If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
1answer
22 views

How do you control the security of Firefox browser in Yosemite to run educational Java app?

I am trying to run the following Java applet in the following web page: http://artint.info/demos/rl/q.html However, Firefox is blocking it due to a security issue. Not sure if it's an Apple issue ...
-1
votes
2answers
16k views

I have an iPod 5 gen, how do I view my wifi password? I've lost the wifi password [duplicate]

My iPod 5 gen is connected to wifi, I've lost the wifi password, how can I view the password on my iPod, could you please give me a step by step guide on doing this as I'm not tech savvy....
0
votes
3answers
326 views

Yosemite Login screen ignoring login after Screen Saver

This is regarding a: MacBook Pro (Retina, 15-inch, Late 2013) 2 GHz Intel Core i7 8 GB 1600 MHz DDR3 I have a managed, admin, remote account on the Mac. This is the only account on the Mac. The ...
0
votes
0answers
71 views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
1
vote
1answer
26 views

MAC Filtering in Internet Sharing

How can I enable MAC Filtering on my MAC OSX 10.9.4? I tried adding <key>allow</key> <array> <string>0:17:43:a3:2d:45</string> </array> to my /etc/bootpd.plist, ...
2
votes
1answer
73 views

How reliable and trustworthy are the Objective-See Security tools (KnockKnock (UI), Dynamic Hijack Scanner and BlockBlock)?

DHS found an issue Is this a false positive? Anybody else with the same message? I installed BlockBlock. What do you think about it? Do you trust those Security tools? BlockBlock (beta) ...
0
votes
2answers
3k views

Why do I need to “bypass” 169.254/16?

In my MacBook's networking proxy settings I have "169.254/16" among the list of domains for which to bypass proxy settings: What purpose does this serve and why do I need it? Can I get rid of it?
3
votes
1answer
59 views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
4
votes
1answer
2k views

Blocked sign-in attempt to Google Account

This morning I had an email in my inbox from Google saying "We recently blocked a sign-in attempt to your Google Account (Date & Time: Saturday, January 10, 2015 3:01:26 AM UTC Location: Oxford, ...
1
vote
1answer
17 views

Can your information security be compromised by opening attachments in Gmail in iOS?

I know people can put virus or other dangerous programs in email attachments and send them to you, but is that just for the computer world and not tablets? I mean, if you get such an email to your ...
0
votes
0answers
25 views

How to manage the output power of WiFi network built with Internet Sharing?

I'm asking myself what is the level of radiofrequencies which are passing through me and my neighbourgs. I discovered that my Wi-Fi network is entering the appartments one floor above mine, one floor ...
3
votes
2answers
76 views

What info does a Mac broadcast and how to hide it?

I want to run a Mac in the cloud as a webserver and for facilitative use. I've secured most of my used tools already, but I was wondering about the OS itself. Imagine I'm running an up-to-date ...
1
vote
2answers
2k views

FileVault security hole when used on SSDs

I just woke up to the fact that it looks like user data can be leaked when using FileVault and Migration Assistant on an SSD on a new Mac when following the default prompts. When I set up a new Mac, ...
14
votes
2answers
2k views

Invalid certificate after Security Update 2015-004 in Mavericks

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
0
votes
0answers
28 views

OSX firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OSX Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
2
votes
3answers
414 views

How can I install a single app from an unknown developer?

I am new to Mac and am trying to install a Hex Editor. Google sent me to "Hex Fiend", but, when I try opening it, I get "'Hex Fiend.app' can't be opened because it is from an unidentified developer." ...
0
votes
1answer
990 views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
33
votes
6answers
94k views

How can I open a .pkg file manually?

Some applications come in .pkg files, and ask for you administrator password, even if all they do is copy the binary to /Applications. I like to have my applications in ~/Applications, and I do not ...
4
votes
0answers
73 views

How to limit any devices to appear on any Bonjour/Airplay capable devices close by?

This is an issue at my school district where I work as a network admin. Right now, I could see around the list of at least 15-20 Apple TVs that is located across school buildings when I press on ...
0
votes
1answer
32 views

How to set up Mac for multiple user remote access log in and a shared network drive?

I have users who want to share a highpowered mac in a lab. It has a decent processor and a ton of RAM. They want to be able to remotely access this mac from both PC/Mac just like a user would be able ...
1
vote
1answer
145 views

How do I encrypt an external drive with FileVault 2 in OSX Yosemite

Ok, so according to https://www.apple.com/osx/what-is/security/ I should be able to encrypt ANY external drive..."with ease" using FileVault 2. I have a brand new (empty) 2TB Fantom Drive model: ...
0
votes
0answers
41 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
6
votes
2answers
390 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...
1
vote
1answer
83 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
3
votes
2answers
65 views

Are OS X Security Updates Cumulative?

I can't seem to find a definitive answer anywhere, but are Mac OS X Security Updates cumulative? The update in question is 2015-004. I've checked https://support.apple.com/en-us/HT204659 but it ...
4
votes
2answers
697 views

What lock can secure a 4th generation Time Capsule from theft?

