If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

2
votes
2answers
139 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
0
votes
1answer
28 views

Hardening OSX 10.11

I'm following the instruction, on hardentheworld.org to harden my OS X 10.11. When I send the following command: sudo defaults write /System/Library/LaunchDaemons/com.apple.mDNSResponder ...
1
vote
1answer
18 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
1
vote
1answer
1k views

impact and removal of XcodeGhost

Unfortunately, I installed some of the apps mentioned on this list, and confirmed that the versions I have are still compromised by XcodeGhost: ...
0
votes
0answers
22 views

Making local web server (nginx) accessible from local network

Previous versions of OS X had a Sharing setting called "Web sharing" I think, which opened port 80 so the local Web server could be accessed from other computers in the same local network. This ...
27
votes
1answer
921 views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
1
vote
2answers
43 views

Does FileVault 2 encrypt keys in sleep mode?

I have an early 2015 13" MacBook Pro running OS X 10.11.2 and I'm considering enabling FileVault 2. I realize that the disk is always encrypted, even when the machine is in use and only parts of it ...
4
votes
1answer
5k views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
2answers
3k views

Is my Mac partition secure if it has FileVault 2 but the Boot Camp partition is unencrypted?

With a Macbook Pro Retina running OS X 10.10 and Boot Camp Windows 7, my Mac HD is encrypted with FileVault 2 and the Boot Camp partition is unencrypted. Does this weaken the security of the Mac HD ...
1
vote
1answer
16 views

What determines the relevant version of OpenSSL in a given network connection?

My own system is I think fully "up to date" as far as Apple security updates through the App Store, but the version of OpenSSL installed on my system is 0.9.8zg, a version that was current during the ...
8
votes
1answer
7k views

Is the lock screen PIN secure enough when sending in for repair?

The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
7
votes
7answers
23k views

3rd-party SSDs: enabling TRIM without disabling kext signing

Before reading this long question, please note that it is mostly outdated in light of the more recent developments reflected by the top answer. Unfortunately Apple has decided to create kext signing ...
7
votes
2answers
2k views

How do I automatically connect to a VPN when using Wi-Fi in OS X? [duplicate]

The FBI issued a warning regarding hotel Wi-Fi access points, and any other public access point. I'd like to make sure my apple device always uses a VPN when using Wi-Fi. That way even if an attacker ...
7
votes
6answers
40k views

How to disable automatic wifi connection?

When OSX already knows an wifi network it auto connects to it, but when it doesn't know the wifi network it will auto connect depending of the setting of the "ask to join" toggle setting in system ...
0
votes
0answers
32 views

Security issue on my Mac

I have recently installed kaspersky internet security 2015 on my macbook pro, when I managed to update some applications from the Mac app store it required entering the password, BUT when I entered it ...
3
votes
2answers
131 views

My computer has no admin user

In system preferences, under users, standard is written under my name and there is no admin. When i try to change preferences it asks for admin name and password to unlock it but my login password ...
6
votes
2answers
151 views

How can I create a user that can login through SSH but not on the local desktop in MacOS X El Capitan?

I would like to have a user account in my MacOS X El Capitan system which is limited to login through SSH. I do not want that user to be able to use the system through any other means, especially not ...
13
votes
6answers
3k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, ...
0
votes
1answer
55 views

How (in)vulnerable is OS X to encryption ransomware?

These days, malicious software seems to be infecting Windows computers, encrypting their data against their will, and asking for a Bitcoin ransom in exchange for the encryption key. In order for ...
5
votes
1answer
206 views

How to enforce sandbox rules for the particular app?

I wrote an sandbox specification file (inspired by files from /usr/share/sandbox and manuals like this) and now I can launch some app in sandbox with sandbox-exec $path_to_rules ...
3
votes
1answer
40 views

How to ensure Slack runs safely in sandbox?

For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless ...
0
votes
1answer
96 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
1answer
55 views

OS X management profiles / root certificate

My father asked me to sort out some things on his MacBook. He's recently left his company where he used his laptop on the company servers/IT system whilst he was there. At some point in the past he ...
1
vote
1answer
34 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security ...
0
votes
1answer
49 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
2answers
3k views

iPhone 6 stolen. Did I accidentally cancel my pending data erase by removing account from iCloud too soon?

I lost my iphone 6 maybe 2 hours ago and proceeded to do some damage control by accessing the Find My iPhone feature on iCloud. In the following order in the span of maybe 10 minutes, I turned the ...
1
vote
3answers
111 views

Is my Macbook safe?

So, I own a macbook but I'm unsure whether I need an antivirus software with real-time scanning capability or not. I don't have flash or Java enabled in my browser (using safari). I've configured my ...
0
votes
0answers
22 views

Should a MacBook emit EMF fluctuations when wifi and bluetooth are turned off?

