If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
44 views

Allow Apps won't unlock in Security & Privacy - Yosemite

When I was running Mountain Lion I selected "Allow apps downloaded from: Anywhere" in Security & Privacy. I updated to Yosemite a few days ago. The update set that back to: "Mac App Store and ...
0
votes
0answers
22 views

Is there a way to selectively enable “Text Message Forwarding”?

Yosemite's new "Text Message Forwarding" feature is a great convenience for communicating with friends and colleagues who use SMS for texting, but it has the potentially to fatally* undermine 2-factor ...
0
votes
1answer
33 views

Is my password vulnerable to recovery using my Apple ID?

For some time, in Mavericks, I had an option, which I had disabled, in Users & Groups > Password to reset the password using Apple ID This option vanished after a migration, under Mavericks, to ...
0
votes
0answers
30 views

How can I get iOS devices to accept a self-signed WPA2 certificate?

I'm setting up a Cisco/freeradius based WPA2 wireless network for about 100 users. Everything works dandy, but I cannot get iOS devices to accept the TLS certificate I'm using on freeradius even ...
1
vote
0answers
42 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
2
votes
1answer
27 views

Bulk removing Wifi networks from an iOS device

This article, "What we give away when we log on to a public Wi-Fi network", demonstrates how dangerous it is for you to turn on Wi-fi on your phone. It advertises the name of every network it has ...
0
votes
0answers
31 views

Is my machine always visible to Bluetooth while Handoff is enabled?

Since installing Yosemite, my machine shows up (at least on my iPhone) as visible to Bluetooth. This is appears to be the result of enabling Handoff. If that's the case, at what point in the Handoff ...
1
vote
1answer
372 views

How do I disable Bonjour visibility after Yosemite install?

Since upgrading to Yosemite (from Mavericks) my MacBook Pro (Retina mid-2014) advertises itself on Bonjour (with "whats-my-name"). It was not visible in this way prior to Yosemite, and I have no ...
-1
votes
1answer
133 views

Why is my MacBook visibile on Bluetooth after Yosemite install?

Since upgrading to Yosemite (from Mavericks) my MacBook Pro (Retina mid 2014) is visible (in "advertising mode") on Bluetooth (at least to my iPhone). It was not visible prior to Yosemite, and there's ...
2
votes
1answer
182 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...
1
vote
1answer
53 views

Turning off Require Password on a filevault enabled MacBook Air 2011

I am trying to use the product form soma-zone.com called RedHand. The only catch is you must have Require Password turned off in the Security Preferences Pane. RedHand won't start until it is turned ...
0
votes
1answer
80 views

How do I reset/change my security questions on my Apple Id

I have an Apple ID and I know my password, but forgot the answer to the security question. I tried to change it at appleid.apple.com but we don't have a link to reset it. See the picture. Please help ...
6
votes
2answers
4k views

Best way to disable SSLv3 in Chrome for Poodle vulnerability

Fixing Chrome for the Poodle vulnerability seems to be more difficult on OSX than the other Operating Systems This seems to work... Exit chrome Open Applescript editor Enter this script do shell ...
1
vote
1answer
93 views

Someone made a FaceTime call with my number

My husband told me that he received a FaceTime call from my number but he missed the call. I never called him and I don't have any outgoing calls in my phone or anything. Is my Apple ID compromised?
4
votes
1answer
193 views

Someone used “Find my Iphone” to wipe my phone. Can I use the same app to find their location?

This morning someone decided via either a prank or otherwise to log in to my apple id, and use Find my Iphone app to lock and then erase my phone, then leaving me the ominous message "This is what u ...
0
votes
0answers
27 views

Turn off the security setting of apple store acount

How can i turn off the security setting of an apple store account so i can sign into it from a foreign country ? Because once i try to sign into it it prevents me and send me a warning Email about ...
0
votes
1answer
33 views

How to enable “Show message on Lock Screen” with Script

So, In Mavericks, you can set text to be displayed on the lock screen by checking the box: System Preferences > Security & Privacy > General > "Show a message when the screen is locked", then ...
3
votes
2answers
318 views

Have Apple announced whether the “Shellshock” bash update will be applied automatically via the App Store patching mechanism?

