If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

7
votes
0answers
176 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
34 views

Manipulate incoming HTML data

My ISP, injects JavaScript code into every website I visit. Is there a way to filter all incoming traffic in OS X and remove that injected code?
2
votes
0answers
94 views

What type of encryption does iOS 8 use for Bluetooth?

I know that iOS 8 encrypts Bluetooth connections: https://www.apple.com/br/privacy/docs/iOS_Security_Guide_Oct_2014.pdf https://support.apple.com/en-us/ht3647 What I don't know is what kind of ...
2
votes
0answers
454 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
2
votes
0answers
115 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
2
votes
0answers
37 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
24 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
2
votes
0answers
47 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
2
votes
0answers
2k views

How to unlock iTunes account when prompted for my old e-mail address

This question was locked in an older post, however there was no resolution to the problem. I had a similar issue and was able to resolve it in the following manner with the help of the Account ...
2
votes
0answers
230 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
2
votes
0answers
115 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
0answers
320 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that ...
1
vote
0answers
20 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
1
vote
0answers
22 views

Is there any way to run Network Link Condition from a Standard User account?

There is a known issue in Network Link Conditioner where if you install it in the normal way (Xcode > Open Developer Tool > More Developer Tools > Install Hardware Tools) it will run from an Admin ...
1
vote
0answers
123 views

Trim Enabler w/disabled kext signing - is it possible to get warning of or track source of kext installs? - security with kext-signing disabled

The goal is to track when kexts are installed and determine whence kexts came. For instance TRIM is disabled for 3rd party drives in OS X Yosemite. To use a utility like Trim Enabler one must disable ...
1
vote
0answers
96 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
1
vote
0answers
197 views

Mac preventing loading Java site

I am trying to administer my Western Digital MyBookLife home network drive, using the Java based admin console provided by WD. The console is a web application served up from the drive itself. ...
1
vote
0answers
11 views

securing boot process against port access but not full physical access

Is it possible to secure a Mac Mini (2014) for use in an scenario where users have access to the ports but not full physical access to the computer's internals? I need to be able to disable cd boot, ...
1
vote
0answers
54 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
1
vote
0answers
17 views

User permissions prevent me from loading the Security & Privacy settings — how do I fix this?

I can't seem to load the System Preferences > Security & Privacy settings pane. I inadvertantly changed admin settings on my machine and since then I've been unable to access my documents and ...
1
vote
0answers
163 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
1
vote
0answers
176 views

My iPhone got stolen and appears offline

Okay, so I lost my iPhone 4s last night and it appeared as offline immediately upon signing on to Find My iPhone. I placed it on Lost Mode right away. I got an email that my Apple ID password got ...
1
vote
0answers
122 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
1
vote
0answers
63 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
1
vote
0answers
81 views

Printer can write into laptop folder

Well that was surprising. And a little alarming. I got a new multifunction printer, a Canon MG7120. It is connected wirelessly to my home local area network. I installed the latest drivers from ...
1
vote
0answers
4k views

Updates: Mavericks 10.9.2 + Critical Security Update → no reboot

Update On an iMac running Mavericks 10.9.0, I just selected within App Store the 2 last OS updates: Critical Security Update (version 1.0) OS X Update Combined (version 10.9.2) These 2 updates ...
1
vote
0answers
334 views

what does installd do in privacy setting?

there is a installd icon in the setting->accessibility->privacy. it can be seen in the screenshot Any ideas what it is for?
1
vote
0answers
94 views

Automounting & fix permissions for home folder on encrypted sparse bundle?

For security on a shared machine, I've moved my entire home folder to an encrypted sparse bundle disk image. I then set my User settings home folder to the image. But along the way, I believe ...
1
vote
0answers
41 views

How to display the remaining time that the device will be locked for?

I locked my iPad by accident after upgrading to iOS 7 and noticed that it no longer displayed the remaining time that the device will be locked for. Is there any way to enable this?
1
vote
0answers
156 views

How many tries on iTunes Security Questions

I folgot the answer to one of my security questions and now, for the first time in years, I need to answer them to buy music from my iPod. Now, I know I can change my questions, but I would really ...
1
vote
0answers
121 views

Applying Filtering on NAT'd Packets NetBSD (pf.conf)

Is there a way to filter packets after applying NAT? What I am trying to do: Apply NAT to packets going to some host, but block packets with a specific port. I have tried a few things but nothing is ...
1
vote
0answers
31 views

Enforcing firewall (native or 3rd-party)

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
0answers
1k views

Do Java security settings in Mountain Lion cause java.lang.ExceptionInInitializerError?

