If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
0answers
15 views

Is Apple System Integrity Protection (SIP) still a huge impediment for security researchers or has a work around been developed? [on hold]

I read the post below some time ago and it disturbed me enough to hold off on upgrading to OS X El Capitan. What's written below makes a lot of sense to me and I find it alarming that Apple can hide ...
9
votes
2answers
16k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
14
votes
3answers
23k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following these steps however when I run the application I ...
10
votes
1answer
23k views

Prevent my Mac from connecting to an unsecure Wi-Fi network?

How can I prevent my Macbook from connecting to non-secure wireless networks? I've ticked the "Ask to join new networks" option and removed the offending network from the Preferred Networks list in ...
0
votes
1answer
19 views

If AirPort Time Capsule is compromised, will it disclose contents of encrypted backups?

I'm thinking about using an AirPort Time Capsule for my Time Machine backup. I would certainly use encryption, but I'm still concerned about sensitive backup data sitting on a networked routing device ...
-1
votes
3answers
41 views

How to know that an iPhone that I purchased from a third-party is not JailBroken? [duplicate]

Say, I purchased an iPhone (not from Apple or any official reseller.) How do I know that it's not Jailbroken? PS. My concern is the presence of key loggers or other tracking software.
1
vote
2answers
3k views

Trust this computer - what is shared?

Apologies if this has been asked before, but when you trust a computer, what data is shared? I'm on iOS 8 and have been plugging my personal phone into my work PC for charging. I click "trust" ...
12
votes
4answers
69k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
-1
votes
0answers
19 views

iOS application vulnerability assessment tool

What tools should I use to test the security of my iOS application? What are the open source tools available to make vulnerability assessment of an iOS application?
3
votes
4answers
4k views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...
15
votes
2answers
12k views

Where does Apple's predictive keyboard get it's “contextual” content from?

So I was playing around with the iOS 8, when I notice that upon typing "new" anywhere, the predictive keyboard suggests the term "NewTerm". I recall using this word in a tweet, so I brushed it off. ...
1
vote
1answer
14 views

Can I set some sort of “never send error report” on an app that has to be force quit frequently?

RSA SecurID. OSX El Capitan. The app is frequently unresponsive when the computer comes back from sleep. Response from IT Support: "it's not meant to be left running". In other words I'm supposed to ...
0
votes
0answers
24 views

“security add-internet-password…” gets “User interaction not allowed”

I'm trying to update an old and outdated Puppet manifest to setup a new Jenkins slave on OSX El-Capitan and hit an issue which I suspect could be related to new security features in El-Capitan. The ...
0
votes
0answers
32 views

El Capitan Macbook Pro password expiration

I have just set up a brand new Macbook Pro and updated to 10.11.4. It is bound to our school Windows network and our Apple OD. My problem is that it immediately started prompting for password resets ...
0
votes
0answers
20 views

Mac crashes on Security preferences pane

I restored my machine from Time Machine last night. Whenever I go on "System Preferences > Security", the Mac crashes. There is a com.apple.preference.security.remoteservice file. Additionally, ...
0
votes
0answers
16 views

Installing from not certified developer causes system panel to crash

I want to install third party software. My security settings are very high, so I have to confirm to install software from a not certified developer (yes, the software is trustful!). This night I ...
1
vote
1answer
20 views

Verify DNSSEC being used by Safari when visiting a web site

Is there some way to verify that DNSSEC was used by Safari when visiting a web site? I'm most interested in Safari for Mac OS X. But if there is a way in iOS, that would be important as well.
5
votes
3answers
160 views

How can I report security vulnerabilities for open source OSX applications?

In the event of finding a security vulnerability in the Linux world, the procedure involved would be to report the vulnerability... ...to the developers or the maintainers of the package in a ...
7
votes
3answers
4k views

How do I deactivate my microphone and iSight for security reasons?

In OS X 10.8 it is possible to log in via SSH and get access to hardware input devices like microphone and iSight camera. Thus it is possible to remotely record audio and video of other users sitting ...
0
votes
0answers
23 views

Mac won't open programs

My problem is that whenever I try to open a programme it doesn't seem to work because of "Unidentified Developer" even though I have my security downloads set to anywhere which should be the correct ...
22
votes
5answers
12k views

HFS+ case-sensitive or case-insensitive — which type to use for the primary drive partition?

What reasons are there for choosing the case-insensitive version of HFS+ when formatting the primary drive partition? Would case-sensitive not always be the best choice?
2
votes
1answer
80 views

Does FileVault protect against ransomware?

I've already asked a question about ransomware on OS X in general. But I failed to get a response regarding whether FileVault protects against it. That is what this question is about. I'm also ...
1
vote
2answers
3k views

Is my Mac partition secure if it has FileVault 2 but the Boot Camp partition is unencrypted?

With a Macbook Pro Retina running OS X 10.10 and Boot Camp Windows 7, my Mac HD is encrypted with FileVault 2 and the Boot Camp partition is unencrypted. Does this weaken the security of the Mac HD ...
1
vote
3answers
41 views

Theft of MacBook running El Capitan: Security Implications

My MacBook running El Capitan just got stolen. It was in hibernation, and will display a password prompt on opening the lid next. Assuming a not-very-technical attacker and a solid login password, how ...
0
votes
0answers
13 views

How to disable sleep on lid close when security is set to force password on wake

I've seen many instances of solutions using pmset noidle and caffeinate -u -t 60 These don't work. When I close the lid and reopen it within 10 seconds the login prompt appears again. And I want ...
1
vote
0answers
42 views

Authenticity of password prompts

This article on osxdaily.com discusses an issue in Mavericks and Yosemite where the user is prompted for passwords "at random times". In the article, the following is claimed. [The scenario where ...
1
vote
2answers
2k views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
1
vote
0answers
26 views

Why would a codesigned app suddenly start triggering “… not allowed assistive access.” error?

