If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
93 views

Is this a security flaw for Other, Others, Others… accounts having 0 (root) UID?

When running this command dscl . -list /Users UniqueID, I get duplicate UID, for the Other, Others, Others... accounts, which is the same UID root uses. daemon 1 Guest 201 ...
0
votes
1answer
135 views

What are Apple's Update and End-Of-Life policies in 2015?

I have a couple of Macs that are required to be held back from upgrade. The requirements are due to (1) use of earlier iPhone/iPad devices, (2) operational requirements, like a particular piece of ...
0
votes
0answers
45 views

Advice on securely removing malware

I helping out a friend who thinks they may have malware on their machine. I don't what kind or to what extent, so I don't want to boot into the system. My question is Is there a good boot time ...
1
vote
1answer
225 views

security dump-trust-settings causes an error

When I type security dump-trust-settings I get the following two errors: Cert 1: GTE CyberTrust Global Root SecTrustSettingsCopyTrustSettings: The specified item could not be found in the keychain. ...
1
vote
1answer
1k views

Apple Watch stuck on Airplay

Today I looked at my Apple Watch and I noticed that the airplane mode was turned on. I had not activated it. When I looked on the glance with the airplane mode button, I noticed that the AirPlay ...
2
votes
3answers
265 views

How can I make my Mac accept a user password of 8 characters?

I just unboxed my new MacBook Pro, running Yosemite 10.10.5. When I went through the setup procedure, it didn't ask me what password to use for my account, and just set it to that of my AppleID. (I ...
1
vote
0answers
56 views

The website “secure-web.cicsco.com” requires a client certificate

My dad got the message in the subject line in Safari today, with a list of certificates and "cancel" and "continue" buttons. He chose "continue". I gather from a discussion at Apple's site that it's ...
1
vote
1answer
428 views

Disable System Integrity Protection on OS X running on VMware

I have an instance of OS X El Capitan running on VMWare Workstation 10. I need to make changes to /System and therefor have to disable System Integrity Protection. How do I access recovery mode on ...
5
votes
1answer
69 views

How is OS X able to authenticate to my router even when the disk is removed?

I removed the hard drive from my laptop (MBP 9.1, mid 2012) and started recovery mode. Once I entered recovery mode, the laptop was connected to my router (secured with WPA2), even though I had not ...
1
vote
0answers
177 views

Disable 'open this page in [Application]' prompt (iOS)

I currently have an application called App Icon, which allows me to theme my iOS device without being jailbroken, by having web bookmarks on my homepage that open the other application that I want. ...
0
votes
1answer
29 views

Multi user mac and iCloud data security

I'm currently using a shared Mac with other users. All user accounts are Administrators. I noticed that with sudo my files are accessible from other user, and I'm wondering if also my iCloud Data ...
2
votes
1answer
34 views

Password prompt diologue box

Sometimes, when one is installing a programme, a dialogue box will appear asking for an administrator password to allow the installer to ‘make changes’. That seems fine, but wouldn’t it be easy for an ...
0
votes
0answers
8 views

How can I have a LaunchDaemon script use the current logged in users Kerberos ticket

I have a LaunchDaemon that runs as root for security purposes but the script needs to authenticate w/ a URL as the currently logged in user. LaunchDaemons run in their own context so doing a kinit ...
2
votes
0answers
49 views

Gray globe (earth) appears after restart for no apparent reason - might something be wrong?

I restart my MacBook Air OSX 10.8.5 every few days as a routine habit. Twice in the last few months it has come back with the globe (earth) image displayed for 20-30 seconds (I believe it was ...
0
votes
1answer
1k views

Automatic lock screen does not work in EL Capitan

I have my preferences set so the screen locks 1 minute after sleep or after the screensaver goes up. This used to work until I upgraded to El Cap. Now no matter how long after the screensaver has ...
1
vote
1answer
27 views

Attaching External HD to Airport - Is It Secure?

I am thinking about attaching an external HD to my Airpot (ac), which I will use to back up my computer using SuperDuper on a nightly basis. However, I am concerned about security. I know that I can ...
1
vote
1answer
367 views

Finally upgraded my Mac, now I can't install security update

I finally upgraded from Snow Leopard to Mountain Lion (I didn't trust my older iMac (iMac11,3) to run the newest OS X) but now I can't install an important security update, the Security Update ...
9
votes
2answers
264 views

How can the average user easily validate the integrity of their Mac's firmware?

How can the average user easily validate the integrity of their Mac's firmware? Before you downvote this question or lecture me on how I am paranoid and no one should ever need to do that, please ...
1
vote
0answers
119 views

Malware attack freezes Safari—prevention or detection?

Several times in the past few months, a web link has popped up a box alleging that malware has been detected and I should click OK to let them fix it. I'm not stupid enough to even click anywhere ...
0
votes
0answers
12 views

Infecting a new Macbook by plugging in an iPhone that was previously plugged into a potentially compromised old Macbook

I have an non-jailbroken iPhone 5s that was previously plugged into a Macbook that was potentially compromised by a malicious presence. I bought a new Macbook recently. If I were to plug this iPhone ...
0
votes
0answers
25 views

Reinfecting a new Macbook by signing into an iCloud account that was used on a potentially compromised Macbook

I use iCloud for Find My capabilities and to sync contacts and calendar entries only (no iCloud Drive, Keychain or iPhotos etc) between my Macbook and iPhone. The Apple ID I currently use that's ...
2
votes
0answers
183 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
0
votes
1answer
57 views

OS X management profiles / root certificate

My father asked me to sort out some things on his MacBook. He's recently left his company where he used his laptop on the company servers/IT system whilst he was there. At some point in the past he ...
7
votes
1answer
1k views

I want to make an Apple ID, but someone has already used my email to create their own. How do I kick them out completely?

