If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

349
votes
7answers
260k views

How do I recompile Bash to avoid Shellshock (the remote exploit CVE-2014-6271 and CVE-2014-7169)?

Given that Bash 3.2 (the version shipped by OS X) is vulnerable to the remote execution exploit known as "Shell Shock" (CVE-2014-6271 and CVE-2014-7169) how do I rebuild Bash and secure my system ...
134
votes
23answers
35k views

Is there a quick way to lock my Mac?

On Windows you can hit the keys Windows+L to lock your computer if you step away. I don't want to have to remember if sleep currently asks for a password, if there is a time out where my screen isn't ...
61
votes
2answers
67k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
52
votes
5answers
28k views

Are Macs vulnerable to the Bash shellshock bug?

Red Hat recently announced a major security-related bug in the Bash shell. Some are calling it the "shellshock" bug. Since OS X is built off of Unix, is it vulnerable to attacks that exploit this bug? ...
38
votes
6answers
123k views

How can I open a .pkg file manually?

Some applications come in .pkg files, and ask for you administrator password, even if all they do is copy the binary to /Applications. I like to have my applications in ~/Applications, and I do not ...
38
votes
11answers
2k views

Is it generally advisable to get anti-virus software for Mac OS X?

Is it worth to buy an anti-virus software for Mac OS X? I heard both opinions like "it's not possible to get a virus on Mac OS X" and "Mac OS X is also vulnerable against virus... " Which is true? ...
37
votes
4answers
1.2m views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
34
votes
3answers
43k views

How can I keep my Mac awake AND locked?

I want to leave my Mac awake overnight so it syncs 4GB of data from Dropbox. I need to prevent the machine from going to sleep because that pauses the Dropbox sync I've been using Caffeine to keep ...
31
votes
5answers
3k views

Is my Mac infected with the Flashback trojan?

I own a 2011 model of MacBook Pro with a Core i7 processor and Snow Leopard. I have found out there is a trojan horse which now controls 600,000 Macs. How can I find out if my MacBook is being ...
30
votes
3answers
2k views

How do you prepare or secure your Mac for the possibility of being stolen?

I'm using the great applicaton Prey which hopefully never has to get used, but just in case, I want to be prepared. So basically I have a request for password after sleep/screensaver enabled, but ...
28
votes
4answers
22k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
27
votes
3answers
11k views

How to securely erase an SSD drive?

I'm pretty new to SSD technology, so I don't know how it compares to hard drives when it comes to securely erasing the drive. Is it enough to run Disk Utility and erase the drive with the option ...
27
votes
1answer
921 views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
23
votes
3answers
219k views

Is the message “You must change your passcode within 60 minutes” valid / non-malware?

A few minutes ago, after unlocking my phone (iPhone 4, iOS 7.0.1) I got a dialog over the home screen: Passcode Requirement You must change your passcode within 60 minutes and it offered to ...
21
votes
4answers
11k views

HFS+ case-sensitive or case-insensitive — which type to use for the primary drive partition?

What reasons are there for choosing the case-insensitive version of HFS+ when formatting the primary drive partition? Would case-sensitive not always be the best choice?
20
votes
2answers
3k views

What potential dangers arise from a mass iOS UDID leak?

Can anyone enlighten us with what a hacker could use one (or a list of) UDID for? The leak reported September 4 of 1 million UDID's by AntiSec makes me worry. But should I? What is the worst case ...
20
votes
5answers
31k views

Is data transmitted over 3G secure?

When data is transferred from my iPhone via 3G, is it encrypted, or is it relatively simple for a hacker to read the data that's transferred to AT&T's cell tower? What about after it reaches the ...
20
votes
3answers
72k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
19
votes
7answers
1k views

How to limit my Mac's exposure to malware?

With OS X malware increasingly in the news (see the Flashback Trojan issue), is there anything that I should do to increase the security of my Mac and reduce my exposure to malware? What I'm doing ...
18
votes
1answer
54k views

Should I block incoming connections from “netbiosd”?

My (application) firewall settings are configured to block incoming connections from netbiosd. I don't recall setting this myself, and wonder what the consequences are. What are the consequences of ...
16
votes
10answers
49k views

Is there a way to password protect individual apps?

Is it possible to password protect a specific Mac application? For example, I am interested in protecting Mail because even if you cannot retrieve new emails, you still can read all the already ...
15
votes
1answer
1k views

Should I make my primary user an Administrator or not?

For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
15
votes
6answers
50k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
15
votes
1answer
7k views

How do I un-trust or remove blacklisted root CAs from mobile Safari on my iPhone or iPad?

The DigiNotar root CA has been compromised and has been blacklisted by Mozilla and Chrome. I've already un-trusted their root CA in Keychain on my OS X devices, but how can I do something similar on ...
14
votes
4answers
2k views

Tools to compress and encrypt files

I want to compress several files and encrypt them with a password if possible. Are there any build-in tools in Mac OS that provide such functionality? If not, can you recommend me a (freeware) ...
14
votes
4answers
7k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
14
votes
2answers
11k views

Where does Apple's predictive keyboard get it's “contextual” content from?