Environment: OS X 10.10.5 Background: I have an applescript I've been using for past year or so. I use it for copying a password from my password manager (1Password, in my case), and it then pastes ...
2
votes
1answer
979 views

How can I have Safari on OS X remember to permanently trust a website with my current location? [duplicate]

The only options on the location privacy prompt are 'Allow' or 'Don't Allow', with a 'Remember my decision for one day' modifier checkbox as well. But what if there's a site that I trust in ...
0
votes
0answers
21 views

How can I simulate security test that causes “Error 53” and makes Touch ID broken on iPhone 5s?

I have iPhone 5s A1533 with iOS 9.1. Touch ID seems to be original, but camera module was replaced. And there is non-zero possibility that screen was replaced too. So, if it was replaced in unofficial ...
1
vote
1answer
29 views

For security reasons, what should I block with the firewall?

For security reasons, what should I block with the firewall? I'm just interested in the system itself, not additional installed software. For example, I'd like my system to synchronize the clock or ...
1
vote
0answers
140 views

My iPad is sending out spam emails, what could be the cause?

My iPad is sending out emails through gMail titled for example CCE29032016_00050. All emails begin with CCE followed by a number. They are sent from myself to myself. I noticed that it is my iPad ...
1
vote
0answers
132 views

How to encrypt existing notes on iOS 9.3?

Now that iOS 9.3 finally supports encrypted notes, the problem's come up as to exactly how I'm supposed to encrypt my 300+ existing notes. Until now I've been storing my notes locally on my phone, ...
2
votes
0answers
34 views

Does the installer give root privileges to applications?

I wish to avoid giving administrative privileges to applications that I do not completely trust. It seems like a reasonable design to me that if I install an application using a pkg file (or something ...
2
votes
2answers
439 views

OS X is repeatedly asking for login keychain password

I know this has been asked here several times, but I already checked the other discussions and tried their suggestions, but without success. Is there anything I can do instead of re-installing the ...
1
vote
1answer
36 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
1
vote
3answers
449 views

How do I create a passwordless keychain?

Just what the title says - how can I create passwordless keychain on OS X? Using 10.7.1 OS X
1
vote
2answers
46 views

How bad is it to run an ancient Mac Pro with an unsupported OSX?

I have an ancient (c. 2007?) Mac Pro running OSX 10.7.5 at work. It's so old, Software Update no longer allows me to update to a newer operating system. I use a lot of software provided by MacPorts, ...
7
votes
1answer
1k views

I want to make an Apple ID, but someone has already used my email to create their own. How do I kick them out completely?

Since this person has used my email as their login, I was able to reset the password since it was listed as the primary email. Unfortunately this person has set their own security questions and ...
0
votes
0answers
23 views

What is the origin of dubious popup “UPDATING_LOCKED_TITLE”?

I was working on a Mac running Yosemite (10.10.4) with the following applications running: XQuartz (with around 10 windows), App Store (running the last update: OS X Update 10.10.5, iTunes 12.3.3, ...
1
vote
2answers
53 views

WeTransfer email received without ever using the service

I'm am using a MacBook Pro 2012 using El Captain version 10.11.3 I received 5 minutes ago an email from WeTransfer (noreply@wetransfer.com) saying that "Your file has been sent to ***@libero.it. As ...
0
votes
0answers
13 views

Make OS X El Capitan disregard app security settings for pdfs

For some reason OS X El Capitan identifies pdf files as possible applications and wants to apply the app security settings to these. Both "Open" and dragging and dropping onto the Dock icon activates ...
3
votes
3answers
314 views

What to do about recent remote code execution vulnerability in git (on El Capitan)

The recent remote code execution bug in git looks pretty serious. The way I read this is that if I'm running a git client prior to 2.7.1, I'm susceptible to remote code execution if I use git to ...
1
vote
0answers
27 views

Is TRIM enabled for FileVault encrypted disks?

On a stock MacBook Pro without FileVault, TRIM should be enabled out of the box according to wikipedia. Infosec experts warn against TRIM in conjunction with full disk encryption. When ...
3
votes
2answers
49 views

Screen sharing with absolutely no chance of control?

I'd like to give a presentation to other people who happen to be in the same room. I'll be running various programs and would like my screen to be visible as I work. Instead of a projector, I am ...
1
vote
2answers
254 views

Is there a way to force ssh tunneling to be required for Screen Sharing

I have enabled Remote Management on a mac. Everything works fine when I connect from another mac using Apple's Remote Desktop app. However, I also want to have a client on a windows machine. In that ...
9
votes
3answers
480 views

Can I update iOS on a locked phone?

Tim Cook's open letter about the FBI's attempts to access a locked iPhone 5c have me wondering a fairly simple question that I haven't found an answer for: Assumptions: I have an encrypted iPhone ...
3
votes
1answer
28 views

Is this app doing nasty things if an unrelated calendar certificate won't verify?

I recently downloaded and used Stamp to import my Spotify playlists into Apple Music. The app instructs me to favorite an iTunes track and press "OK", in order to give the app access to an iTunes ...
3
votes
1answer
114 views

Why does JDownloader use 9666/tcp on localhost?

I found 9666/tcp to listen on 127.0.0.1 on OS X. I use version 15.3.0 > nmap -sT 127.0.0.1 ...
3
votes
2answers
387 views

Hardening Time Machine Security

In face of the news that there is now a ransomware for mac in the wild I thought about the security of my time-machine backups. Permissions First, I had a look at the permissions of the files that ...