If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

2
votes
3answers
808 views

How can I make my Mac accept a user password of 8 characters?

I just unboxed my new MacBook Pro, running Yosemite 10.10.5. When I went through the setup procedure, it didn't ask me what password to use for my account, and just set it to that of my AppleID. (I ...
1
vote
0answers
59 views

The website “secure-web.cicsco.com” requires a client certificate

My dad got the message in the subject line in Safari today, with a list of certificates and "cancel" and "continue" buttons. He chose "continue". I gather from a discussion at Apple's site that it's ...
1
vote
3answers
1k views

Disable System Integrity Protection on OS X running on VMware

I have an instance of OS X El Capitan running on VMWare Workstation 10. I need to make changes to /System and therefor have to disable System Integrity Protection. How do I access recovery mode on ...
5
votes
1answer
74 views

How is OS X able to authenticate to my router even when the disk is removed?

I removed the hard drive from my laptop (MBP 9.1, mid 2012) and started recovery mode. Once I entered recovery mode, the laptop was connected to my router (secured with WPA2), even though I had not ...
1
vote
0answers
347 views

Disable 'open this page in [Application]' prompt (iOS)

I currently have an application called App Icon, which allows me to theme my iOS device without being jailbroken, by having web bookmarks on my homepage that open the other application that I want. ...
0
votes
1answer
32 views

Multi user mac and iCloud data security

I'm currently using a shared Mac with other users. All user accounts are Administrators. I noticed that with sudo my files are accessible from other user, and I'm wondering if also my iCloud Data (...
3
votes
1answer
57 views

Password prompt diologue box

Sometimes, when one is installing a programme, a dialogue box will appear asking for an administrator password to allow the installer to ‘make changes’. That seems fine, but wouldn’t it be easy for an ...
0
votes
0answers
15 views

How can I have a LaunchDaemon script use the current logged in users Kerberos ticket

I have a LaunchDaemon that runs as root for security purposes but the script needs to authenticate w/ a URL as the currently logged in user. LaunchDaemons run in their own context so doing a kinit won'...
2
votes
0answers
142 views

Gray globe (earth) appears after restart for no apparent reason - might something be wrong?

I restart my MacBook Air OSX 10.8.5 every few days as a routine habit. Twice in the last few months it has come back with the globe (earth) image displayed for 20-30 seconds (I believe it was flashing)...
0
votes
1answer
2k views

Automatic lock screen does not work in EL Capitan

I have my preferences set so the screen locks 1 minute after sleep or after the screensaver goes up. This used to work until I upgraded to El Cap. Now no matter how long after the screensaver has ...
1
vote
1answer
37 views

Attaching External HD to Airport - Is It Secure?

I am thinking about attaching an external HD to my Airpot (ac), which I will use to back up my computer using SuperDuper on a nightly basis. However, I am concerned about security. I know that I can ...
1
vote
1answer
479 views

Finally upgraded my Mac, now I can't install security update

I finally upgraded from Snow Leopard to Mountain Lion (I didn't trust my older iMac (iMac11,3) to run the newest OS X) but now I can't install an important security update, the Security Update 2015-...
9
votes
2answers
551 views

How can the average user easily validate the integrity of their Mac's firmware?

How can the average user easily validate the integrity of their Mac's firmware? Before you downvote this question or lecture me on how I am paranoid and no one should ever need to do that, please ...
1
vote
0answers
165 views

Malware attack freezes Safari—prevention or detection?

Several times in the past few months, a web link has popped up a box alleging that malware has been detected and I should click OK to let them fix it. I'm not stupid enough to even click anywhere ...
0
votes
0answers
12 views

Infecting a new Macbook by plugging in an iPhone that was previously plugged into a potentially compromised old Macbook

I have an non-jailbroken iPhone 5s that was previously plugged into a Macbook that was potentially compromised by a malicious presence. I bought a new Macbook recently. If I were to plug this iPhone ...
0
votes
0answers
26 views

Reinfecting a new Macbook by signing into an iCloud account that was used on a potentially compromised Macbook

I use iCloud for Find My capabilities and to sync contacts and calendar entries only (no iCloud Drive, Keychain or iPhotos etc) between my Macbook and iPhone. The Apple ID I currently use that's ...
3
votes
0answers
370 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
0
votes
1answer
112 views

OS X management profiles / root certificate

My father asked me to sort out some things on his MacBook. He's recently left his company where he used his laptop on the company servers/IT system whilst he was there. At some point in the past he ...
7
votes
1answer
2k views

I want to make an Apple ID, but someone has already used my email to create their own. How do I kick them out completely?

Since this person has used my email as their login, I was able to reset the password since it was listed as the primary email. Unfortunately this person has set their own security questions and ...
0
votes
3answers
697 views

Is eBay app update bypassing Apple's app store screening?

On iPad, the ebay app keeps popping up a screen asking me to update. No updates have shown available in the app store for a long time. Is this a way to get around Apple's vetting process and give ...
6
votes
1answer
6k views

iOS auto-erase after 10 wrong passcode attempts: will the iCloud activation lock still work?

After a recent and unsettling experience of having my iPhone stolen a few weeks ago, I have tried to harden the security settings on my new device. The old device has still not responded to a remote ...
1
vote
1answer
2k views

impact and removal of XcodeGhost

Unfortunately, I installed some of the apps mentioned on this list, and confirmed that the versions I have are still compromised by XcodeGhost: http://researchcenter.paloaltonetworks.com/2015/09/...
1
vote
2answers
63 views

How do I have any privacy on my mini iPad?

