If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

4
votes
0answers
792 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
4
votes
0answers
63 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
3
votes
0answers
70 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's ...
3
votes
0answers
57 views

Manipulate incoming HTML data

My ISP, injects JavaScript code into every website I visit. Is there a way to filter all incoming traffic in OS X and remove that injected code?
3
votes
0answers
199 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
3
votes
0answers
149 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
34 views

Does the installer give root privileges to applications?

I wish to avoid giving administrative privileges to applications that I do not completely trust. It seems like a reasonable design to me that if I install an application using a pkg file (or something ...
2
votes
0answers
96 views

Gray globe (earth) appears after restart for no apparent reason - might something be wrong?

I restart my MacBook Air OSX 10.8.5 every few days as a routine habit. Twice in the last few months it has come back with the globe (earth) image displayed for 20-30 seconds (I believe it was ...
2
votes
0answers
282 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
2
votes
0answers
32 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
2
votes
0answers
114 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
2
votes
0answers
109 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
2
votes
0answers
425 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
413 views

What type of encryption does iOS 8 use for Bluetooth?

I know that iOS 8 encrypts Bluetooth connections: https://www.apple.com/br/privacy/docs/iOS_Security_Guide_Oct_2014.pdf https://support.apple.com/en-us/ht3647 What I don't know is what kind of ...
2
votes
0answers
292 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
2
votes
0answers
492 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
2
votes
0answers
62 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
32 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
2
votes
0answers
4k views

iPhone 5S stolen, name was changed in Find my iPhone and inforrmation request about factory reset behavior

I got my 5S stolen Thursday and today it was back online in Find My iPhone. First, I would like to know if there's a way to know if the iPhone is in locked mode or not. Next, from the time it got ...
2
votes
0answers
3k views

How to unlock iTunes account when prompted for my old e-mail address

This question was locked in an older post, however there was no resolution to the problem. I had a similar issue and was able to resolve it in the following manner with the help of the Account ...
2
votes
0answers
234 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
2
votes
0answers
340 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that ...
1
vote
0answers
42 views

Authenticity of password prompts

This article on osxdaily.com discusses an issue in Mavericks and Yosemite where the user is prompted for passwords "at random times". In the article, the following is claimed. [The scenario where ...
1
vote
0answers
139 views

My iPad is sending out spam emails, what could be the cause?

My iPad is sending out emails through gMail titled for example CCE29032016_00050. All emails begin with CCE followed by a number. They are sent from myself to myself. I noticed that it is my iPad ...
1
vote
0answers
129 views

How to encrypt existing notes on iOS 9.3?

Now that iOS 9.3 finally supports encrypted notes, the problem's come up as to exactly how I'm supposed to encrypt my 300+ existing notes. Until now I've been storing my notes locally on my phone, ...
1
vote
0answers
26 views

Why would a codesigned app suddenly start triggering “… not allowed assistive access.” error?

Environment: OS X 10.10.5 Background: I have an applescript I've been using for past year or so. I use it for copying a password from my password manager (1Password, in my case), and it then pastes ...
1
vote
0answers
27 views

Is TRIM enabled for FileVault encrypted disks?

On a stock MacBook Pro without FileVault, TRIM should be enabled out of the box according to wikipedia. Infosec experts warn against TRIM in conjunction with full disk encryption. When ...
1
vote
0answers
42 views

Password resets itself after each reboot

Macbook with OS X 10.11.3. No iCloud account, regularly updated via softwareupdate -i -r && brew update && brew cask update. Rather restrictive firewall(ing) via LittleSnitch and pf. ...
1
vote
0answers
24 views

OS X Internet not working w/o TOR after messing with security settings?

So I was setting up the security settings on my Macbook using this guide when suddenly something's gone quite wrong (before going into details I should notice that all the traffic on my system is ...
1
vote
0answers
137 views

Upgrade/Move OpenSSL in OS X to alternate Apache version/folder location

We are running a Mac Apache web server. It currently has OpenSSL/0.9.7l running on it which is not compatible with SHA2. OpenSSL is running within a special user-interface called iTools 9; iTools is ...
1
vote
0answers
57 views

The website “secure-web.cicsco.com” requires a client certificate

My dad got the message in the subject line in Safari today, with a list of certificates and "cancel" and "continue" buttons. He chose "continue". I gather from a discussion at Apple's site that it's ...
1
vote
0answers
256 views

Disable 'open this page in [Application]' prompt (iOS)

I currently have an application called App Icon, which allows me to theme my iOS device without being jailbroken, by having web bookmarks on my homepage that open the other application that I want. ...
1
vote
0answers
148 views

Malware attack freezes Safari—prevention or detection?

Several times in the past few months, a web link has popped up a box alleging that malware has been detected and I should click OK to let them fix it. I'm not stupid enough to even click anywhere ...
1
vote
0answers
175 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
1
vote
0answers
39 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is ...
1
vote
0answers
144 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
0answers
60 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
0answers
669 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
0answers
1k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
1
vote
0answers
130 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
1
vote
0answers
509 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
1
vote
0answers
245 views

Trim Enabler w/disabled kext signing - is it possible to get warning of or track source of kext installs? - security with kext-signing disabled

The goal is to track when kexts are installed and determine whence kexts came. For instance TRIM is disabled for 3rd party drives in OS X Yosemite. To use a utility like Trim Enabler one must disable ...
1
vote
0answers
621 views

Mac preventing loading Java site

I am trying to administer my Western Digital MyBookLife home network drive, using the Java based admin console provided by WD. The console is a web application served up from the drive itself. ...
1
vote
0answers
14 views

securing boot process against port access but not full physical access

Is it possible to secure a Mac Mini (2014) for use in an scenario where users have access to the ports but not full physical access to the computer's internals? I need to be able to disable cd boot, ...
1
vote
0answers
92 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
1
vote
0answers
22 views

User permissions prevent me from loading the Security & Privacy settings — how do I fix this?

I can't seem to load the System Preferences > Security & Privacy settings pane. I inadvertantly changed admin settings on my machine and since then I've been unable to access my documents and ...
1
vote
0answers
336 views

My iPhone got stolen and appears offline

Okay, so I lost my iPhone 4s last night and it appeared as offline immediately upon signing on to Find My iPhone. I placed it on Lost Mode right away. I got an email that my Apple ID password got ...
1
vote
0answers
149 views

Printer can write into laptop folder

Well that was surprising. And a little alarming. I got a new multifunction printer, a Canon MG7120. It is connected wirelessly to my home local area network. I installed the latest drivers from ...
1
vote
0answers
5k views

Updates: Mavericks 10.9.2 + Critical Security Update → no reboot

Update On an iMac running Mavericks 10.9.0, I just selected within App Store the 2 last OS updates: Critical Security Update (version 1.0) OS X Update Combined (version 10.9.2) These 2 updates ...