If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
0answers
19 views

How to manage the output power of WiFi network built with Internet Sharing?

I'm asking myself what is the level of radiofrequencies which are passing through me and my neighbourgs. I discovered that my Wi-Fi network is entering the appartments one floor above mine, one floor ...
0
votes
0answers
17 views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
0
votes
0answers
24 views

OSX firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OSX Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
2
votes
3answers
406 views

How can I install a single app from an unknown developer?

I am new to Mac and am trying to install a Hex Editor. Google sent me to "Hex Fiend", but, when I try opening it, I get "'Hex Fiend.app' can't be opened because it is from an unidentified developer." ...
4
votes
0answers
64 views

How to limit any devices to appear on any Bonjour/Airplay capable devices close by?

This is an issue at my school district where I work as a network admin. Right now, I could see around the list of at least 15-20 Apple TVs that is located across school buildings when I press on ...
0
votes
1answer
22 views

How to set up Mac for multiple user remote access log in and a shared network drive?

I have users who want to share a highpowered mac in a lab. It has a decent processor and a ton of RAM. They want to be able to remotely access this mac from both PC/Mac just like a user would be able ...
0
votes
0answers
38 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
11
votes
3answers
2k views
+50

Invalid certificate after Security Update 2015-004 in Mavericks

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
1
vote
1answer
66 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
6
votes
2answers
377 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...
3
votes
2answers
62 views

Are OS X Security Updates Cumulative?

I can't seem to find a definitive answer anywhere, but are Mac OS X Security Updates cumulative? The update in question is 2015-004. I've checked https://support.apple.com/en-us/HT204659 but it ...
3
votes
2answers
690 views

What lock can secure a 4th generation Time Capsule from theft?

The 4th generation Time Capsule has a security slot at the far right of the back panel: However, the manual does not mention what kind of lock I can attach to it. What locks are compatible? For ...
1
vote
1answer
29 views

password built in an app for restricted download?

I have built an app. It's a magazine and a few brochures with rich content. I will upload it as a multi issue app. Once it's approved and available in the iTunes app store, I would like it to be ...
0
votes
0answers
14 views

How can I securely store passwords in xcode app?

I'm writing an app with Xcode using Applescript-ObjC. I'm wanting to put in some usernames and passwords to automatically check some remote servers. How can I put these login credentials in the app ...
0
votes
0answers
24 views

Any verification tricks for Mac OS X files?

Is there a good way to verify the various files in Mac OS X? Ideally, one wants to verify system files in an installed system, but right now I'm curious about verifying the Yosemite installer. If ...
1
vote
1answer
116 views

How do I encrypt an external drive with FileVault 2 in OSX Yosemite

Ok, so according to https://www.apple.com/osx/what-is/security/ I should be able to encrypt ANY external drive..."with ease" using FileVault 2. I have a brand new (empty) 2TB Fantom Drive model: ...
0
votes
0answers
47 views

Ping being hijacked?

On my Mac terminal, I typed cat /etc/resolv.conf nameserver 8.8.8.8 nameserver 8.8.4.4 and I do a dig dig www.facebook.com ; <<>> DiG 9.8.3-P1 <<>> www.facebook.com ;; ...
1
vote
1answer
70 views

iMac password stopped working, Apple Persistent State Encryption shows a recent modified date

I'm not sure if we should be worried... Mom does not change passwords for her iMac system login, nor do I, but when I went to update some software this morning, the password doesn't work, nor can I ...
1
vote
0answers
27 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. Notably, DNSSSec is a prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec ...
1
vote
1answer
28 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
0
votes
1answer
47 views

“File” NOT “App”… can't be opened because it is from an unidentified developer

got an mp3 via email from a musician friend of mine today. when i try to open it (in any app... itunes, quicktime, vlc, etc), i get this message as if it's a new Application that i just downloaded ...
0
votes
0answers
36 views

I can't find the adware to remove it [duplicate]

I have some pretty invasive adware going on right now. It is in both Safari and Chrome, so I don't believe it is an extension (I have also looked through all extensions). I have also tried searching ...
0
votes
0answers
14 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
1
vote
1answer
25 views

Safari for one user can't connect to local server via https due to new cert

This is similar to Safari can't connect to https, but is just for one single https site. Safari can't connect to my local NAS' HTTPS site anymore because it "can't establish a secure connection". ...
2
votes
1answer
66 views

Accessing iCloud passwords without a Mac

I mostly use Macs and iOS devices, so I've started using the iCloud password manager for better account security. Of course, all the world is not a Mac, but passwords are ubiquitous. When I am using ...
3
votes
2answers
58 views

What are the risks if you install an app that's not from the App Store?

