If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

-5
votes
3answers
98 views

Forgot password and only know my birthdate to reset me password

I lost my work phone (an iPhone 4S) today, and I have no idea what the password is or what the security answers are. I only know my Apple ID and and birth date. Is there any way around this so I can ...
0
votes
1answer
28 views

Enable flash player audio access in safari for a website permanently

I get this request every time I try to use the microphone on the same web page. Is there anyway to set this so it stops asking for this domain. I understand the security ramifications; however I ...
1
vote
1answer
54 views

Apps Stuck in Security & Privacy > Accessibility

I was messing around with using AppleScript for GUI manipulation so the apps I was making had to be granted access. The very first one I did showed up in Security & Privacy > Accessibility as ...
2
votes
1answer
558 views

My iPhone is protected by password, is it possible for the thief to restore factory setting?

I quickly activated lost mode in find my iPhone. I worried that the thief managed to restore factory setting before I do that. The thing is before I put lost mode, I disable the 3G dataplan following ...
1
vote
1answer
193 views

iMessage sharing and changing AppleID

My husband and I recently split up. Both our phones and both our iPads were all on his Apple ID. Would I be notified on my phone if he were checking my iMessages? I have recently created my own Apple ...
1
vote
0answers
49 views

Suppress Java warnings

I'm using a website with a Java plugin (applet I think) that prompts me everytime I use it to access the local file system. These are the two pop ups: and: I already have the site in question ...
1
vote
2answers
57 views

Detecting malware in panic reports

Is there a way to identify kernel modules that shouldn't be there out of a panic report? For example, looking at this discussion https://discussions.apple.com/thread/2778885, there it was pretty ...
1
vote
1answer
52 views

Is using 10.8 (over 10.9) a security risk?

Is 10.8 currently (as of 2014 Aug) fully supported, especially security-wise, or using it might be a security risk?
2
votes
1answer
244 views

How to always allow “[program] wants to make changes. Type your password to allow this.”

I use a program which prompts me often to "make changes" (make a system-level/root-level change). I trust this program and want to always allow it to do so. How is this done? I would expect an "always ...
1
vote
1answer
209 views

If I didn't activate my find my iPhone is it possible for the thief to reset factory settings?

I just got my iPhone stolen. I quickly turn on find my iPhone. I wonder if before I did that the thief have reset factory setting first. Is it possible? It seems that the mere act of setting my ...
1
vote
0answers
10 views

User permissions prevent me from loading the Security & Privacy settings — how do I fix this?

I can't seem to load the System Preferences > Security & Privacy settings pane. I inadvertantly changed admin settings on my machine and since then I've been unable to access my documents and ...
1
vote
0answers
56 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
0
votes
0answers
18 views

Why doesn't Apache show up under Firewall (System Preferences » Security)?

Why doesn't Apache show up under Firewall settings, and are there other programs that aren't showing up here? (outside of those that are inclusive of "basic internet services", e.g. DHCP, Bonjour, ...
1
vote
1answer
130 views

How to securely delete individual files (documents) on the iPhone?

My understanding is that when files are deleted on a computer (and here, I am considering the iPhone a "computer"), those files are typically recoverable using forensic tools. I know there are easy ...
0
votes
0answers
111 views

Getting verify certificate errors after adding Google Account & iCloud keychain problem?

I keep getting a verify certificate error whenever I add my Google Account. The domina is an old company I used to work at and I have removed all account in reference to that account. However I get ...
5
votes
1answer
78 views

How to enforce sandbox rules for the particular app?

I wrote an sandbox specification file (inspired by files from /usr/share/sandbox and manuals like this) and now I can launch some app in sandbox with sandbox-exec $path_to_rules ...
1
vote
0answers
86 views

My iPhone got stolen and appears offline

Okay, so I lost my iPhone 4s last night and it appeared as offline immediately upon signing on to Find My iPhone. I placed it on Lost Mode right away. I got an email that my Apple ID password got ...
0
votes
0answers
54 views

iPhone acting on its own

Something weird was happening with an iPhone when we used it with a 12V output, it started to do thing (press the screen) by it self. The power setup was like this: Solar power battery 12V to 220V ...
0
votes
0answers
78 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
0
votes
0answers
36 views

How do I import a SMIME certificate and automatically set the Keychain trust?

We are deploying SMIME certificates to all clients and we need to ensure that these certificates are only trusted for email. Given that our users are "unmanaged" and off the corporate network, how ...
0
votes
1answer
129 views

Is there an actually secure VNC iOS app for use with OS X Screen Sharing?

All iOS VNC clients I have tried use regular VNC authentication. This is insecure because of the 8 character limit on the password, and so on. Some apps such as RealVNC's VNC Viewer, does have info ...
1
vote
2answers
162 views

FileVault 2 caches main password even after power off?

I had set up FileVault 2 encryption while using long&strong user password, and later changed user password to a shorter one. At first time it seemed like everything is working as I expect: OS X ...
1
vote
2answers
171 views

Prevent installation of malware, spyware… Admin password requirement

I am new in Mac world. I am the only user of my Mac with OS X 10.9.3 but sometimes other people use my computer. My purpose is to prevent installation of malware, spyware and surveillance software. ...
2
votes
2answers
136 views

How to scan a Mac for rootkits and other stealthy security hazards

I'm looking at buying a second-hand Mac, probably one that does not include an OS installation disk. How can I scan it to make sure that it has not had security threats installed on it? Is there a ...
0
votes
1answer
80 views

Why files created by Kaleidoscope App are in quarantine?