I have a couple of MacBooks. Both have SSD drives. Using a Trifield EMF meter with radio/microwave capability, if I hold the meter near the laptop (where I understand the wifi antenna is located), I ...
1
vote
1answer
2k views

Someone made a FaceTime call with my number

My husband told me that he received a FaceTime call from my number but he missed the call. I never called him and I don't have any outgoing calls in my phone or anything. Is my Apple ID compromised?
1
vote
1answer
1k views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
3
votes
1answer
48 views

Safe to allow students to access Terminal.app in a shared environment?

Background: We have a lab of Macintosh computers, all running 10.10.3 currently, that are for classroom instruction. Students typically use their own login/password via Active Directory to log in to ...
0
votes
1answer
39 views

What is Apple's policy for supporting security updates on older versions of iOS?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each iOS release? I observe that many people complain about performance issues with iOS ...
0
votes
0answers
43 views

Adobe Acrobat Reader DC / Acrobat Pro Data Submission TLS Issues

This question is somewhat related to this one (http://apple.stackexchange.com/questions/201310/how-to-activate-tls-1-0-in-adobe-acrobat-on-mac), as I've seen the same behavior in both Adobe Reader DC ...
-1
votes
1answer
31 views

Is a .sparseimage file with a strong password safe?

I have created a .sparseimage file of my Home folder on my 2009 iMac running OS 10.11.2 and have chosen a 17 character password which https://www.grc.com/haystack.htm notes that against an Offline ...
1
vote
1answer
95 views

Is there any way to run Network Link Condition from a Standard User account?

There is a known issue in Network Link Conditioner where if you install it in the normal way (Xcode > Open Developer Tool > More Developer Tools > Install Hardware Tools) it will run from an Admin ...
7
votes
1answer
1k views

I want to make an Apple ID, but someone has already used my email to create their own. How do I kick them out completely?

Since this person has used my email as their login, I was able to reset the password since it was listed as the primary email. Unfortunately this person has set their own security questions and ...
1
vote
2answers
2k views

Trust this computer - what is shared?

Apologies if this has been asked before, but when you trust a computer, what data is shared? I'm on iOS 8 and have been plugging my personal phone into my work PC for charging. I click "trust" ...
0
votes
0answers
18 views

Can Keychain use the same credentials for multiple sites?

I'm working in an enterprise environment in which one password is used across a number of different websites. Changing my password is painful, because it has to be re-entered for each site. Too many ...
-1
votes
0answers
27 views

iOS: how does app verification through network work

I'm new to iOS development (but not to development in general). I started with Xcode 7.2 and my iPhone running iOS 9.2. Since the development account is not necessary anymore, i didn't purchase it; ...
0
votes
0answers
9 views

Can a backup HD be erased despite it NOT being able to be “unmounted”

An external portable HD simply stopped working [no longer recognised by my Mac] so I took it back for warranty replacement. He couldn't read or "unmount" it either [whatever that means] so I just said ...
2
votes
4answers
14k views

How to I protect my jailbroken iPhone/iPod Touch/iPad?

People always say, "Jailbreaking can cause security problems." That might be true, but in some instances, you just need to jailbreak it. How can I protect my iPhone and my data when it is jailbroken? ...
7
votes
1answer
4k views

Password protect removal of apps on iOS

I have had instances of people deleting my applications (purposedly or unpurposedly) and it's a real annoyance to get them back, plus you lose all of your data. Is there a way to password protect the ...
0
votes
1answer
45 views

Will changing your Apple ID password affect a pending remote erase request?

I had my iPhone stolen a few days ago so naturally I tried to do a remote erase. However, the device has been offline since it got stolen so the erase is still being requested. I'm thinking of ...
1
vote
1answer
111 views

How can my iPhone status change to online if it was locked when stolen

My iPhone 6s was stolen a few days ago, however because I was running out of data I switched off my mobile data earlier. When I got home I tried to track my phone and lock it using Find My Phone, ...
1
vote
1answer
268 views

How to get the hash linked to a GeneratedUID in El Capitan?

Trying to find the GeneratedUID in OS X still works (see example below): dscl localhost -read /Search/Users/<username> | grep GeneratedUID | cut -c15- But entering the following into the ...
1
vote
1answer
126 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
4
votes
2answers
84 views

How to suppress transient display of passwords on an iPhone?

Once you have defined a passcode to unlock an iPhone, and for every application asking a password, when waiting for a password an iPhone makes a transient display of any character you type. It is ...
4
votes
2answers
2k views

My iPhone is protected by password, is it possible for the thief to restore factory setting?

I quickly activated lost mode in find my iPhone. I worried that the thief managed to restore factory setting before I do that. The thing is before I put lost mode, I disable the 3G dataplan following ...
1
vote
2answers
2k views

OS X 10.9: where are password hashes stored

I think on previous versions of OS X, password were stored in the /etc/shadow file. Nevertheless, this file doesn't appear to exist in the later versions of the operating system - specifically OS X ...
1
vote
1answer
45 views

Installing Adobe Reader without granting full administrative privileges

I agree with the OP of the question How can I open a .pkg file manually? that it is not so nice to grant administrative privileges to software that you do not trust "completely". The following ...