If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

-3
votes
1answer
57 views

do i need to reinstall el capitan

I have recently acquired my first apple product an Imac el capitan. I let a security firm scam into my computer and even though nothing has changed I feel compromised. others have suggested I ...
0
votes
0answers
27 views

security command gives out passwords without prompting for the keychain password

When I try to access a keychain password using the keychain access GUI, I always get a dialog box for inputting the current keychain (login) password. However, when I try the same thing from the ...
0
votes
0answers
17 views

Keychain: Ask password before autofill

Is it possible to have Keychain ask for the admin password before autofilling other passwords or credit card information? I am already using keychain quite a bit. But I'm also realizing that other ...
0
votes
0answers
31 views

When acting as a “Personal Hotspot”, does an iPhone ever do anything beyond routing?

I want to use the iPhone's Personal Hotspot feature as my primary connection to the internet. I'm a little nervous about placing my iPhone at risk to hacking. Does Personal Hotspot perform any action ...
0
votes
1answer
30 views

Is there a limit on logical volume size for FileVault?

I'm curious about (and was unable to find documentation for) any size limits for FileVault in OSX (10.9.5 Server). I'm concerned about any sort of corruption/instability that could occur after ...
1
vote
1answer
31 views

Protect files from other administrator accounts

So at work there is a "shared" server that people can run things on that take a long time. I make quite a bit of use of this machine to the point where I made my own login to separate my user files. ...
0
votes
2answers
40 views

Authenticate with phone instead of password

I understand that what I want is really strange. We have something like shared build server (mac mini, yosemite), which is located in public place in office; basically everybody have physical access ...
1
vote
0answers
56 views

Password resets itself after each reboot

Macbook with OS X 10.11.3. No iCloud account, regularly updated via softwareupdate -i -r && brew update && brew cask update. Rather restrictive firewall(ing) via LittleSnitch and pf. ...
1
vote
1answer
40 views

Does using Sleep with FileVault negate some benefits of FileVault?

As I understand it, FileVault makes you login before you computer boots to the OS in order to unlock the drive. This means someone getting ahold of your laptop when it is off cannot get at the data. ...
0
votes
1answer
112 views

How do I reset a locked Apple Watch in Airplane Mode?

Through a series of events the passcode entries on an Apple Watch has been exhausted and the watch is locked with this message: Wrong Passcode Open the Apple Watch app on your iPhone, go to ...
0
votes
1answer
40 views

Disable “show password” in Keychain Access

Is this possible? I know some users use this function to recover forgotten passwords, however revealing a password in plaintext feels like extremely bad practice. In my case, multiple users share a ...
9
votes
3answers
594 views

Can I update iOS on a locked phone?

Tim Cook's open letter about the FBI's attempts to access a locked iPhone 5c have me wondering a fairly simple question that I haven't found an answer for: Assumptions: I have an encrypted iPhone ...
1
vote
0answers
25 views

OS X Internet not working w/o TOR after messing with security settings?

So I was setting up the security settings on my Macbook using this guide when suddenly something's gone quite wrong (before going into details I should notice that all the traffic on my system is ...
0
votes
1answer
45 views

Managing keychain from terminal

I want to move my keys from login keychain to system keychain from terminal. Is that possible? I checked the security manual but I can not see the option there to do so.
1
vote
2answers
108 views

Insert accented letters in passwords

This should be easy, but I cannot solve it by myself. How can I insert accented letters in passwords? When I go to System Preferences > Security & Privacy > Change Password... and in the ...
0
votes
2answers
81 views

Error 53 makes my sister's iPhone 6 brick

Little did I know, my sister had encountered an issue that Apple bricks her iPhone, after she repaired her iPhone 6 by a non-Apple technician. Later, I hear reports that iOS 9.2 restore fails if it ...
0
votes
1answer
116 views

iRat Client in El Capitan Logs?

MacBook Air - Early 2014, OS 10.11.3 Hello, found this in my CoreTelephonyTraceScratch logs and found it concerning, based on some limited google results. I do not have an iOS device that I connect ...
0
votes
0answers
92 views

How does iOS distinguish between 'managed' and 'unmanaged' apps under MDM?

MDM pushes a configuration profile listing managed apps, presumably using only their BundleIDs? iOS takes this information and makes logical decisions/rules for that application. I know that for an ...
1
vote
2answers
84 views

How to prevent someone accessing my iMac

My desktop is in the living room where anyone visiting can access it. I'd like to make it secure from those in my home since I have a roommate.
0
votes
0answers
96 views

How can I manually disable secure input?

Since upgrading to 10.11 I've noticed that Secure Input regularly fails to disable itself when I wake my Mac from sleep and type my password in. I know this because TextExpander starts telling me that ...
1
vote
1answer
37 views

How secure are files on an unencrypted hard disc?

How secure are files, that I saved on an internal Macbook hard disc using OSX 10.11? I cannot check whether the hard drive is encrypted using FileVault as the machine crashed. I am thinking whether I ...
0
votes
0answers
29 views

OS X and apps keep forgetting saved credentials and login status

The past couple of weeks, several apps have forgotten stored credentials a number of times: Google and iCloud account configured on the Macbook (have had to verify my Google account using 2-step ...
3
votes
4answers
2k views

A security update locked OSX.GenieoDropper.A

I need to launch an app but OSX recognise it as a malware. While launching this app, OSX says "app will damage this computer. You should eject this disk image. It contain OSX.GenieoDropper.A". ...
1
vote
1answer
161 views

Hardening OSX 10.11

I'm following the instruction, on hardentheworld.org to harden my OS X 10.11. When I send the following command: sudo defaults write /System/Library/LaunchDaemons/com.apple.mDNSResponder ...
1
vote
1answer
42 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
0
votes
0answers
44 views

Making local web server (nginx) accessible from local network

Previous versions of OS X had a Sharing setting called "Web sharing" I think, which opened port 80 so the local Web server could be accessed from other computers in the same local network. This ...
29
votes
1answer
991 views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
1
vote
1answer
28 views

What determines the relevant version of OpenSSL in a given network connection?