In a nutshell, I have a java app that crashes in java.lang.ExceptionInInitializerError and I'm looking to see if my OS/Java settings might be causing this error. I cannot change the security settings ...
1
vote
0answers
179 views

entered wrong password while switching users, now can't switch, log out, or sleep?

I attempted to use the fast user switching menu to switch to a different account on my mac (it's a new Macbook Pro with OS 10.8.2, but I migrated users and settings from my old mac). I misremembered ...
1
vote
0answers
90 views

Facebook Photo Verification on iPad's Safari

I work with a social media company and recently experienced something very vexing at a live event. We have visitors sign in temporarily on iPad kiosks for registration purposes to their Facebook ...
1
vote
0answers
214 views

Do I have malware? Mysterious connection made by app

I have Little Snitch installed. I use an app [that shall remain nameless in case this is a false alarm]. I was recently reviewing connection attempts in Little Snitch, and it claims that [this app] ...
1
vote
0answers
4k views

How do I configure a VPN in Lion?

I've tried to configure VPN in Lion (both L2TP and PPTP), but it never connected successfully. The same VPN works fine in Windows 7 and the iPad and other mobile devices, so I think it could be a ...
0
votes
0answers
33 views

How to update Mac OS X 10.9 keychain access

I am using Mac OS X 10.9 and I am trying to update my keychain password. I have just changed some Facebook password so that now when I log into Facebook, the password that is put by my Mac OS X system ...
0
votes
0answers
34 views

How to lock down safari?

I'm a Linux user, but a friend comes to me with tech support questions from time to time. Generally, I refer him to the genius bar. He's getting spyware due to browsing habits, and, apparently, the ...
0
votes
0answers
80 views

Apple ID password vs iCloud password - better to be the same or different?

I have too many passwords to track on too many devices. With my apple devices & services, it would be easier for me if both my iCloud and Apple ID passwords were the same. Should this be ok or is ...
0
votes
0answers
19 views

“wants to make changes” dialogue

Suppose I want to run an application I have downloaded and I am prompted with the following dialogue. If I enter my username and password, being user that has administrator privileges, and press ...
0
votes
0answers
17 views

Security camera app

I have been looking for a security camera app that can record videos upon motion and save them to my camera roll, but unfortunately I've only found some that take photos and /or serve as an ip cam for ...
0
votes
0answers
123 views

Someone else registered my e-mail as their Apple ID

Someone has opened an account with an Apple ID in a domain that I own. I did not open it. I am absolutely sure I did not. It is {my name}@{my surname}.com. So needless to say, I want the Apple ID ...
0
votes
0answers
16 views

Connections From Apps That Are Not Running On Yosemite

I have Little Snitch installed on my mac. It detects spurious connections to and from the internet and allows you to decide whether to allow the connection or not. Since installing Yosemite I have ...
0
votes
0answers
124 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
0
votes
0answers
45 views

How did a process with an url as a name executed at my macos?

Is it some sort of chrome malfunction? - The process seems inactive, it has "http://www.imore.com/, ..." as the name, with a lego-like plugin icon, a default icon I suspect it might have been an ...
0
votes
0answers
580 views

Blocked sign-in attempt to Google Account

This morning I had an email in my inbox from Google saying "We recently blocked a sign-in attempt to your Google Account (Date & Time: Saturday, January 10, 2015 3:01:26 AM UTC Location: Oxford, ...
0
votes
0answers
49 views

Package installs fail as Gatekeeper seems broken

For some reason Gatekeeper in OS X seems to be broken. Every time I try to install software I get: the package was signed with a certificate that has expired. However, when looking at the ...
0
votes
0answers
30 views

Is it possible to NOT password protect certain apps on iPhone?

I have several apps that I use a lot and have to key in security code to use each time. One of the most frequently used is a birdwatching app used out in the field. I have resorted to turning off ...