If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
541 views

How do System Preferences remain unlocked?

To make certain modifications to system preferences, you first need to unlock the preference pane. Some of these changes are done on a system level and the command-line equivalent would need to be ...
20
votes
2answers
3k views

What potential dangers arise from a mass iOS UDID leak?

Can anyone enlighten us with what a hacker could use one (or a list of) UDID for? The leak reported September 4 of 1 million UDID's by AntiSec makes me worry. But should I? What is the worst case ...
0
votes
1answer
338 views

What is Logger.bundle?

I am running a late 2010 MacBook Air running OSX Mountain Lion with latest update. Looking around in my system folders I found a file called Logger.bundle and it's in my ...
4
votes
1answer
309 views

Is there a way to enable Java only for specific applications?

I know that it is possible to completely disable Java in OS X, and to disable its use from within a given browser. I use just one or two applications that require Java, and would like to enable it for ...
0
votes
1answer
337 views

how to track the pid of a process using mDNSResponder?

I'm searching the right way to identify which pid/process ask to mDNSResponder to resolve dns query. In other terms I want do identify which process do which dns query through mDNSResponder and in ...
6
votes
3answers
178 views

Avoiding malware in recommendations?

Occasionally, answers on this site include software recommendations. Let’s assume a "legitimate developer" pretends to have created a useful application that is (secretly) capable of doing harm. How ...
0
votes
1answer
1k views

Public Wifi spot + “Not trusted” = Danger?

Occasionally, when trying to connect to open Wifi spots (unknown to me)... ... my iPhone gives me a warning about the server identity... ... and shows a dialog that looks like a certificate ...
1
vote
1answer
489 views

How I do permanently authorize an app on my mac?

I use Clean My Mac to periodically clean out old log files and caches. Right before the clean, it asks me permission and I have to enter my password to authenticate. Is there any way I can authorize ...
0
votes
0answers
278 views

Why does OSX hang when logging in to a Windows network?

For the last couple of years I've used a MacPro + SnowLeopard at work. We have a Windows network so I have to do a network login into our domain. I sometimes login with my local Mac machine account ...
1
vote
0answers
229 views

Do I have malware? Mysterious connection made by app

I have Little Snitch installed. I use an app [that shall remain nameless in case this is a false alarm]. I was recently reviewing connection attempts in Little Snitch, and it claims that [this app] ...
2
votes
0answers
230 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
3
votes
1answer
556 views

Remember Kerberos tickets after reboot

I need to use Kerberos to connect to my network at work. The built-in kinit and ssh in Lion work fine for me. However, I need to get a new ticket and re-enter my password every time I restart the ...
9
votes
2answers
6k views

How long does Apple provide support for Mac OS X?

I am currently using Apple 10.6 (Snow Leopard). How long will Snow Leopard be supported for? Does Apple provide an end-of-life policy in writing? I have read that Apple tends to only provide security ...
4
votes
3answers
642 views

What is accessible to an attacker who has reset my administrator password?

I understand that it is possible to reset the administrator password on a Mac, allowing someone with physical access to a machine to create a new password that gives them access to all files unlocked ...
1
vote
1answer
548 views

How are passwords stored by Apple TV?

Apple TV stores a number of passwords (or some kind of credentials) needed to access services like Vimeo and YouTube, as well as the Apple IDs needed to access the iTunes Store (and the now defunct ...
2
votes
1answer
269 views

Has iOS Always had Secure Boot?

In Apple's recent iOS Security paper here http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf They speak about the Secure Boot Chain, my question is has iPhones/iPods/iPads always had ...
1
vote
1answer
243 views

What steps I should take for data security and prevent misuse of my lost iPhone?

I lost my iPhone 4 and mistakenly wiped it using "Find my iPhone" from https://www.icloud.com/. Can i even track it? It was locked by password. Now I think it's sure that I can't track my phone. I ...
4
votes
2answers
1k views

Should I use the same Apple ID for iCloud and iTunes?

Should I use the same Apple ID for iCloud and the iTunes store? My immediate assumption was "sure, of course, keep it simple", but today I read the following recommendation: One potential problem ...
4
votes
2answers
4k views

Does Remote Wipe securely wipe the contents of the drive?

With all the ruckus surrounding the Mat Honan debacle, I'm curious: When you remotely wipe a Mac, is it a secure wipe or does it just lock down the machine with a code? From the Wired article: ...
8
votes
2answers
370 views

How does Apple's Power Nap interact with File Vault?

If a machine is periodically waking up to check for updates with Power Nap, does this also mean the disk encryption keys are always in RAM? If so, this makes a DMA attack against a "sleeping" Mac ...
1
vote
1answer
1k views

Where are Safari 6.0 passwords saved?

Prior to version 6.0 Safari had no features for managing passwords distinct from the system wide support provided by Keychain: but Safari 6.0 adds a new tab in its Preferences dialog for saving and ...
1
vote
4answers
291 views

Why is Mountain Lion more security conscious?