On my iPhone (iOS 8.2), I installed an app that wasn't coming from the App Store. I chose to trust it because a serious news website had spoke about it, but now I'm a little bit worried of what this ...
1
vote
1answer
94 views

Security Update 2015-002 Asks To Setup Mac

I just had to install the latest Security Update from the Mac App Store and it started auto updating. Then when I completed the update (and restarted) my Mac asked me to enter in my Apple ID ...
0
votes
1answer
47 views

Mac OSX : How to protect daemon process from stopping by root/admin

I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1. The daemon I've currently can ...
0
votes
1answer
53 views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...
2
votes
1answer
133 views

Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root

I'm working on a security agent. Wherein I do not want to allow any user/admin/root to delete my security agent application normally. If user/admin/root try to delete the .app file then OS should ...
2
votes
1answer
271 views

JetDrive 725 - SHould I use TRIM enabler?

I just installed a JetDrive 725 and it is really nice! As I am using Yosemite, TRIM can not be enabled that easily, and the TRIM Enabler is needed. Now there is a certain risk when using it, as ...
0
votes
1answer
45 views

Will OS X ever install anything suspicious without my express permission?

I clicked a link (turned out to be Breitbart) that said "your Flash is not updated", despite the fact that I just installed it yesterday. The two choices were "Update" and "Ok". Strangely, there was ...
2
votes
1answer
33 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
1
vote
1answer
31 views

How to be sure my Mac is fully disconnected?

On many occasion thinking that my Mac was disconnected from any form of network (with or without wire), I discovered that in fact it was confortably chating at full speed with the rest of the world ...
0
votes
1answer
31 views

Lock computer without disabling output to external monitor

I want to display a video on an external monitor while the computer is locked (so that no one can walk up and stop the video, access my account, etc.). Can I do this in OS X? If not, are there any ...
8
votes
1answer
211 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
2
votes
1answer
95 views

Sandbox browser for safely viewing malicious websites

I'm looking for a quick and safe way to browse potentially malicious / infected websites. So far all of the products I've found are PC only. I can run a Virtual PC environment but it's a pain and I'm ...
1
vote
0answers
22 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
2
votes
1answer
27 views

Is there any way to let apple know shellshock patch download is broken?

I am trying to patch Lion (10.7.5). According to shellshocker.net, I am vulnerable to 6 out of 7 possible exploits. The download link for Lion is broken: ...
0
votes
0answers
40 views

How to update Mac OS X 10.9 keychain access

I am using Mac OS X 10.9 and I am trying to update my keychain password. I have just changed some Facebook password so that now when I log into Facebook, the password that is put by my Mac OS X system ...
3
votes
1answer
268 views

Can't remember security questions and rescue email ends with .cim instead of .com so I can't use it to reset my questions

My cousin wanted to buy something from the app store. I let her use my account to do so. It asked us to answer security questions but I couldn't remember them. So I tried to reset it but the link to ...
1
vote
1answer
92 views

Is there a security tools package for Mac OS X?

I mean a package of tools like those in the Kali Linux distribution.
1
vote
2answers
65 views

Mysteriously, a rectangle has appeared in the middle of the screen. How to get rid of it?

I have a iMac (27-inch, Late 2009) running OS X Yosemite v 10.10.2. Mysteriously, a rectangle has appeared in the middle of the screen. Proportionately, it looks like a golden section. It floats on ...
0
votes
0answers
55 views

How to lock down safari?

I'm a Linux user, but a friend comes to me with tech support questions from time to time. Generally, I refer him to the genius bar. He's getting spyware due to browsing habits, and, apparently, the ...
0
votes
1answer
54 views

show Apple ID or Email on iMessage

How can you change the phone Nr. from showing up on iMessage? I'd rather have it changed to my email or Apple ID instead.
0
votes
0answers
109 views

Apple ID password vs iCloud password - better to be the same or different?

I have too many passwords to track on too many devices. With my apple devices & services, it would be easier for me if both my iCloud and Apple ID passwords were the same. Should this be ok or is ...
0
votes
0answers
20 views

“wants to make changes” dialogue

Suppose I want to run an application I have downloaded and I am prompted with the following dialogue. If I enter my username and password, being user that has administrator privileges, and press ...
0
votes
0answers
20 views

Security camera app

I have been looking for a security camera app that can record videos upon motion and save them to my camera roll, but unfortunately I've only found some that take photos and /or serve as an ip cam for ...
0
votes
1answer
102 views

accessing Keychain Access from terminal - OSX

I am on OSX and using my terminal to access my Keychain Access. So I use this command security find-internet-password -a myaccount -s myservice -g and it works correctly but before I can get the ...
0
votes
1answer
110 views

Apple ID - Security questions reset

When I'm logging in my Apple ID (https://appleid.apple.com/account/home) in the tab "Password and Security" there are security questions, just like this article says: ...