So I was playing around with the iOS 8, when I notice that upon typing "new" anywhere, the predictive keyboard suggests the term "NewTerm". I recall using this word in a tweet, so I brushed it off. ...
14
votes
1answer
239 views

Can I ensure keyboard commands don't get trapped by browser scripts?

Is it possible to tweak Safari to ensure command key combinations like ⌘H or ⌘L go to Safari as opposed to Safari's window contents? This comes up for me most often on this site because the editor ...
13
votes
5answers
6k views

Will it work well to use a .dmg as an encrypted folder?

I have a folder containing files including Wills, Trusts, personal financial statements etc. Most of these files are word docs, excel spreadsheets, PDF's and jpegs. I would like to protect this folder ...
13
votes
6answers
3k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, ...
13
votes
2answers
5k views

What user behavior is necessary to make Filevault 2 maximally secure?

Situation: Filevault 2 passwords can be stolen Passware has released the Passware Kit Forensic 11.3 which is able to steal the FileVault 2 password from the RAM by performing a DMA Attack via the ...
13
votes
4answers
75k views

Which free alternatives to Little Snitch can I use to block internet traffic per applications?

Little Snitch can block internet traffic of a particular app. Can I do something similar without (paying) Little Snitch, either by using free alternatives or configuring the OS X firewall directly?
13
votes
4answers
12k views

Is there a tool I can use to securely wipe data from iPhone, iPad, or iPod Touch?

Is there a tool or application that will securely wipe an iPhone, iPod Touch, or iPad (i.e. any iOS device?) I'm not interested in a complete wipe that would brick the device. Rather, I'd want to ...
12
votes
11answers
40k views

Can I trust Apple Store's employees with my laptop?

This might be a bizarre but crucial question, can I fully trust leaving my laptop in repairs (Genius Bar) while they have full access to it ? I recently went to the genius bar to get my display ...
12
votes
2answers
3k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
12
votes
2answers
13k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following these steps however when I run the application I ...
12
votes
3answers
10k views

Can Gatekeeper be disabled via terminal in OS X 10.8 Mountain Lion?

How can you disable Gatekeeper via Terminal Commands in OS X 10.8 Mountain Lion? I am looking to replicate the Security & Privacy preference pane selection to allow applications downloaded from ...
12
votes
2answers
2k views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
12
votes
4answers
585 views

What's a good way to wipe a hard drive for resale?

I'm selling my MacBook and would like to wipe the hard drive in such a way that the current data can't be easily recovered after I reinstall OS X. Can you recommend a free tool to help me do this? ...
12
votes
3answers
528 views

What are the risks of connecting a MacBook to an insecure wireless network?

What privacy and security risks am I exposing myself to when I connect my MacBook to an open insecure wireless network? Are there any risks that are worse or better when compared to a Windows PC ...
12
votes
2answers
2k views

Will FileVault 2 wear out my SSD faster?

I'm considering using FileVault 2 when I upgrade to Lion. Though my understanding of it is weak, it seems as though it shouldn't really increase the number of reads or writes per disk operation ...
12
votes
2answers
5k views

I was physically robbed and now can't manage my Apple ID… how can I extract my purchases?

TL;DR Since it seems obvious that at present Apple can do nothing to help me: I need some way of getting as much of my content (music/apps/contacts/etc) out of this account... what can I do? All of ...
11
votes
4answers
4k views

Does iOS 5 have a SSL security bug that got patched on iOS 6/7?

Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug. I can't find anything official about iOS 5. Does iOS 5 have the same bug? Please cite your answer.
11
votes
2answers
14k views

My MacBook was stolen: can the thief access my files without my account password?

My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
11
votes
1answer
4k views

With a firmware password set on a Retina MacBook Pro, what are recovery options?

I am considering setting a firmware password on my Retina MacBook Pro for security reasons. If I do this and later lose the password (or other such extenuating circumstances), how can the data be ...
11
votes
3answers
8k views

How secure are iCloud backups?

Are iCloud backups encrypted, both when transmitted and stored? Is it possible for someone at Apple to access any backup made to the data enter? I have heard that when apps have been pulled from the ...
11
votes
1answer
336 views

Clipboard survives a reboot. Is it secure?

I noticed that things in my clipboard survive a reboot - love it, very convenient. But I'd guess that's written to disk, and if I had physical access to your machine, I could reboot it and access the ...
11
votes
1answer
6k views

Can FileVault show the login window as 'name and password', not 'list of users'?

Normally, Mac OS X lets you choose to show the login screen as a list of users (you click to enter the password), or two text fields (you enter the username and password): But, I use FileVault 2. ...
11
votes
3answers
737 views

Can the built-in OS X “Location” feature auto select locations based on wireless networks?

My home network is very secure, but my school's wireless network is open, which makes it vulnerable to wireless sniffing (e.g. with Firesheep). I just discovered the Location feature and I think it's ...
11
votes
3answers
2k views

Hard wired link between webcam and led indicator?

In light of stories about stories about secret monitoring over laptop webcams (such as this one or this one), I wonder about the reliability of the green LED next to the camera that indicates that ...