If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
2answers
280 views

FileVault 2 caches main password even after power off?

I had set up FileVault 2 encryption while using long&strong user password, and later changed user password to a shorter one. At first time it seemed like everything is working as I expect: OS X ...
1
vote
2answers
293 views

Prevent installation of malware, spyware… Admin password requirement

I am new in Mac world. I am the only user of my Mac with OS X 10.9.3 but sometimes other people use my computer. My purpose is to prevent installation of malware, spyware and surveillance software. ...
2
votes
2answers
183 views

How to scan a Mac for rootkits and other stealthy security hazards

I'm looking at buying a second-hand Mac, probably one that does not include an OS installation disk. How can I scan it to make sure that it has not had security threats installed on it? Is there a ...
0
votes
1answer
110 views

Why files created by Kaleidoscope App are in quarantine?

I like to use Kaleidoscope (v 2.1.0 - build 133.01 under Mac OS X 10.8.5) to compare 2 directories. But, when I create files by copying them from a directory to another using ...
1
vote
1answer
63 views

Can you passlock specific Apps on an iPhone? [duplicate]

I know the easiest way to secure your iPhone is by using a 4-digit-passcode to lock the entire phone. However, I was wondering if there is a way to securely passcode-protect only the Photo and Mail ...
2
votes
0answers
32 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
0
votes
0answers
109 views

How to add digital signature certification for PDF file from iOS application?

I am generating PDF's in my app. I want to give the best security to these pdf's generated from my app. So, i have added the default security options provided by Apple, like Owner password, allow ...
2
votes
1answer
148 views

OS X 10.9 Screen Sharing: disable file transfer

On OS X 10.7 or newer (10.8, 10.9) simply drag'n'drop files between your desktop and remote desktop to transfer the files between computers How can I disable this? I have made restricted ...
1
vote
0answers
86 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
2
votes
2answers
64 views

how can I protect the private data on my Iphone?

what is the best way to secure data on my iphone? In my opinion I have to protect myself against the following risks: theft fault and phone must be returned I fear for the following data Logins ...
0
votes
1answer
332 views

Remove Airdrop function to do tightening of OSX

Could you tell me how to remove Airdrop function to do tightening of OSX? Looks somebody accessing my Mac via AirDrop. I would like to remove the function. Please tell me how to remove the function ...
1
vote
1answer
31 views

Putting SSH keys I've taken from Ubuntu

I came over to Mac from Ubuntu. I've saved all SSH files I had in the .ssh folder in Ubuntu. There are three files id_rsa id_rsa.pub known_hosts Is it possible to reuse these files in Mac? If so, ...
0
votes
1answer
135 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
2
votes
2answers
52 views

Using different passwords for usual login and for admin-requiring actions

I use Mac OS X 10.9.3. Background: I log into my profile very frequently (e.g. after closing lid) and often do it in public. Someone definetely should be able to see it, and no matter if I make it ...
1
vote
1answer
373 views

How can I tell which SSL ciphersuite Safari is using?

Qualsys tells me that current versions of Safari on OS X don't support AES-GCM for the SSL/TLS cipher algorithm. I'd like to verify this by observing which cipher suite is selected when visiting my ...
1
vote
1answer
55 views

Apple support, mac with unencrypted drive

Because of an incident happened a few days ago, I'll have to bring my MacBook Pro to an Apple Store to get it repaired. Problem: Even though automatic logins are disabled, and to access the computer ...
0
votes
1answer
37 views

Java Certificate Issues

Overview We are building a JAVA Application that communicates data over secure HTTPS lines. Problem When we run our application from Eclipse/Terminal, via the command "java -jar ...
2
votes
0answers
22 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
1
vote
1answer
538 views

Apple Push Notification Service: misbehaviour

On a new test iMac (running Mavericks 10.9.2) I discovered 2 repeated errors related to apsd (Apple Push Notification Service daemon). Repeated failing connections A netstat command displays a huge ...
0
votes
0answers
62 views

iOS Passcode not needed after Chrome crashed and phone rebooted

I believe I just found a iOS security flaw. I was using Google Chrome on a iPhone 4S, surfing the net for about an hour, when suddenly Chrome crashed. I held the home button and the standby/on button ...
0
votes
0answers
85 views

How to use the iPad wordpress app when blog runs iThemes Security

This was closed as off-topic on the Wordpress SE site, so I'm hoping it fits better here, since it's specific to using an iOS app. I'm using iThemes Security on my site, so I have a "secret word" ...
0
votes
0answers
183 views

How can I export a single private key in OSX with the command line?

I need to export a identity from my OS X Keychain with the command line. With security I can only export all identities as a single p12, but I need to export just one (I want to use it with Xtify) I ...
1
vote
1answer
52 views

Keychain: ask for certificate from command line

Is it possible to ask for certificate (.certificateRequest file) from command line? I want to mimic behavior like Keychain -> Certificate Assistant -> Request for Certificate in Certificate Buro from ...
0
votes
1answer
588 views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
2
votes
1answer
208 views

Block an application's read/write access to a specific file in OS X?

The premise is this: I have an app which has been set in its code to only run on OS X versions 10.4 to 10.9.2. (When I try to install it, it gives a message "This version of ____ is for Mac OS X 10.4 ...
0
votes
0answers
77 views

Way to bypass USB lockdown from the ProfileManager via command line?

