If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.
76
votes
16answers
7k views
Is there a quick way to lock my Mac?
On Windows you can hit the keys Windows+L to lock your computer if you step away.
I don't want to have to remember if sleep currently asks for a password, if there is a time out where my screen isn't ...
29
votes
5answers
2k views
Is my Mac infected with the Flashback trojan?
I own a 2011 model of MacBook Pro with a Core i7 processor and Snow Leopard. I have found out there is a trojan horse which now controls 600,000 Macs.
How can I find out if my MacBook is being ...
26
votes
8answers
1k views
Anti-Virus Software for Mac OS X
Is it worth to buy an Anti-virus software for Mac OS X?
I heard both opinions like "it's not possible to get a virus on Mac OS X" and "Mac OS X is also vulnerable against virus... "
What is true?
23
votes
2answers
1k views
How do you prepare or secure your Mac for the possibility of being stolen?
I'm using the great applicaton Prey which hopefully never has to get used, but just in case, I want to be prepared.
So basically I have a request for password after sleep/screensaver enabled, but ...
20
votes
2answers
1k views
What potential dangers arise from a mass iOS UDID leak?
Can anyone enlighten us with what a hacker could use one (or a list of) UDID for?
The leak reported September 4 of 1 million UDID's by AntiSec makes me worry. But should I?
What is the worst case ...
18
votes
7answers
718 views
How to limit my Mac's exposure to malware?
With OS X malware increasingly in the news (see the Flashback Trojan issue), is there anything that I should do to increase the security of my Mac and reduce my exposure to malware?
What I'm doing ...
14
votes
5answers
39k views
How can I open a .pkg file manually?
Some applications come in .pkg files, and ask for you administrator password, even if all they do is copy the binary to /Applications.
I like to have my applications in ~/Applications, and I do not ...
14
votes
2answers
3k views
How to securely erase an SSD drive?
I'm pretty new to SSD technology, so I don't know how it compares to hard drives when it comes to securely erasing the drive. Is it enough to run Disk Utility and erase the drive with the option ...
14
votes
1answer
521 views
Should I make my primary user an Administrator or not?
For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
14
votes
4answers
13k views
Is data transmitted over 3G secure?
When data is transferred from my iPhone via 3G, is it encrypted, or is it relatively simple for a hacker to read the data that's transferred to AT&T's cell tower? What about after it reaches the ...
13
votes
2answers
3k views
What user behavior is necessary to make Filevault 2 maximally secure?
Situation: Filevault 2 passwords can be stolen
Passware has released the Passware Kit Forensic 11.3 which is able to steal the FileVault 2 password from the RAM by performing a DMA Attack via the ...
13
votes
1answer
3k views
How do I un-trust or remove blacklisted root CAs from mobile Safari on my iPhone or iPad?
The DigiNotar root CA has been compromised and has been blacklisted by Mozilla and Chrome. I've already un-trusted their root CA in Keychain on my OS X devices, but how can I do something similar on ...
12
votes
7answers
17k views
Is there a way to password protect individual apps?
Is it possible to password protect a specific Mac application?
For example, I am interested in protecting Mail because even if you cannot retrieve new emails, you still can read all the already ...
12
votes
3answers
361 views
What are the risks of connecting a MacBook to an insecure wireless network?
What privacy and security risks am I exposing myself to when I connect my MacBook to an open insecure wireless network?
Are there any risks that are worse or better when compared to a Windows PC ...
12
votes
4answers
3k views
HFS+ case-sensitive or case-insensitive — which type to use for the primary drive partition?
What reasons are there for choosing the case-insensitive version of HFS+ when formatting the primary drive partition? Would case-sensitive not always be the best choice?
12
votes
3answers
6k views
Is there a tool I can use to securely wipe data from iPhone, iPad, or iPod Touch?
Is there a tool or application that will securely wipe an iPhone, iPod Touch, or iPad (i.e. any iOS device?)
I'm not interested in a complete wipe that would brick the device. Rather, I'd want to ...