I like to use Kaleidoscope (v 2.1.0 - build 133.01 under Mac OS X 10.8.5) to compare 2 directories. But, when I create files by copying them from a directory to another using ...
1
vote
1answer
47 views

Can you passlock specific Apps on an iPhone? [duplicate]

I know the easiest way to secure your iPhone is by using a 4-digit-passcode to lock the entire phone. However, I was wondering if there is a way to securely passcode-protect only the Photo and Mail ...
2
votes
0answers
27 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
0
votes
0answers
93 views

How to add digital signature certification for PDF file from iOS application?

I am generating PDF's in my app. I want to give the best security to these pdf's generated from my app. So, i have added the default security options provided by Apple, like Owner password, allow ...
2
votes
1answer
111 views

OS X 10.9 Screen Sharing: disable file transfer

On OS X 10.7 or newer (10.8, 10.9) simply drag'n'drop files between your desktop and remote desktop to transfer the files between computers How can I disable this? I have made restricted ...
1
vote
0answers
53 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
2
votes
2answers
63 views

how can I protect the private data on my Iphone?

what is the best way to secure data on my iphone? In my opinion I have to protect myself against the following risks: theft fault and phone must be returned I fear for the following data Logins ...
0
votes
1answer
145 views

Remove Airdrop function to do tightening of OSX

Could you tell me how to remove Airdrop function to do tightening of OSX? Looks somebody accessing my Mac via AirDrop. I would like to remove the function. Please tell me how to remove the function ...
1
vote
1answer
30 views

Putting SSH keys I've taken from Ubuntu

I came over to Mac from Ubuntu. I've saved all SSH files I had in the .ssh folder in Ubuntu. There are three files id_rsa id_rsa.pub known_hosts Is it possible to reuse these files in Mac? If so, ...
0
votes
1answer
97 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
2
votes
2answers
47 views

Using different passwords for usual login and for admin-requiring actions

I use Mac OS X 10.9.3. Background: I log into my profile very frequently (e.g. after closing lid) and often do it in public. Someone definetely should be able to see it, and no matter if I make it ...
1
vote
1answer
200 views

How can I tell which SSL ciphersuite Safari is using?

Qualsys tells me that current versions of Safari on OS X don't support AES-GCM for the SSL/TLS cipher algorithm. I'd like to verify this by observing which cipher suite is selected when visiting my ...
1
vote
1answer
48 views

Apple support, mac with unencrypted drive

Because of an incident happened a few days ago, I'll have to bring my MacBook Pro to an Apple Store to get it repaired. Problem: Even though automatic logins are disabled, and to access the computer ...
0
votes
1answer
27 views

Java Certificate Issues

Overview We are building a JAVA Application that communicates data over secure HTTPS lines. Problem When we run our application from Eclipse/Terminal, via the command "java -jar ...
2
votes
0answers
22 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
1
vote
1answer
355 views

Apple Push Notification Service: misbehaviour

On a new test iMac (running Mavericks 10.9.2) I discovered 2 repeated errors related to apsd (Apple Push Notification Service daemon). Repeated failing connections A netstat command displays a huge ...
0
votes
0answers
59 views

iOS Passcode not needed after Chrome crashed and phone rebooted

I believe I just found a iOS security flaw. I was using Google Chrome on a iPhone 4S, surfing the net for about an hour, when suddenly Chrome crashed. I held the home button and the standby/on button ...
0
votes
0answers
71 views

How to use the iPad wordpress app when blog runs iThemes Security

This was closed as off-topic on the Wordpress SE site, so I'm hoping it fits better here, since it's specific to using an iOS app. I'm using iThemes Security on my site, so I have a "secret word" ...
0
votes
0answers
110 views

How can I export a single private key in OSX with the command line?

I need to export a identity from my OS X Keychain with the command line. With security I can only export all identities as a single p12, but I need to export just one (I want to use it with Xtify) I ...
1
vote
1answer
43 views

Keychain: ask for certificate from command line

Is it possible to ask for certificate (.certificateRequest file) from command line? I want to mimic behavior like Keychain -> Certificate Assistant -> Request for Certificate in Certificate Buro from ...
0
votes
1answer
368 views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
2
votes
1answer
176 views

Block an application's read/write access to a specific file in OS X?

The premise is this: I have an app which has been set in its code to only run on OS X versions 10.4 to 10.9.2. (When I try to install it, it gives a message "This version of ____ is for Mac OS X 10.4 ...
0
votes
0answers
58 views

Way to bypass USB lockdown from the ProfileManager via command line?

As I manage a few MacBooks in a company we enforce security policies by Profile Manager. One of those policies is blocking USB ports. We have a group of people that we allow to use USB. It works well, ...
2
votes
1answer
4k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
2
votes
3answers
177 views

Software recommendations for locking down a OS X based school computer lab

I am installing a computer lab with 25 brand new iMacs. I would like to secure the machines to prevent students from tampering with them. Some of the things I'd like to prevent including making ...
0
votes
3answers
113 views

If I bought someone's Macbook, can he spy on me?

What if someone sold me his Macbook he doesn't need anymore? When I remove old home profile and reinstall OS via Cmd+R (btw, would I need sudo pass for that?), after that would previous owner be able ...