If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
0answers
31 views

Why would a codesigned app suddenly start triggering “… not allowed assistive access.” error?

Environment: OS X 10.10.5 Background: I have an applescript I've been using for past year or so. I use it for copying a password from my password manager (1Password, in my case), and it then pastes ...
0
votes
0answers
15 views

Make OS X El Capitan disregard app security settings for pdfs

For some reason OS X El Capitan identifies pdf files as possible applications and wants to apply the app security settings to these. Both "Open" and dragging and dropping onto the Dock icon activates ...
1
vote
2answers
95 views

WeTransfer email received without ever using the service

I'm am using a MacBook Pro 2012 using El Captain version 10.11.3 I received 5 minutes ago an email from WeTransfer (noreply@wetransfer.com) saying that "Your file has been sent to ***@libero.it. As ...
1
vote
0answers
31 views

Is TRIM enabled for FileVault encrypted disks?

On a stock MacBook Pro without FileVault, TRIM should be enabled out of the box according to wikipedia. Infosec experts warn against TRIM in conjunction with full disk encryption. When ...
2
votes
2answers
982 views

OS X is repeatedly asking for login keychain password

I know this has been asked here several times, but I already checked the other discussions and tried their suggestions, but without success. Is there anything I can do instead of re-installing the ...
3
votes
3answers
414 views

What to do about recent remote code execution vulnerability in git (on El Capitan)

The recent remote code execution bug in git looks pretty serious. The way I read this is that if I'm running a git client prior to 2.7.1, I'm susceptible to remote code execution if I use git to ...
3
votes
2answers
51 views

Screen sharing with absolutely no chance of control?

I'd like to give a presentation to other people who happen to be in the same room. I'll be running various programs and would like my screen to be visible as I work. Instead of a projector, I am ...
3
votes
1answer
35 views

Is this app doing nasty things if an unrelated calendar certificate won't verify?

I recently downloaded and used Stamp to import my Spotify playlists into Apple Music. The app instructs me to favorite an iTunes track and press "OK", in order to give the app access to an iTunes ...
3
votes
1answer
132 views

Why does JDownloader use 9666/tcp on localhost?

I found 9666/tcp to listen on 127.0.0.1 on OS X. I use version 15.3.0 > nmap -sT 127.0.0.1 ...
2
votes
1answer
53 views

Is it too much paranoia to be suspicious of software that require a separate “Helper App”?

I was out trying to find a good system monitor application and decided to give a shot to Monity, which has gotten several good reviews from respectable journals. What bothers me is that the ...
3
votes
2answers
487 views

Hardening Time Machine Security

In face of the news that there is now a ransomware for mac in the wild I thought about the security of my time-machine backups. Permissions First, I had a look at the permissions of the files that ...
0
votes
0answers
5 views

What to do if you forget security questions? [duplicate]

I cannot log into my Apple ID account without my security questions however I have forgot them all. Is there a way to reset them?
-3
votes
1answer
64 views

do i need to reinstall el capitan

I have recently acquired my first apple product an Imac el capitan. I let a security firm scam into my computer and even though nothing has changed I feel compromised. others have suggested I ...
0
votes
0answers
37 views

security command gives out passwords without prompting for the keychain password

When I try to access a keychain password using the keychain access GUI, I always get a dialog box for inputting the current keychain (login) password. However, when I try the same thing from the ...
0
votes
0answers
18 views

Keychain: Ask password before autofill

Is it possible to have Keychain ask for the admin password before autofilling other passwords or credit card information? I am already using keychain quite a bit. But I'm also realizing that other ...
0
votes
0answers
31 views

When acting as a “Personal Hotspot”, does an iPhone ever do anything beyond routing?

I want to use the iPhone's Personal Hotspot feature as my primary connection to the internet. I'm a little nervous about placing my iPhone at risk to hacking. Does Personal Hotspot perform any action ...
0
votes
1answer
33 views

Is there a limit on logical volume size for FileVault?

I'm curious about (and was unable to find documentation for) any size limits for FileVault in OSX (10.9.5 Server). I'm concerned about any sort of corruption/instability that could occur after ...
1
vote
1answer
35 views

Protect files from other administrator accounts

So at work there is a "shared" server that people can run things on that take a long time. I make quite a bit of use of this machine to the point where I made my own login to separate my user files. ...
0
votes
2answers
41 views

Authenticate with phone instead of password

I understand that what I want is really strange. We have something like shared build server (mac mini, yosemite), which is located in public place in office; basically everybody have physical access ...
1
vote
0answers
66 views

Password resets itself after each reboot

Macbook with OS X 10.11.3. No iCloud account, regularly updated via softwareupdate -i -r && brew update && brew cask update. Rather restrictive firewall(ing) via LittleSnitch and pf. ...
1
vote
1answer
43 views

Does using Sleep with FileVault negate some benefits of FileVault?

As I understand it, FileVault makes you login before you computer boots to the OS in order to unlock the drive. This means someone getting ahold of your laptop when it is off cannot get at the data. ...
0
votes
1answer
149 views

How do I reset a locked Apple Watch in Airplane Mode?

Through a series of events the passcode entries on an Apple Watch has been exhausted and the watch is locked with this message: Wrong Passcode Open the Apple Watch app on your iPhone, go to ...
0
votes
1answer
43 views

Disable “show password” in Keychain Access

Is this possible? I know some users use this function to recover forgotten passwords, however revealing a password in plaintext feels like extremely bad practice. In my case, multiple users share a ...
9
votes
3answers
708 views

Can I update iOS on a locked phone?

Tim Cook's open letter about the FBI's attempts to access a locked iPhone 5c have me wondering a fairly simple question that I haven't found an answer for: Assumptions: I have an encrypted iPhone ...
1
vote
0answers
25 views

OS X Internet not working w/o TOR after messing with security settings?

