If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.
-1
votes
2answers
93 views
Is there some security restriction while requiring files from a parent directory in PHP in mountain lion? [closed]
I'm having lot of troubles making this call in PHP:
require_once ( '../interfaces/class-ai1ec-get-data-from-cache.php' );
while if I change to a call like this:
require_once ( ...
0
votes
0answers
70 views
Is it possible to share a smartcard (via bluetooth) to multiple Apple devices and Windows?
Is there a way to securely share a Smartcard with multiple devices (OSX, iPhone, iPad) in addition to any VM I have installed (Bootcamp, Oracle Virtual Box, Parallels) etc?
My goal is to store my ...
0
votes
0answers
44 views
Why isn't my certificate listed in EPA-TLS identities?
To connect to my companies WiFi I have to use an certificate using EPA-TLS. I've generated the file (.p7s) and added it to my keychain (login).
While configuring the EPA-TLS, I got a list with ...
3
votes
2answers
734 views
Should I use the same Apple ID for iCloud and iTunes?
Should I use the same Apple ID for iCloud and the iTunes store?
My immediate assumption was "sure, of course, keep it simple", but today I read the following recommendation:
One potential problem ...
2
votes
2answers
1k views
Does Remote Wipe securely wipe the contents of the drive?
With all the ruckus surrounding the Mat Honan debacle, I'm curious: When you remotely wipe a Mac, is it a secure wipe or does it just lock down the machine with a code?
From the Wired article:
...
7
votes
2answers
244 views
How does Apple's Power Nap interact with File Vault?
If a machine is periodically waking up to check for updates with Power Nap, does this also mean the disk encryption keys are always in RAM? If so, this makes a DMA attack against a "sleeping" Mac ...
1
vote
1answer
751 views
Where are Safari 6.0 passwords saved?
Prior to version 6.0 Safari had no features for managing passwords distinct from the system wide support provided by Keychain:
but Safari 6.0 adds a new tab in its Preferences dialog for saving and ...
0
votes
4answers
271 views
Why is Mountain Lion more security conscious?
Whenever I open an application not downloaded from the App store (or a trusted vendor) I get a warning.
The warning reminds me a bit of the awful window popup that comes up every time you want to ...
0
votes
1answer
68 views
Apple Developer certificates for signing mail?
If every registered Apple developer have a certificate for signing their apps. Is that certificate also good for signing mails? And by this, I also mean if their certificate is backed up by a root ...
6
votes
1answer
2k views
With a firmware password set on a Retina MacBook Pro, what are recovery options?
I am considering setting a firmware password on my Retina MacBook Pro for security reasons. If I do this and later lose the password (or other such extenuating circumstances), how can the data be ...
0
votes
0answers
235 views
What are the advantages and disadvantages of using Prey and using Find My Mac?
I currently have Find My Mac turned on, so I should be able to locate my computer if it is stolen. What are the advantages and disadvantages of using Prey instead, or using Find My Mac?
2
votes
1answer
464 views
Does iCloud use client-side encryption?
I would like to know if iCloud uses client-side encryption i.e. all data is encrypted on client side and even Apple can't decrypt the data and read it.
Is this true for iCloud?
2
votes
1answer
39 views
Which Apps on my Mac need security updates?
I have a lot of software installed from sources other than the Apple Store. Is there a service to check which app have security updates ready to be downloaded? Opening each one on Fridays for a ...
2
votes
1answer
1k views
OS X 10.7 Lion: Reset master password to FileVault 2
I need to reset or delete my master password to FileVault 2. This is the password found under System Preferences > Users & Groups > Service gear > Change Master Password. It's a backup in case a ...
4
votes
3answers
271 views
iPhone passcode security
I was looking at a companies that to do repairs to iPhones to decide if I wanted to DIY or just pay someone to do it, and noticed one company that listed a service named "Remove Passcode". This was ...
1
vote
1answer
64 views
Are there any security vulnerabilities that would allow an attacker to change the admin password?
A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured ...
0
votes
3answers
126 views
Are these root certificates suspicious?
On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date.
I find the names, dates, and number of certificates suspicious. Is this ...
6
votes
1answer
298 views
Is it possible that some hacker is logged in to my computer?
When I type w at the terminal I see myself logged in two times.
What are console and s000? Is it possible that one of these neos is actually somebody else?
4
votes
1answer
270 views
Suspicious NTPD Connection
I use Little Snitch on Mac OS X 10.6.8 and noticed a connection that seemed suspicious to me.
The snitch reported ntpd trying to connect to:
"$host 94.23.243.53
53.243.23.94.in-addr.arpa domain ...
0
votes
2answers
37 views
Which version of iOS is the May 12 security paper referring to?
Apple has published a paper on security controls in iOS, which specific version is this referring to?
14
votes
1answer
514 views
Should I make my primary user an Administrator or not?
For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
4
votes
5answers
12k views
How do I examine my iPad for malware?
Lately I occasionally get redirected to other websites when I load some news websites.
It could be a banner redirect I guess, but I suspect something more sinister.
The iPad is NOT jailbroken and ...
2
votes
1answer
362 views
TPM chip on iPhone
Do Apple devices ship with a TPM chip? My Mac doesn't have a TPM chip, but does an iPhone have of a TPM chip or how do I determine if the iPhone has a TPM chip or not? On my Mac, I use this command to ...
11
votes
3answers
1k views
How is the System Keychain secured in OS X?
I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
10
votes
2answers
3k views
My MacBook was stolen: can the thief access my files without my account password?
