If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

4
votes
0answers
68 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
3
votes
0answers
373 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
3
votes
0answers
152 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
3
votes
0answers
72 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's network;...
3
votes
0answers
66 views

Manipulate incoming HTML data

My ISP, injects JavaScript code into every website I visit. Is there a way to filter all incoming traffic in OS X and remove that injected code?
3
votes
0answers
210 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
3
votes
0answers
160 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
84 views

CVE-2016-4631 and Older Devices

tldr; How far back does the TIFF exploit affect iOS and OS X legacy versions? I've found conflicting information regarding how far back the recently reported image exploit can affect both iOS and OS ...
2
votes
0answers
51 views

How do I verify a certificate when installing it on iOS?

I am installing a self-created certificate authority SSL cert onto a modern (iOS-9.3.2, iPod6) iOS device. It is self-signed and obtained over an untrusted transport. In normal, e.g. desktop, ...
2
votes
0answers
34 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
2
votes
0answers
40 views

Does the installer give root privileges to applications?

I wish to avoid giving administrative privileges to applications that I do not completely trust. It seems like a reasonable design to me that if I install an application using a pkg file (or something ...
2
votes
0answers
144 views

Gray globe (earth) appears after restart for no apparent reason - might something be wrong?

I restart my MacBook Air OSX 10.8.5 every few days as a routine habit. Twice in the last few months it has come back with the globe (earth) image displayed for 20-30 seconds (I believe it was flashing)...
2
votes
0answers
33 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
2
votes
0answers
121 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
2
votes
0answers
508 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
464 views

What type of encryption does iOS 8 use for Bluetooth?

I know that iOS 8 encrypts Bluetooth connections: https://www.apple.com/br/privacy/docs/iOS_Security_Guide_Oct_2014.pdf https://support.apple.com/en-us/ht3647 What I don't know is what kind of ...
2
votes
0answers
306 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny file-write-...
2
votes
0answers
537 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
2
votes
0answers
64 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
32 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
2
votes
0answers
4k views

iPhone 5S stolen, name was changed in Find my iPhone and inforrmation request about factory reset behavior

I got my 5S stolen Thursday and today it was back online in Find My iPhone. First, I would like to know if there's a way to know if the iPhone is in locked mode or not. Next, from the time it got ...
2
votes
0answers
3k views

How to unlock iTunes account when prompted for my old e-mail address

This question was locked in an older post, however there was no resolution to the problem. I had a similar issue and was able to resolve it in the following manner with the help of the Account ...
2
votes
0answers
236 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
2
votes
0answers
340 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that Gmail'...
1
vote
0answers
26 views

Not receiving push notifications for iCloud 2-factor authentication

I followed the instructions on this sixcolors.com blog post to disable and re-enable 2-factor authentication on my iCloud account in order to upgrade to the "newer" version. However, now when I ...
1
vote
0answers
83 views

This Apple ID has been disabled for security reasons — more info?

I recently got a "This Apple ID has been disabled for security reasons" message on all my apple devices. I've have since performed the obligatory password reset process and everything seems to be in ...
1
vote
0answers
76 views

How do I obtain a list of all the passwords stored in Keychain Access?

My MacBook was stolen. I have a new Mac with all the data restored from my AirPort Time Capsule, including all the passwords that were on the stolen MacBook. Is there way to list all the passwords ...
1
vote
0answers
40 views

Dump iCloud keychain in Terminal

I failed to find the path to iCloud keychain to do just security dump-keychain - the iCloud keychain isn't shown when I try security list-keychains. What is the path to that keychain (or, if it cannot ...
1
vote
0answers
19 views

Security Settings Don't Stick

I've been trying to change my security settings to let apps downloaded from anywhere open. Or to at least open the app I want. Neither seem to be working. I don't get the verification to open the ...
1
vote
0answers
45 views

SSH keybased authentication using smartcard

I originally posted this on Information Security but am hoping to attract an answer here since this is OSX specific. So I'm fairly new to more secure forms of key management, I've been used to ...
1
vote
0answers
43 views

Authenticity of password prompts

This article on osxdaily.com discusses an issue in Mavericks and Yosemite where the user is prompted for passwords "at random times". In the article, the following is claimed. [The scenario where ...
1
vote
0answers
339 views

My iPad is sending out spam emails, what could be the cause?

My iPad is sending out emails through gMail titled for example CCE29032016_00050. All emails begin with CCE followed by a number. They are sent from myself to myself. I noticed that it is my iPad ...
1
vote
0answers
220 views

How to encrypt existing notes on iOS 9.3?

Now that iOS 9.3 finally supports encrypted notes, the problem's come up as to exactly how I'm supposed to encrypt my 300+ existing notes. Until now I've been storing my notes locally on my phone, ...
1
vote
0answers
38 views

Why would a codesigned app suddenly start triggering “… not allowed assistive access.” error?

Environment: OS X 10.10.5 Background: I have an applescript I've been using for past year or so. I use it for copying a password from my password manager (1Password, in my case), and it then pastes ...
1
vote
0answers
32 views

Is TRIM enabled for FileVault encrypted disks?

On a stock MacBook Pro without FileVault, TRIM should be enabled out of the box according to wikipedia. Infosec experts warn against TRIM in conjunction with full disk encryption. When ...
1
vote
0answers
74 views

Password resets itself after each reboot

Macbook with OS X 10.11.3. No iCloud account, regularly updated via softwareupdate -i -r && brew update && brew cask update. Rather restrictive firewall(ing) via LittleSnitch and pf. ...
1
vote
0answers
26 views

OS X Internet not working w/o TOR after messing with security settings?

So I was setting up the security settings on my Macbook using this guide when suddenly something's gone quite wrong (before going into details I should notice that all the traffic on my system is ...
1
vote
0answers
148 views

Upgrade/Move OpenSSL in OS X to alternate Apache version/folder location

We are running a Mac Apache web server. It currently has OpenSSL/0.9.7l running on it which is not compatible with SHA2. OpenSSL is running within a special user-interface called iTools 9; iTools is ...
1
vote
0answers
59 views

The website “secure-web.cicsco.com” requires a client certificate

My dad got the message in the subject line in Safari today, with a list of certificates and "cancel" and "continue" buttons. He chose "continue". I gather from a discussion at Apple's site that it's ...
1
vote
0answers
349 views

Disable 'open this page in [Application]' prompt (iOS)

I currently have an application called App Icon, which allows me to theme my iOS device without being jailbroken, by having web bookmarks on my homepage that open the other application that I want. ...
1
vote
0answers
166 views

Malware attack freezes Safari—prevention or detection?

Several times in the past few months, a web link has popped up a box alleging that malware has been detected and I should click OK to let them fix it. I'm not stupid enough to even click anywhere ...
1
vote
0answers
212 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
1
vote
0answers
42 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is 5b:dc:2a:b4:cd:bf:e8:e3:...
1
vote
0answers
174 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
0answers
74 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
0answers
715 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
0answers
1k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
1
vote
0answers
147 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
1
vote
0answers
248 views

Trim Enabler w/disabled kext signing - is it possible to get warning of or track source of kext installs? - security with kext-signing disabled

The goal is to track when kexts are installed and determine whence kexts came. For instance TRIM is disabled for 3rd party drives in OS X Yosemite. To use a utility like Trim Enabler one must disable ...