11
votes
4answers
465 views
What's a good way to wipe a hard drive for resale?
I'm selling my MacBook and would like to wipe the hard drive in such a way that the current data can't be easily recovered after I reinstall OS X.
Can you recommend a free tool to help me do this?
...
11
votes
3answers
2k views
How is the System Keychain secured in OS X?
I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
10
votes
2answers
3k views
My MacBook was stolen: can the thief access my files without my account password?
My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
10
votes
4answers
893 views
Tools to compress and encrypt files
I want to compress several files and encrypt them with a password if possible.
Are there any build-in tools in Mac OS that provide such functionality?
If not, can you recommend me a (freeware) ...
10
votes
1answer
167 views
Clipboard survives a reboot. Is it secure?
I noticed that things in my clipboard survive a reboot - love it, very convenient. But I'd guess that's written to disk, and if I had physical access to your machine, I could reboot it and access the ...
10
votes
1answer
343 views
For maximum FileVault2 security, why is hibernation recommended?
Many discussions of FileVault 2 security suggest using:
sudo pmset -a destroyfvkeyonstandby 1 hibernatemode 25
Some of those discussion state that FileVault keys are stored in RAM during normal ...
9
votes
9answers
3k views
Can I trust Apple Store's employees with my laptop?
This might be a bizarre but crucial question, can I fully trust leaving my laptop in repairs (Genius Bar) while they have full access to it ?
I recently went to the genius bar to get my display ...
9
votes
3answers
274 views
Will it work well to use a .dmg as an encrypted folder?
I have a folder containing files including Wills, Trusts, personal financial statements etc. Most of these files are word docs, excel spreadsheets, PDF's and jpegs. I would like to protect this folder ...
9
votes
2answers
6k views
If my stolen iPod touch gets reset, will I receive a notification from iCloud?
My iPod touch was stolen. If the person type the wrong password 10 times, it will erase all my data. And, if that happens, will I receive the notification ("find my iPod") I requested in iCloud when ...
9
votes
3answers
449 views
Can the built-in OS X “Location” feature auto select locations based on wireless networks?
My home network is very secure, but my school's wireless network is open, which makes it vulnerable to wireless sniffing (e.g. with Firesheep). I just discovered the Location feature and I think it's ...
8
votes
2answers
2k views
Will FileVault 2 wear out my SSD faster?
I'm considering using FileVault 2 when I upgrade to Lion. Though my understanding of it is weak, it seems as though it shouldn't really increase the number of reads or writes per disk operation ...
7
votes
6answers
563 views
Simple encryption software for the Mac
I am looking for an application which would allow me to encrypt either a file or a folder. Something like right click on a file/folder, select Encrypt, give it a password and ready.
Of course, it ...
7
votes
3answers
783 views
Is the lock screen PIN secure enough when sending in for repair?
The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
7
votes
2answers
348 views
How to wipe a thoroughly secured old computer
I have an old computer of mine (the first MacBook Pro model) that I'm trying to wipe clean and repurpose. But back in the day, I was quite security conscious, and my own barriers are foiling me:
...
7
votes
2answers
1k views
How to disable single-user boot (command S)
By default, Macs are extremely insecure if somebody can get physical access, as they can simply shut it down, press the power button, hold command-S, and there, they get root access in 5 seconds.
Is ...
7
votes
2answers
1k views
Turn Wifi Off via command line
I'm sharing my internet in work and forgot to turn it off! Does anyone know how I can do it via the command line? I have SSH access but thats it. D'oh.
7
votes
4answers
318 views
What is the best option to protect our Laptop?
Because any MacBook Pro in a table can be easily pick up by thieves, and we do have always our current work there (though all backed up, by Dropbox or external HD), my question is
Should we ...
7
votes
3answers
622 views
Can Gatekeeper be disabled via terminal in OS X 10.8 Mountain Lion?
How can you disable Gatekeeper via Terminal Commands in OS X 10.8 Mountain Lion? I am looking to replicate the Security & Privacy preference pane selection to allow applications downloaded from ...