So I was setting up the security settings on my Macbook using this guide when suddenly something's gone quite wrong (before going into details I should notice that all the traffic on my system is ...
0
votes
1answer
55 views

Managing keychain from terminal

I want to move my keys from login keychain to system keychain from terminal. Is that possible? I checked the security manual but I can not see the option there to do so.
1
vote
2answers
132 views

Insert accented letters in passwords

This should be easy, but I cannot solve it by myself. How can I insert accented letters in passwords? When I go to System Preferences > Security & Privacy > Change Password... and in the ...
0
votes
2answers
82 views

Error 53 makes my sister's iPhone 6 brick

Little did I know, my sister had encountered an issue that Apple bricks her iPhone, after she repaired her iPhone 6 by a non-Apple technician. Later, I hear reports that iOS 9.2 restore fails if it ...
0
votes
2answers
159 views

iRat Client in El Capitan Logs?

MacBook Air - Early 2014, OS 10.11.3 Hello, found this in my CoreTelephonyTraceScratch logs and found it concerning, based on some limited google results. I do not have an iOS device that I connect ...
0
votes
0answers
105 views

How does iOS distinguish between 'managed' and 'unmanaged' apps under MDM?

MDM pushes a configuration profile listing managed apps, presumably using only their BundleIDs? iOS takes this information and makes logical decisions/rules for that application. I know that for an ...
1
vote
2answers
86 views

How to prevent someone accessing my iMac

My desktop is in the living room where anyone visiting can access it. I'd like to make it secure from those in my home since I have a roommate.
0
votes
0answers
129 views

How can I manually disable secure input?

Since upgrading to 10.11 I've noticed that Secure Input regularly fails to disable itself when I wake my Mac from sleep and type my password in. I know this because TextExpander starts telling me that ...
1
vote
1answer
39 views

How secure are files on an unencrypted hard disc?

How secure are files, that I saved on an internal Macbook hard disc using OSX 10.11? I cannot check whether the hard drive is encrypted using FileVault as the machine crashed. I am thinking whether I ...
0
votes
0answers
29 views

OS X and apps keep forgetting saved credentials and login status

The past couple of weeks, several apps have forgotten stored credentials a number of times: Google and iCloud account configured on the Macbook (have had to verify my Google account using 2-step ...
3
votes
4answers
2k views

A security update locked OSX.GenieoDropper.A

I need to launch an app but OSX recognise it as a malware. While launching this app, OSX says "app will damage this computer. You should eject this disk image. It contain OSX.GenieoDropper.A". ...
1
vote
1answer
183 views

Hardening OSX 10.11

I'm following the instruction, on hardentheworld.org to harden my OS X 10.11. When I send the following command: sudo defaults write /System/Library/LaunchDaemons/com.apple.mDNSResponder ...
1
vote
1answer
48 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
0
votes
0answers
65 views

Making local web server (nginx) accessible from local network

Previous versions of OS X had a Sharing setting called "Web sharing" I think, which opened port 80 so the local Web server could be accessed from other computers in the same local network. This ...
29
votes
1answer
1k views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
1
vote
1answer
29 views

What determines the relevant version of OpenSSL in a given network connection?

My own system is I think fully "up to date" as far as Apple security updates through the App Store, but the version of OpenSSL installed on my system is 0.9.8zg, a version that was current during the ...
0
votes
0answers
37 views

Security issue on my Mac

I have recently installed kaspersky internet security 2015 on my macbook pro, when I managed to update some applications from the Mac app store it required entering the password, BUT when I entered it ...
6
votes
2answers
274 views

How can I create a user that can login through SSH but not on the local desktop in MacOS X El Capitan?

I would like to have a user account in my MacOS X El Capitan system which is limited to login through SSH. I do not want that user to be able to use the system through any other means, especially not ...
2
votes
1answer
649 views

How (in)vulnerable is OS X to encryption ransomware?

These days, malicious software seems to be infecting Windows computers, encrypting their data against their will, and asking for a Bitcoin ransom in exchange for the encryption key. In order for ...
3
votes
1answer
63 views

How to ensure Slack runs safely in sandbox?

For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless ...
0
votes
0answers
44 views

Should a MacBook emit EMF fluctuations when wifi and bluetooth are turned off?

I have a couple of MacBooks. Both have SSD drives. Using a Trifield EMF meter with radio/microwave capability, if I hold the meter near the laptop (where I understand the wifi antenna is located), I ...
3
votes
1answer
61 views

Safe to allow students to access Terminal.app in a shared environment?

Background: We have a lab of Macintosh computers, all running 10.10.3 currently, that are for classroom instruction. Students typically use their own login/password via Active Directory to log in to ...
0
votes
1answer
194 views

What is Apple's policy for supporting security updates on older versions of iOS?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each iOS release? I observe that many people complain about performance issues with iOS ...
0
votes
0answers
84 views

Adobe Acrobat Reader DC / Acrobat Pro Data Submission TLS Issues

This question is somewhat related to this one (http://apple.stackexchange.com/questions/201310/how-to-activate-tls-1-0-in-adobe-acrobat-on-mac), as I've seen the same behavior in both Adobe Reader DC (...
-1
votes
1answer
38 views

Is a .sparseimage file with a strong password safe?

I have created a .sparseimage file of my Home folder on my 2009 iMac running OS 10.11.2 and have chosen a 17 character password which https://www.grc.com/haystack.htm notes that against an Offline ...
0
votes
0answers
35 views

Can Keychain use the same credentials for multiple sites?

I'm working in an enterprise environment in which one password is used across a number of different websites. Changing my password is painful, because it has to be re-entered for each site. Too many ...