Since this person has used my email as their login, I was able to reset the password since it was listed as the primary email. Unfortunately this person has set their own security questions and ...
0
votes
3answers
579 views

Is eBay app update bypassing Apple's app store screening?

On iPad, the ebay app keeps popping up a screen asking me to update. No updates have shown available in the app store for a long time. Is this a way to get around Apple's vetting process and give ...
5
votes
1answer
1k views

iOS auto-erase after 10 wrong passcode attempts: will the iCloud activation lock still work?

After a recent and unsettling experience of having my iPhone stolen a few weeks ago, I have tried to harden the security settings on my new device. The old device has still not responded to a remote ...
1
vote
1answer
1k views

impact and removal of XcodeGhost

Unfortunately, I installed some of the apps mentioned on this list, and confirmed that the versions I have are still compromised by XcodeGhost: ...
1
vote
2answers
56 views

How do I have any privacy on my mini iPad?

So my sister & her boyfriend are all into this hacking and spying and invading people's privacy and doing malicious things to the with what they gather. They have been doing it to me and trying to ...
1
vote
0answers
145 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
12
votes
2answers
14k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following these steps however when I run the application I ...
0
votes
0answers
66 views

how to restore user password using Time Machine

Using 10.9.5, about a month ago I reset a user's password. The user forgot her password, so I reset it using a CMD-R reboot and passwordreset. Of course this left her login keychain out of sync (maybe ...
0
votes
1answer
245 views

How do I uninstall the Proxinator Security Agent Plugin?

A while ago, using OS X Mavericks, I installed an OS X utility named Proxinator, which was supposed to allow me to lock and unlock my Mac by proximity sensing my iPhone using bluetooth and a companion ...
0
votes
1answer
26 views

Secure Login Equivalent on OS X

On Windows you can configure "Secure Login" so that you have to press Control + Alt + Delect to show the login screen like so: Does this feature exist on OS X or is there a third-party application ...
0
votes
1answer
49 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
109 views

What if someone knows my iPhone passcode (not simple passcode) & restriction passcode?

Lets say I was just taking a walk or was in a train or a bus. I had to unlock my iPhone with passcode there and use the restriction passcode. Somehow a person saw me entering the passcode and I ...
1
vote
1answer
108 views

Securely remove personal information, without reinstall on Yosemite?

Scenario: I have a work provided Macbook on Yosemite that I've used for 2 years. All company files are stored in cloud drives, and all company programs are similarly cloud based. The company does ...
7
votes
3answers
1k views

How can I secure a Retina MacBook Pro to a desk? (similar to how the older MacBook Pro could use a Kensington Lock)

I work for a company renting office space from a downtown skyscraper. In order to deter casual theft from building employees and cleaning staff my company prefers we secure our laptops to our desks ...
1
vote
0answers
37 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is ...
0
votes
1answer
36 views

Can I verify if data protection was enabled from a backup?

I recently lost my phone but have a very recent backup. I've enabled the remote wipe feature using iCloud but the device has not been online since being lost. It was low on battery power so likely ...
1
vote
1answer
904 views

iPhone stolen, Activation Lock was turned off but iPhone is still iCloud device list. Can it still be used by the thief? [closed]

My phone was snatched. Its Activation Lock was turned off and it was not signed in on iCloud. However, I still see my phone as listed among the devices in iCloud. Since the iPhone is still in my ...
2
votes
3answers
667 views

Stolen iPhone: what is the security risk?

Unfortunately today my iPhone 6 Plus was stolen from my pocket on the streets of Sao Paulo. I did not have cellular data turned on. I had Touch ID and a 4 digit number lock in place. How much data ...
0
votes
1answer
42 views

iPhone security question

I think I made a rather stupid mistake My iPhone battery was getting old, so I went to a local repair shop to get it replaced. It's not an Apple Store, just a couple of guys who fix PCs and do odd ...
0
votes
0answers
50 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
2
votes
1answer
372 views

On my iPad, how can I tell if a website is secure on Safari?

Does the web address have to be in green, or is it secure if it's in black?
1
vote
2answers
82 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...
1
vote
1answer
37 views

Sharing folders between 2 users

I just downloaded a virtual box VM which I will be sharing with my wife. Both my wife and I have accounts on our mac. I copied the downloaded VM into /Users/Shared/MyNewVM Then I went into System ...
12
votes
2answers
3k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
1
vote
0answers
117 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
1answer
72 views

Does Facebook's “find friend” algorithm get data from the iOS app?

When I download a Facebook app on my smartphone (e.g. iPhone), what data does Facebook then access? Names? Telephone numbers?
-5
votes
1answer
465 views

Is there a SDK or private framework that can access iMessage contents from an iOS app on a non-jailbroken phone?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", on StackExchange Security, linked below. I wish to know the internal details of how ...