As I manage a few MacBooks in a company we enforce security policies by Profile Manager. One of those policies is blocking USB ports. We have a group of people that we allow to use USB. It works well, ...
3
votes
1answer
9k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
2
votes
3answers
271 views

Software recommendations for locking down a OS X based school computer lab

I am installing a computer lab with 25 brand new iMacs. I would like to secure the machines to prevent students from tampering with them. Some of the things I'd like to prevent including making ...
0
votes
3answers
141 views

If I bought someone's Macbook, can he spy on me?

What if someone sold me his Macbook he doesn't need anymore? When I remove old home profile and reinstall OS via Cmd+R (btw, would I need sudo pass for that?), after that would previous owner be able ...
1
vote
1answer
251 views

Safari adds links on any page

I had strange issue with Safari on Macbook today. It add on any pages I had visited links to other sites. It looks like an advertising. For example, if I had the page with next text: ".... answers ...
-2
votes
1answer
396 views

Founded iPhone. need help! [closed]

A friend of mine found a iPhone 5 and it was on lost mode, then he restored the phone through iTunes. Does Find My iPhone still works, and how do you bypass the activation lock? Should he jailbreak ...
1
vote
2answers
2k views

Do firewall tools exist for OS X Mavericks for preventing brute force attacks?

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running ...
1
vote
2answers
73 views

Does the coupons.com printing uninstaller leave anything behind?

A family member installed the coupons.com printing software on my Mac. Googling around tells me that the uninstaller doesn't fully remove elements of the installation from the Windows version. I ...
1
vote
4answers
143 views

Password managers for iOS

With the whole Heartbleed mess, I figured it was about time to start using a password manager. After doing some research, here is the list of things that I want and don't want in this kind of ...
1
vote
1answer
1k views

Why is the CAcert root certificate not trusted on iOS devices?

I distinctly remember that when I bought my first iPhone and iPad a couple of years back, I was able to install the CAcert root certificate on those devices and iOS would trust the certificate. These ...
30
votes
2answers
23k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
1
vote
2answers
243 views

If my iPhone 4 has spyware on it will encrypting my sms messages with an encryption app keep them private?

I am currently dealing with a stalking situation and my iPhone 4 is being monitored. The person knows all my phone info like meid, imei, phone number etc… Also I believe my phone has spy software on ...
1
vote
0answers
44 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
0
votes
1answer
709 views

Will Find My iPhone work if I cancel service from Sprint?

My iPhone 5S was lost / stolen this weekend. I was able to track it to a location in Brooklyn NY, unfortunately in a set of connected brick apartment buildings. The find my iPhone app isn't quite ...
1
vote
0answers
52 views

Printer can write into laptop folder

Well that was surprising. And a little alarming. I got a new multifunction printer, a Canon MG7120. It is connected wirelessly to my home local area network. I installed the latest drivers from ...
1
vote
1answer
189 views

Facetime Applescript Edit

Does anyone know a quick way that I could modify the following script (from CornDoggyRob) to automatically maximize the incoming call window and to adjust the orientation? I would love to try this ...
1
vote
0answers
4k views

Updates: Mavericks 10.9.2 + Critical Security Update → no reboot

Update On an iMac running Mavericks 10.9.0, I just selected within App Store the 2 last OS updates: Critical Security Update (version 1.0) OS X Update Combined (version 10.9.2) These 2 updates ...
3
votes
3answers
187 views

I have a service listening on a port, how do I open the port externally?

I have a service that is listening on a tcp port, and it is listed with this command: >netstat -atp tcp | grep -i "listen" tcp4 0 0 192.168.2.5.8070 *.* LISTEN ...
0
votes
0answers
839 views

“Failed to validate certificate” error while launching web based Java application

I am trying to launch a web based java application on OSX 10.9.2 (Macbook Pro Retina late 2013). The first time when I tried to open the .jnlp file it prompted me to install Java RE even though I have ...
12
votes
3answers
19k views

Is the message “You must change your passcode within 60 minutes” valid / non-malware?

A few minutes ago, after unlocking my phone (iPhone 4, iOS 7.0.1) I got a dialog over the home screen: Passcode Requirement You must change your passcode within 60 minutes and it offered to ...
0
votes
1answer
54 views

FileVault1 with no master password but root+user password

On my mac I activated FileVault1 about 4-5years ago. Unluckily i forgot the password as i never used it =( I know root + user password to log in and do all the stuff (also as root in the console). As ...
0
votes
0answers
88 views

How do I enable A5/3 cellular encryption on an iPhone or iPad?

I want to only connect to A5/3 networks to prevent MITM attacks on my cellular data. I'm not concerned if the attacker is the mobile operator themselves.. (assuming that mobile operator can't be ...
2
votes
0answers
73 views

Disabling Java plug-in globally?

After following the instructions in this answer (briefly: Java prefs pane → Security → disable "Enable Java content in the browser") to disable the Java plug-in globally, I'm presented with an admin ...
0
votes
1answer
63 views

Is iTunes for Windows affected by the code responsible for the goto fail vulnerability?

I've been reading about the infamous "goto fail" security bug in iOS 6 and OS X 10.9, but I haven't read anything about whether other Apple software, like for example iTunes for Windows, is affected. ...
0
votes
1answer
57 views

Preventing access to mounted volumes for non-admin users

I have some volumes with sensitive data mounted in my main, admin account. I'd like to give some other users access to the same computer using a "standard" user account. Such a standard account seems ...