My own system is I think fully "up to date" as far as Apple security updates through the App Store, but the version of OpenSSL installed on my system is 0.9.8zg, a version that was current during the ...
0
votes
0answers
36 views

Security issue on my Mac

I have recently installed kaspersky internet security 2015 on my macbook pro, when I managed to update some applications from the Mac app store it required entering the password, BUT when I entered it ...
6
votes
2answers
228 views

How can I create a user that can login through SSH but not on the local desktop in MacOS X El Capitan?

I would like to have a user account in my MacOS X El Capitan system which is limited to login through SSH. I do not want that user to be able to use the system through any other means, especially not ...
2
votes
1answer
565 views

How (in)vulnerable is OS X to encryption ransomware?

These days, malicious software seems to be infecting Windows computers, encrypting their data against their will, and asking for a Bitcoin ransom in exchange for the encryption key. In order for ...
3
votes
1answer
59 views

How to ensure Slack runs safely in sandbox?

For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless ...
0
votes
0answers
40 views

Should a MacBook emit EMF fluctuations when wifi and bluetooth are turned off?

I have a couple of MacBooks. Both have SSD drives. Using a Trifield EMF meter with radio/microwave capability, if I hold the meter near the laptop (where I understand the wifi antenna is located), I ...
3
votes
1answer
59 views

Safe to allow students to access Terminal.app in a shared environment?

Background: We have a lab of Macintosh computers, all running 10.10.3 currently, that are for classroom instruction. Students typically use their own login/password via Active Directory to log in to ...
0
votes
1answer
137 views

What is Apple's policy for supporting security updates on older versions of iOS?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each iOS release? I observe that many people complain about performance issues with iOS ...
0
votes
0answers
76 views

Adobe Acrobat Reader DC / Acrobat Pro Data Submission TLS Issues

This question is somewhat related to this one (http://apple.stackexchange.com/questions/201310/how-to-activate-tls-1-0-in-adobe-acrobat-on-mac), as I've seen the same behavior in both Adobe Reader DC ...
-1
votes
1answer
37 views

Is a .sparseimage file with a strong password safe?

I have created a .sparseimage file of my Home folder on my 2009 iMac running OS 10.11.2 and have chosen a 17 character password which https://www.grc.com/haystack.htm notes that against an Offline ...
0
votes
0answers
30 views

Can Keychain use the same credentials for multiple sites?

I'm working in an enterprise environment in which one password is used across a number of different websites. Changing my password is painful, because it has to be re-entered for each site. Too many ...
0
votes
0answers
16 views

Can a backup HD be erased despite it NOT being able to be “unmounted”

An external portable HD simply stopped working [no longer recognised by my Mac] so I took it back for warranty replacement. He couldn't read or "unmount" it either [whatever that means] so I just said ...
1
vote
2answers
155 views

Does FileVault 2 encrypt keys in sleep mode?

I have an early 2015 13" MacBook Pro running OS X 10.11.2 and I'm considering enabling FileVault 2. I realize that the disk is always encrypted, even when the machine is in use and only parts of it ...
0
votes
1answer
113 views

Will changing your Apple ID password affect a pending remote erase request?

I had my iPhone stolen a few days ago so naturally I tried to do a remote erase. However, the device has been offline since it got stolen so the erase is still being requested. I'm thinking of ...
1
vote
1answer
201 views

How can my iPhone status change to online if it was locked when stolen

My iPhone 6s was stolen a few days ago, however because I was running out of data I switched off my mobile data earlier. When I got home I tried to track my phone and lock it using Find My Phone, ...
1
vote
1answer
474 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
1
vote
1answer
151 views

Installing Adobe Reader without granting full administrative privileges

I agree with the OP of the question How can I open a .pkg file manually? that it is not so nice to grant administrative privileges to software that you do not trust "completely". The following ...
0
votes
0answers
59 views

Changing security questions

i have 15$ in my iTunes account and whenever I try to buy something, it says I have to answer security questions, but I do not remember any of them. So when I try to reset my security questions, it ...
0
votes
2answers
29 views

Second password for SSH-only access

TL;DR: I want to have a simple password to unlock my computer with physical access and a complex password to connect over ssh. This, using the same account. I'm looking for a solution to manage ...
0
votes
0answers
33 views

System Preferences saving where you last clicked?

I was wondering if this behaviour is present on anyone else's Macbook. Every time I've set up a new fresh install, I check that all the Sharing preferences are disabled one by one, and I leave it ...
0
votes
0answers
75 views

What causes loginwindow USER_PROCESS/END_PROCESS entries in Console?

I've noticed a lot of this under my Console when I logged into my admin account tonight (I do regular internet stuff from the standard). Dec 2 21:25:41 [Name's]-MacBook-Pro loginwindow[1650]: ...
0
votes
1answer
281 views

Issue with receiving Apple ID account change notification emails

I was changing the password and recovery key to my Apple ID tonight. Every other time I've done this, I receive a notification email for both password and recovery key changes and then another ...
0
votes
0answers
36 views

Time Machine not restoring properly, System Preferences not saving or malware?

Yesterday, I wiped the drive on my Macbook Pro and reinstalled OS X 10.11.1 using Internet Recovery on my home wifi network (a Netgear router that had just set up before I reinstalled with my sister's ...