As described here, I'm technically vulnerable to the "Shellshock" bug in my shell. I'm running Mavericks. Apple has released an update to bash that addresses this issue. As per the example test ...
1
vote
1answer
73 views

Has my computer been hacked

I'm trying to find out if someone has hacked my computer. In case I get the following message in my Terminal window: "Last login: Tue Sep 30 02:02:18 on console" does that mean a person has logged in, ...
0
votes
1answer
3k views

is there a patch against “Shell Shock” for my system MacOS 10.6.8 bash version 3.2.48(1)-release (x86_64-apple-darwin10.0) [duplicate]

I already run the following and I get "vulnerable" Mac cysunza$ env x='() { :;}; echo vulnerable' bash -c 'echo hello' vulnerable hello I read the post about it but appears to me that his is just for ...
3
votes
3answers
2k views

Apple Shellshock patch for 10.6?

I am running a small HTTP server (Apache) off my Mac mostly as a hobby. If it becomes compromised it isn't the end of the world but it is something I would certainly like to prevent. I set up a ...
3
votes
1answer
76 views

Are there any disadvantages to using the brew version of bash for /bin/sh?

I have patched bash & sh with the latest patches as described here, but now have some issues with some things in my dotfiles (particularly the loading of rvm and some custom functions and ...
-2
votes
1answer
139 views

Should bash shells be replaced with the new patched version? [duplicate]

This question has generated a lot of downvoting on three SE sites so let me try to explain where it comes from. The magnitude of the bash "shellshock" problem may turn out to be larger than anything ...
4
votes
1answer
176 views

Will recompiling bash to avoid Shellshock cause more harm than good

I wasn't particularly worried about Shellshock until I learned that a malicious DHCP server may be able to exploit my DHCP client to run arbitrary code on my system. It's not clear to me whether Macs ...
1
vote
1answer
40 views

Prevent Mac from connecting to WiFi networks with same name as preferred network

How can I prevent OS X (and ideally iOS devices as well) from connecting to a WiFi network which has the same name as one of my preferred networks, but isn't the same network? For example say my ...
3
votes
6answers
1k views

Can bash be replaced entirely in OS X?

Because of CVE-2014-6271 and CVE-2014-7169 on OS X I was wondering: can bash be replaced entirely by another, non-affected shell (eg dash or others)?
4
votes
1answer
340 views

How to mitigate Bash risk while waiting for a patch (sans a recompile)?

This is related to How do I recompile Bash to avoid the remote exploit CVE-2014-6271 and CVE-2014-7169?, Are Macs vulnerable to the Bash shellshock bug? and Are Bash, Bourne, and Korn shells compiled ...
3
votes
1answer
217 views

My MacBook Air is automatically connecting to a password protected network that's not mine!

I'm starting to think I've been hacked because my Macbook Air is frequently jumping to a neighbors password protected network on its own! I see the network in the "preferred network" list and I don't ...
46
votes
5answers
27k views

Are Macs vulnerable to the Bash shellshock bug?

Red Hat recently announced a major security-related bug in the Bash shell. Some are calling it the "shellshock" bug. Since OS X is built off of Unix, is it vulnerable to attacks that exploit this bug? ...
334
votes
7answers
235k views

How do I recompile Bash to avoid Shellshock (the remote exploit CVE-2014-6271 and CVE-2014-7169)?

Given that Bash 3.2 (the version shipped by OSX) is vulnerable to the remote execution exploit known as "Shell Shock" (CVE-2014-6271 and CVE-2014-7169) how do I rebuild Bash and secure my system ahead ...
0
votes
1answer
80 views

Can I turn off my Guest account and still use Find My Mac?

I understand that turning on Find My Mac also turns on a "Guest" account (in "login only" mode). For a variety of reasons, I would prefer not to have an enabled Guest account at all. Does Find My ...
1
vote
1answer
110 views

Why is a secure erase 'not necessary' for SSD's?

I'm about to trade in a 2010 MacBook Pro with an SSD. However, I'm unable to do a Secure Erase from the recovery disk (as I used to do with mechanical hard drives before selling or giving away a ...
4
votes
4answers
918 views

Is there a way to find out when a USB flash drive has been last used (on any computer)?