My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
2
votes
2answers
274 views
Getting errors when trying to send something using Gmail and Mail 5
I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
1
vote
1answer
82 views
Is this a feasible security measure for my retail iPod Touches?
I'm considering using several iPod Touch devices as mobile computers in a retail setting.
If I did do this, I'd have to provide some measure of security for them. I'm thinking of using the retail ...
1
vote
0answers
84 views
Where do certificates come from?
On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
3answers
1k views
Can someone read messages on my locked iPhone?
I left my iPhone in a taxi cab. I locked the phone to make sure nobody finds it and makes expensive calls. But does locking the phone prevent someone from seeing the texts I am sending? What if the ...
1
vote
2answers
640 views
How to delete or untrust all root certificates in OSX?
In Keychain Access it looks like you can only untrust/delete certificates one at a time.
But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time?
...
-1
votes
1answer
288 views
How do I allow a single IP to access everything on my Mac?
I tried IceFloor, but it's not working to white list all traffic from a single IP to bypass firewalls.
0
votes
1answer
180 views
Installing snort on OS X
I am on the lookout for an IDS/IPS solution for OS X 10.6. I tried compiling snort for 10.6 and I'm having trouble compiling a dependency, DAQ.
The error I get is:
mv -f ...
5
votes
2answers
437 views
Password protect MacBook while keeping iTunes running
So I want to prevent anyone from messing with iTunes, or anything on my MacBook actually. How can I password protect it without losing the sound?
1
vote
1answer
407 views
Forgot password to FileVault. Still got access to the machine
I just realized, that few months ago I converted my disk to FileVault. I am afraid of loosing access to my data. I still have access to the machine: login, password, administrator account.
Is there ...
3
votes
2answers
838 views
Checking apps for a “GateKeeper” Developer ID?
Is there any way for a Mac user currently running Snow Leopard or Lion to check, maybe from the Terminal command-line, whether some application downloaded from the net was digitally signed with an ...
0
votes
1answer
512 views
How can I leave my wifi connection connected after logging the user out of the OS?
Lets say the WiF network uses LDAP to authenticate users with a user and password and the users login to the OS using the same LDAP credentials. Is there a way that this WiFi connection can be always ...
4
votes
2answers
717 views
Does activating auto-login compromise secure password storage?
or:
Does enabling auto-login in OS X add any additional security risks?
How does this auto-login work? I'm not a security expert, but I imagine that such a procedure would require the password to be ...
3
votes
1answer
115 views
Is my system vulnerable to Apple's new password-in-clear-text bug?
With the latest Lion security update, Mac OS X 10.7.3, Apple has accidentally turned on a debug log file outside of the encrypted area that stores the user’s password in clear text.
How can I ...
3
votes
0answers
507 views
Turn off desktop screen/keyboard when connecting via VNC? [duplicate]
When I VNC into a remote OS X machine (e.g. my office machine), the remote screen is showing everything I'm doing. It also unlocks the screen so that if I'm not watching that screen, someone can use ...
1
vote
1answer
77 views
Web Start application management?
After the latest update Mac OS X Lion, I think that Apple disabled Java applications by default. When I try to run one, I get the following dialog:
If I choose to "Enable" it, how would I disable ...
7
votes
3answers
778 views
Is the lock screen PIN secure enough when sending in for repair?
The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
1
vote
2answers
5k views
How do I get iTunes to take my security update info?
Recently, when attempting to make a purchase (or free download) on the App Store iTunes was requesting I update my security info. This is not the 3 digit code on my credit card, but the 3 security ...
3
votes
3answers
496 views
scheduled account lock Mac OS X
You can set your Mac OS X account to automatically lock the screen so that the password is required after a certain amount of time of inactivity, but can you do the same thing using a schedule (say at ...
3
votes
2answers
152 views
securityd goes nuts every 4 minutes & 30 seconds
securityd spams my console with the following :
19/04/2012 16:23:17.405 com.apple.securityd: Value of bTransmit: 00000001
repeated 563 times (after disabling the default mps_limit of 500).
4 ...
4
votes
2answers
1k views
Where to find the Mac OS X Lion security configuration guide?
Most Mac OS X releases have very nice security configuration guides, but Lion is not in the list. Is this document available somewhere else on Apple's site, or is there a roughly-equivalent document ...
6
votes
2answers
718 views
How would Find my iPod work on a locked iPod Touch?
In order for an iPod Touch (which has Find My iPod enabled) to let Apple's servers know where it is located (e.g. via Wi-Fi positioning), I believe it needs to transmit the location over Wi-Fi.
Let's ...
2
votes
1answer
263 views
Hide/Block System Preference Panes?
I have just discovered that System Preference panes such as Mouse and Keyboard cannot be locked, this is a problem as one user could log in change the strings and then another user would log in and ...
3
votes
1answer
2k views
Adobe Reader Updater legitimate?
I just got the following popup:
Is this a legitimate update from Adobe?
The reason I'm concerned:
The Flashback virus started off as a fake Adobe Flash update.
The UI on the application does not ...
4
votes
1answer
790 views
App Store asking for credentials?
After trying to install an application on my iPhone 4, I just saw this popup for the first time:
Security Info Required
To help ensure the security of your Apple ID, you must confirm your ...
2
votes
3answers
1k views
Pop-up windows that disappear mysteriously
It's been a while since, every now and then, I see a pop-up window appearing for a few milliseconds, that then disappears. I don't even have the time of reading what it says.
Any idea on what could ...
