunes to its latest version?

Okay, I like iTunes, and it is a wonderful software. I run it on Windows, unfortunately sometimes when I do update to minor version updates, the whole windows panel of iTunes becomes unresponsive and ...
2
votes
1answer
88 views

No secure ad-hoc network with Yosemite?

iMac (late 2009) OSX 10.10.3 iPads (a 1 and a 2) iOS 8.? I am a retired IT engineer playing at being a DJ/VJ. That means I'm often in a room with lots of folks with cells and iPads. Before ...
0
votes
0answers
25 views

App Name not Displayed Correctly

I've created an AppleScript, saved it as an app and run it by launchd. For an undetermined reason, the app's name in Preferences > Security & Privacy > Privacy is displayed with a long string of ...
1
vote
0answers
40 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
2
votes
2answers
103 views

How to prevent Safari saved passwords being seen with Mac password?

In Safari on OS X via Safari/Preferences/Passwords/ it is possible to view all saved passwords in plain text by entering the Mac password. I want to use a different password. Is this possible? I ...
3
votes
0answers
64 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's ...
-2
votes
3answers
139 views

Killing discoveryd process affected by malware [closed]

There was a malware attack on my system. It has affected the discoveryd process. I do a grep to find the process id for related discoveryd processes. I get the following - _mdnsresponder 6115 ...
9
votes
2answers
252 views

How to prevent keychain passwords being seen with iPhone passcode?

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone. Is it possible to still be able to use Keychain passwords and ...
1
vote
1answer
40 views

OS X Server safely facing WAN and LAN?

Our OS X Server serves our company DNS, web and mail with an external IP address to the Internet. It currently does not have a local address on the LAN and thus cannot be used e.g. for software update ...