The 4th generation Time Capsule has a security slot at the far right of the back panel: However, the manual does not mention what kind of lock I can attach to it. What locks are compatible? For ...
1
vote
1answer
31 views

password built in an app for restricted download?

I have built an app. It's a magazine and a few brochures with rich content. I will upload it as a multi issue app. Once it's approved and available in the iTunes app store, I would like it to be ...
0
votes
0answers
15 views

How can I securely store passwords in xcode app?

I'm writing an app with Xcode using Applescript-ObjC. I'm wanting to put in some usernames and passwords to automatically check some remote servers. How can I put these login credentials in the app ...
0
votes
0answers
48 views

Ping being hijacked?

On my Mac terminal, I typed cat /etc/resolv.conf nameserver 8.8.8.8 nameserver 8.8.4.4 and I do a dig dig www.facebook.com ; <<>> DiG 9.8.3-P1 <<>> www.facebook.com ;; ...
5
votes
1answer
2k views

Can I decrypt a dm-crypt filesystem on OS X?

I've been an Ubuntu user for years, and I just got my first Mac. One thing I haven't yet figured out is how to decrypt my encrypted filesystem on which I store my SSH and GPG keys on my flash drive. I ...
13
votes
3answers
32k views

Is the message “You must change your passcode within 60 minutes” valid / non-malware?

A few minutes ago, after unlocking my phone (iPhone 4, iOS 7.0.1) I got a dialog over the home screen: Passcode Requirement You must change your passcode within 60 minutes and it offered to ...
0
votes
0answers
24 views

Any verification tricks for Mac OS X files?

Is there a good way to verify the various files in Mac OS X? Ideally, one wants to verify system files in an installed system, but right now I'm curious about verifying the Yosemite installer. If ...
1
vote
1answer
92 views

iMac password stopped working, Apple Persistent State Encryption shows a recent modified date

I'm not sure if we should be worried... Mom does not change passwords for her iMac system login, nor do I, but when I went to update some software this morning, the password doesn't work, nor can I ...
10
votes
2answers
10k views

My MacBook was stolen: can the thief access my files without my account password?

My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
7
votes
2answers
4k views

Is iTunes required for iOS7 iPhone to trust PC with Windows 7?

Every time I connect my iPhone 5S (7.0.3, but have had this issue since 7.0 with both 5S and iPhone 4) to my computer (Latitude E6410 with Windows 7 Pro) I get prompted to Trust the computer. I trust ...
2
votes
4answers
3k views

How to get rid of booby-trapped pop ups to update flash player?

I'm coming across a malicious pop up to update my flash player. The message in the pop up: Warning! Your Adobe Flash Player version is outdated. Security risks. Please update now. I've seen this ...
0
votes
2answers
1k views

iPhone 6 stolen. Did I accidentally cancel my pending data erase by removing account from iCloud too soon?

I lost my iphone 6 maybe 2 hours ago and proceeded to do some damage control by accessing the Find My iPhone feature on iCloud. In the following order in the span of maybe 10 minutes, I turned the ...
1
vote
0answers
29 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. Notably, DNSSSec is a prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec ...
1
vote
1answer
31 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
9
votes
1answer
217 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
0
votes
1answer
49 views

“File” NOT “App”… can't be opened because it is from an unidentified developer

got an mp3 via email from a musician friend of mine today. when i try to open it (in any app... itunes, quicktime, vlc, etc), i get this message as if it's a new Application that i just downloaded ...
0
votes
0answers
36 views

I can't find the adware to remove it [duplicate]

I have some pretty invasive adware going on right now. It is in both Safari and Chrome, so I don't believe it is an extension (I have also looked through all extensions). I have also tried searching ...
0
votes
0answers
18 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
1
vote
1answer
27 views

Safari for one user can't connect to local server via https due to new cert

This is similar to Safari can't connect to https, but is just for one single https site. Safari can't connect to my local NAS' HTTPS site anymore because it "can't establish a secure connection". ...
2
votes
1answer
72 views

Accessing iCloud passwords without a Mac

I mostly use Macs and iOS devices, so I've started using the iCloud password manager for better account security. Of course, all the world is not a Mac, but passwords are ubiquitous. When I am using ...
3
votes
2answers
58 views

What are the risks if you install an app that's not from the App Store?

On my iPhone (iOS 8.2), I installed an app that wasn't coming from the App Store. I chose to trust it because a serious news website had spoke about it, but now I'm a little bit worried of what this ...
2
votes
1answer
137 views

Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root

I'm working on a security agent. Wherein I do not want to allow any user/admin/root to delete my security agent application normally. If user/admin/root try to delete the .app file then OS should ...
1
vote
1answer
96 views

Security Update 2015-002 Asks To Setup Mac

I just had to install the latest Security Update from the Mac App Store and it started auto updating. Then when I completed the update (and restarted) my Mac asked me to enter in my Apple ID ...
0
votes
1answer
49 views

Mac OSX : How to protect daemon process from stopping by root/admin

I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1. The daemon I've currently can ...
0
votes
1answer
68 views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...