So my sister & her boyfriend are all into this hacking and spying and invading people's privacy and doing malicious things to the with what they gather. They have been doing it to me and trying to ...
1
vote
0answers
212 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
16
votes
3answers
35k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following these steps however when I run the application I ...
0
votes
0answers
97 views

how to restore user password using Time Machine

Using 10.9.5, about a month ago I reset a user's password. The user forgot her password, so I reset it using a CMD-R reboot and passwordreset. Of course this left her login keychain out of sync (maybe ...
0
votes
1answer
480 views

How do I uninstall the Proxinator Security Agent Plugin?

A while ago, using OS X Mavericks, I installed an OS X utility named Proxinator, which was supposed to allow me to lock and unlock my Mac by proximity sensing my iPhone using bluetooth and a companion ...
0
votes
1answer
28 views

Secure Login Equivalent on OS X

On Windows you can configure "Secure Login" so that you have to press Control + Alt + Delect to show the login screen like so: Does this feature exist on OS X or is there a third-party application ...
0
votes
1answer
74 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
259 views

What if someone knows my iPhone passcode (not simple passcode) & restriction passcode?

Lets say I was just taking a walk or was in a train or a bus. I had to unlock my iPhone with passcode there and use the restriction passcode. Somehow a person saw me entering the passcode and I ...
1
vote
1answer
141 views

Securely remove personal information, without reinstall on Yosemite?

Scenario: I have a work provided Macbook on Yosemite that I've used for 2 years. All company files are stored in cloud drives, and all company programs are similarly cloud based. The company does ...
7
votes
3answers
2k views

How can I secure a Retina MacBook Pro to a desk? (similar to how the older MacBook Pro could use a Kensington Lock)

I work for a company renting office space from a downtown skyscraper. In order to deter casual theft from building employees and cleaning staff my company prefers we secure our laptops to our desks ...
1
vote
0answers
41 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is 5b:dc:2a:b4:cd:bf:e8:e3:...
0
votes
1answer
42 views

Can I verify if data protection was enabled from a backup?

I recently lost my phone but have a very recent backup. I've enabled the remote wipe feature using iCloud but the device has not been online since being lost. It was low on battery power so likely ...
1
vote
1answer
2k views

iPhone stolen, Activation Lock was turned off but iPhone is still iCloud device list. Can it still be used by the thief? [closed]

My phone was snatched. Its Activation Lock was turned off and it was not signed in on iCloud. However, I still see my phone as listed among the devices in iCloud. Since the iPhone is still in my ...
3
votes
3answers
2k views

Stolen iPhone: what is the security risk?

Unfortunately today my iPhone 6 Plus was stolen from my pocket on the streets of Sao Paulo. I did not have cellular data turned on. I had Touch ID and a 4 digit number lock in place. How much data ...
0
votes
1answer
47 views

iPhone security question

I think I made a rather stupid mistake My iPhone battery was getting old, so I went to a local repair shop to get it replaced. It's not an Apple Store, just a couple of guys who fix PCs and do odd ...
0
votes
0answers
71 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
2
votes
1answer
920 views

On my iPad, how can I tell if a website is secure on Safari?

Does the web address have to be in green, or is it secure if it's in black?
1
vote
2answers
136 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...
1
vote
1answer
52 views

Sharing folders between 2 users

I just downloaded a virtual box VM which I will be sharing with my wife. Both my wife and I have accounts on our mac. I copied the downloaded VM into /Users/Shared/MyNewVM Then I went into System ...
14
votes
2answers
4k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
1
vote
0answers
173 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
1answer
100 views

Does Facebook's “find friend” algorithm get data from the iOS app?

When I download a Facebook app on my smartphone (e.g. iPhone), what data does Facebook then access? Names? Telephone numbers?
-5
votes
1answer
975 views

Is there a SDK or private framework that can access iMessage contents from an iOS app on a non-jailbroken phone?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", on StackExchange Security, linked below. I wish to know the internal details of how ...
0
votes
0answers
35 views

Mail Failed to Load After Changed Gmail Password or Enable TFA

This happens after either you change your gmail password or enable Two Factor Authentication. Anyone faced this before and how did you resolve this? Thanks.
6
votes
1answer
874 views

Is an Erased, Stolen iPhone, Safe on iCloud?

My wife's iPhone was stolen, and because our iCloud is connected via Family Sharing, I immediately put it on stolen mode and then erase mode to remove all the data once it came online. I checked ...
0
votes
0answers
30 views

How Can Web Sites (Ad Networks) Connect to Different IPs?

I use Safari on my Mac, and I also use Little Snitch (Awesome program, but it can get in the way, from time to time). When I connect to some sites (not always the same ones), it tends to rat out the ...
2
votes
3answers
399 views

How does a Google iOS app save and restore active accounts across app deletion?

On an iOS 8 device, I installed Google Hangouts and upon first launch, it pre-populated an account that was previously associated with a different, and long ago deleted, Google app. Since I had just ...
2
votes
1answer
248 views

Prevent administrator from resetting password of another administrator

I'm running Mac OS X Yosemite. There are multiple administrator accounts in my Mac. I don't want an administrator to snoop into another administrator's account. Is there any way I can prevent an ...