7
votes
2answers
2k views
How long does Apple provide support for Mac OS X?
I am currently using Apple 10.6 (Snow Leopard). How long will Snow Leopard be supported for? Does Apple provide an end-of-life policy in writing?
I have read that Apple tends to only provide security ...
7
votes
2answers
245 views
How does Apple's Power Nap interact with File Vault?
If a machine is periodically waking up to check for updates with Power Nap, does this also mean the disk encryption keys are always in RAM? If so, this makes a DMA attack against a "sleeping" Mac ...
7
votes
1answer
754 views
Hard wired link between webcam and led indicator?
In light of stories about stories about secret monitoring over laptop webcams (such as this one or this one), I wonder about the reliability of the green LED next to the camera that indicates that ...
6
votes
4answers
215 views
How to know if I can rely on an app to keep my password?
How can I know if an app of an unknown author (like gTasks) is reliable for me to give my mail password to use it?
6
votes
3answers
701 views
How secure is Mac OS X's security?
My friend's MacBook Pro was recently stolen. Fortunately, it was protected with a password. How secure is the built-in protection ?
Can thieves access the data on the hard drive, and at what ...
6
votes
6answers
5k views
Encrypting/protecting Time Machine backup drive?
How do you guys secure/protect your Time Machine backup drive? Even though it's an external drive, it's still susceptible to physical theft though. What do you guys do for precautions?
6
votes
1answer
298 views
Is it possible that some hacker is logged in to my computer?
When I type w at the terminal I see myself logged in two times.
What are console and s000? Is it possible that one of these neos is actually somebody else?
6
votes
3answers
1k views
Preparing my MacBook Pro in case it is ever stolen
How might I best prepare my MacBook Pro in case it is ever stolen?
I hardened my security by flipping on FileVault (home directory encryption) and enabling the password prompt after waking from sleep ...
6
votes
1answer
2k views
With a firmware password set on a Retina MacBook Pro, what are recovery options?
I am considering setting a firmware password on my Retina MacBook Pro for security reasons. If I do this and later lose the password (or other such extenuating circumstances), how can the data be ...
6
votes
3answers
3k views
How secure are iCloud backups?
Are iCloud backups encrypted, both when transmitted and stored?
Is it possible for someone at Apple to access any backup made to the data enter?
I have heard that when apps have been pulled from the ...
6
votes
1answer
1k views
Does FileVault encrypt my BootCamp partition?
If I enable the new FileVault feature in Mac OS X Lion, will it also encrypt my existing Windows bootcamp partitions? (And/or any new bootcamp partition I create?)
Update: If not, where can I get ...
6
votes
1answer
1k views
Can I disable the iPad's “helpful” password/number shadowing?
I use my iPad for lectures. During this, it is connected to a Big Screen that the students can see. Every now and then, I forget to turn off the "auto lock" feature meaning that I have to wake it up ...
6
votes
1answer
3k views
Can FileVault show the login window as 'name and password', not 'list of users'?
Normally, Mac OS X lets you choose to show the login screen as a list of users (you click to enter the password), or two text fields (you enter the username and password):
But, I use FileVault 2. ...
6
votes
1answer
2k views
Natively written packet sniffer / inspector for OS X
I am looking for a packet sniffer / inspector which runs natively on OS X (Cocoa) and not with some sort of compatibility layer like X.
Ideally I am looking for an application with the following ...
6
votes
2answers
720 views
How would Find my iPod work on a locked iPod Touch?
In order for an iPod Touch (which has Find My iPod enabled) to let Apple's servers know where it is located (e.g. via Wi-Fi positioning), I believe it needs to transmit the location over Wi-Fi.
Let's ...
6
votes
3answers
1k views
What is Apple's policy for supporting security updates on older versions of OS X?
Does Apple have a policy regarding how long they will continue to release and support security fixes for each OS X release? I've looked around the Internet, and found some forum posts that claim ...