I have a USB flash drive and I believed someone else may have plugged it in their computer and copied some files. Using my Mac, how do I know when was the last time my usb flash drive was plugged ...
1
vote
0answers
147 views

Stolen mac locked automatically or by thief?

My MacBook Pro was stolen a few days ago. I have a lock on the start up screen requiring a password anytime the laptop comes out of sleep mode, however when I attempted the "Find My Mac" app, it says ...
2
votes
0answers
28 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
0
votes
1answer
28 views

Confusion with sudo and multiple local accounts

I am having difficulties figuring out why certain things are much more complicated on a mac terminal than a standard linux shell.. Say I have two local accounts, one administrator called "adm" and a ...
0
votes
1answer
28 views

Apple Mail is trying to use certificate and won't send without

I created an account on a website and they installed a certificate on my machine for authentication. I'm not sure how this technically works but the certificate is somehow linked to my GMail address. ...
0
votes
0answers
36 views

Where are Internet Recovery system files stored?

I have just erased all data on my MacBook Air hard drive and reinstalled OS X using Internet Recovery. As you already know, recent Mac computers have Internet Recovery system which enables users to ...
2
votes
2answers
608 views

Can someone who's gained access to my iCloud account prevent me from receiving text messages?

Can someone use my iCloud account to prevent me from receiving messages on my devices from specific people? I can get calls from a particular person but no text messages for a few days now.
0
votes
1answer
27 views

iPhone lock time not showing showing all options

On my iPhone running iOS 7, I can only set auto-lock times of up to one hour. My son's can have an auto-lock time of up to three hours, and there's no obvious difference between our two phones. ...
10
votes
2answers
1k views

Where does Apple's predictive keyboard get it's “contextual” content from?

So I was playing around with the iOS 8, when I notice that upon typing "new" anywhere, the predictive keyboard suggests the term "NewTerm". I recall using this word in a tweet, so I brushed it off. ...
0
votes
0answers
384 views

Keeps promoting me for icloud password when i enter it it's incorrect and the account is locked

Every so often on my phone it pops up saying "enter icloud password" when I enter it correctly it says the password is incorrect so I go onto I forgot and enter my icloud email address and answer by ...
1
vote
2answers
72 views

How long is it safe to use iOS 7? [closed]

I have an iPhone 4. I would like to know: since iOS 8 is not going to work on the iPhone 4, when should I be worried about the security of my device, since iOS 7 will eventually cease to be supported ...
4
votes
2answers
570 views

Where is the “Send all traffic over VPN connection” setting in OSX 10.9 Mavericks?

I'm attempting to change the settings of a Cisco IPSec VPN connection which was set up through OSX's built in VPN client in system preferences. The VPN functions as expected, allowing me to access ...
-2
votes
2answers
35 views

Password-restricting access to any application on an iOS device?

Ok I have a iPhone and I would like to know if there a way to restrict access, via a password, to any application installed on the device? For example: if I wanted to access a specific game or the ...
0
votes
2answers
294 views

Why do I need to “bypass” 169.254/16?

In my MacBook's networking proxy settings I have "169.254/16" among the list of domains for which to bypass proxy settings: What purpose does this serve and why do I need it? Can I get rid of it?
1
vote
1answer
88 views

How do I disable “iTunes Home Sharing”?

Whenever I launch iTunes, I see my computer appears listed among those offering Bonjour services (e.g., by iStumbler), with an entry for "iTunes Home Sharing" even though I have unchecked "Share my ...
0
votes
0answers
21 views

Why do my account settings (seem to) change after migration?

Prior to a recent Mavericks-Mavericks migration using Migration Assistant I had additional password security related options which are absent after the migration. In Security & Privacy > General ...
0
votes
1answer
54 views

OS X 10.9.4 - How can I limit the number of failed login attempts?

With OS X 10.9.4, how can I limit the number of failed local login attempts? I'm looking for something similar to the Windows Account Lockout Threshold mentioned here: ...
1
vote
2answers
894 views

Does apple automatically sign out all connected devices when you change the apple id password?

Yesterday, I got a bunch of emails from Apple, sent to one of my unused gmail addresses (which still has forwarding to my regular one). I do NOT have an appled ID associated with that address, but it ...