Whenever I open an application not downloaded from the App store (or a trusted vendor) I get a warning. The warning reminds me a bit of the awful window popup that comes up every time you want to ...
0
votes
1answer
85 views

Apple Developer certificates for signing mail?

If every registered Apple developer have a certificate for signing their apps. Is that certificate also good for signing mails? And by this, I also mean if their certificate is backed up by a root ...
11
votes
1answer
4k views

With a firmware password set on a Retina MacBook Pro, what are recovery options?

I am considering setting a firmware password on my Retina MacBook Pro for security reasons. If I do this and later lose the password (or other such extenuating circumstances), how can the data be ...
3
votes
1answer
1k views

Does iCloud use client-side encryption?

I would like to know if iCloud uses client-side encryption i.e. all data is encrypted on client side and even Apple can't decrypt the data and read it. Is this true for iCloud?
2
votes
1answer
51 views

Which Apps on my Mac need security updates?

I have a lot of software installed from sources other than the Apple Store. Is there a service to check which app have security updates ready to be downloaded? Opening each one on Fridays for a ...
15
votes
3answers
41k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
2
votes
1answer
3k views

OS X 10.7 Lion: Reset master password to FileVault 2

I need to reset or delete my master password to FileVault 2. This is the password found under System Preferences > Users & Groups > Service gear > Change Master Password. It's a backup in case a ...
4
votes
3answers
388 views

iPhone passcode security

I was looking at a companies that to do repairs to iPhones to decide if I wanted to DIY or just pay someone to do it, and noticed one company that listed a service named "Remove Passcode". This was ...
7
votes
3answers
4k views

How can I verify a Lion FileVault recovery key?

I have a volume that is encrypted with OS X Lion's full-disk FileVault. When I enabled FileVault I was given a recovery key, which I wrote down. I'd like to verify that the recovery key that I wrote ...
1
vote
1answer
69 views

Are there any security vulnerabilities that would allow an attacker to change the admin password?

A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured ...
2
votes
3answers
246 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this ...
6
votes
1answer
358 views

Is it possible that some hacker is logged in to my computer?

When I type w at the terminal I see myself logged in two times. What are console and s000? Is it possible that one of these neos is actually somebody else?
4
votes
1answer
1k views

Suspicious NTPD Connection

I use Little Snitch on Mac OS X 10.6.8 and noticed a connection that seemed suspicious to me. The snitch reported ntpd trying to connect to: "$host 94.23.243.53 53.243.23.94.in-addr.arpa domain ...
30
votes
3answers
736k views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
0
votes
2answers
41 views

Which version of iOS is the May 12 security paper referring to?

Apple has published a paper on security controls in iOS, which specific version is this referring to?
15
votes
1answer
965 views

Should I make my primary user an Administrator or not?

For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
4
votes
5answers
39k views

How do I examine my iPad for malware?

Lately I occasionally get redirected to other websites when I load some news websites. It could be a banner redirect I guess, but I suspect something more sinister. The iPad is NOT jailbroken and ...
3
votes
1answer
1k views

TPM chip on iPhone

Do Apple devices ship with a TPM chip? My Mac doesn't have a TPM chip, but does an iPhone have of a TPM chip or how do I determine if the iPhone has a TPM chip or not? On my Mac, I use this command to ...
13
votes
4answers
5k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
10
votes
2answers
10k views

My MacBook was stolen: can the thief access my files without my account password?

My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
2
votes
2answers
695 views

Getting errors when trying to send something using Gmail and Mail 5

I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
1
vote
1answer
126 views

Is this a feasible security measure for my retail iPod Touches?

I'm considering using several iPod Touch devices as mobile computers in a retail setting. If I did do this, I'd have to provide some measure of security for them. I'm thinking of using the retail ...
2
votes
0answers
121 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
3answers
2k views

Can someone read messages on my locked iPhone?

I left my iPhone in a taxi cab. I locked the phone to make sure nobody finds it and makes expensive calls. But does locking the phone prevent someone from seeing the texts I am sending? What if the ...
1
vote
2answers
2k views

How to delete or untrust all root certificates in OSX?

In Keychain Access it looks like you can only untrust/delete certificates one at a time. But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time? ...
-1
votes
1answer
829 views

How do I allow a single IP to access everything on my Mac?

I tried IceFloor, but it's not working to white list all traffic from a single IP to bypass firewalls.
0
votes
1answer
264 views

Installing snort on OS X

I am on the lookout for an IDS/IPS solution for OS X 10.6. I tried compiling snort for 10.6 and I'm having trouble compiling a dependency, DAQ. The error I get is: mv -f ...
7
votes
2answers
915 views

Password protect MacBook while keeping iTunes running

So I want to prevent anyone from messing with iTunes, or anything on my MacBook actually. How can I password protect it without losing the sound?
1
vote
1answer
605 views

Forgot password to FileVault. Still got access to the machine

I just realized, that few months ago I converted my disk to FileVault. I am afraid of loosing access to my data. I still have access to the machine: login, password, administrator account. Is there ...