If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

14
votes
3answers
26k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following these steps however when I run the application I ...
0
votes
0answers
89 views

how to restore user password using Time Machine

Using 10.9.5, about a month ago I reset a user's password. The user forgot her password, so I reset it using a CMD-R reboot and passwordreset. Of course this left her login keychain out of sync (maybe ...
0
votes
1answer
410 views

How do I uninstall the Proxinator Security Agent Plugin?

A while ago, using OS X Mavericks, I installed an OS X utility named Proxinator, which was supposed to allow me to lock and unlock my Mac by proximity sensing my iPhone using bluetooth and a companion ...
0
votes
1answer
28 views

Secure Login Equivalent on OS X

On Windows you can configure "Secure Login" so that you have to press Control + Alt + Delect to show the login screen like so: Does this feature exist on OS X or is there a third-party application ...
0
votes
1answer
62 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
207 views

What if someone knows my iPhone passcode (not simple passcode) & restriction passcode?

Lets say I was just taking a walk or was in a train or a bus. I had to unlock my iPhone with passcode there and use the restriction passcode. Somehow a person saw me entering the passcode and I ...
1
vote
1answer
131 views

Securely remove personal information, without reinstall on Yosemite?

Scenario: I have a work provided Macbook on Yosemite that I've used for 2 years. All company files are stored in cloud drives, and all company programs are similarly cloud based. The company does ...
7
votes
3answers
2k views

How can I secure a Retina MacBook Pro to a desk? (similar to how the older MacBook Pro could use a Kensington Lock)

I work for a company renting office space from a downtown skyscraper. In order to deter casual theft from building employees and cleaning staff my company prefers we secure our laptops to our desks ...
1
vote
0answers
40 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is ...
0
votes
1answer
42 views

Can I verify if data protection was enabled from a backup?

I recently lost my phone but have a very recent backup. I've enabled the remote wipe feature using iCloud but the device has not been online since being lost. It was low on battery power so likely ...
1
vote
1answer
2k views

iPhone stolen, Activation Lock was turned off but iPhone is still iCloud device list. Can it still be used by the thief? [closed]

My phone was snatched. Its Activation Lock was turned off and it was not signed in on iCloud. However, I still see my phone as listed among the devices in iCloud. Since the iPhone is still in my ...
2
votes
3answers
1k views

Stolen iPhone: what is the security risk?

Unfortunately today my iPhone 6 Plus was stolen from my pocket on the streets of Sao Paulo. I did not have cellular data turned on. I had Touch ID and a 4 digit number lock in place. How much data ...
0
votes
1answer
46 views

iPhone security question

I think I made a rather stupid mistake My iPhone battery was getting old, so I went to a local repair shop to get it replaced. It's not an Apple Store, just a couple of guys who fix PCs and do odd ...
0
votes
0answers
65 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
2
votes
1answer
741 views

On my iPad, how can I tell if a website is secure on Safari?

Does the web address have to be in green, or is it secure if it's in black?
1
vote
2answers
120 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...
1
vote
1answer
48 views

Sharing folders between 2 users

I just downloaded a virtual box VM which I will be sharing with my wife. Both my wife and I have accounts on our mac. I copied the downloaded VM into /Users/Shared/MyNewVM Then I went into System ...
13
votes
2answers
3k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
1
vote
0answers
157 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
1answer
92 views

Does Facebook's “find friend” algorithm get data from the iOS app?

When I download a Facebook app on my smartphone (e.g. iPhone), what data does Facebook then access? Names? Telephone numbers?
-5
votes
1answer
778 views

Is there a SDK or private framework that can access iMessage contents from an iOS app on a non-jailbroken phone?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", on StackExchange Security, linked below. I wish to know the internal details of how ...
0
votes
0answers
35 views

Mail Failed to Load After Changed Gmail Password or Enable TFA

This happens after either you change your gmail password or enable Two Factor Authentication. Anyone faced this before and how did you resolve this? Thanks.
6
votes
1answer
819 views

Is an Erased, Stolen iPhone, Safe on iCloud?

My wife's iPhone was stolen, and because our iCloud is connected via Family Sharing, I immediately put it on stolen mode and then erase mode to remove all the data once it came online. I checked ...
0
votes
0answers
30 views

How Can Web Sites (Ad Networks) Connect to Different IPs?

I use Safari on my Mac, and I also use Little Snitch (Awesome program, but it can get in the way, from time to time). When I connect to some sites (not always the same ones), it tends to rat out the ...
2
votes
3answers
310 views

How does a Google iOS app save and restore active accounts across app deletion?

On an iOS 8 device, I installed Google Hangouts and upon first launch, it pre-populated an account that was previously associated with a different, and long ago deleted, Google app. Since I had just ...
2
votes
1answer
191 views

Prevent administrator from resetting password of another administrator

I'm running Mac OS X Yosemite. There are multiple administrator accounts in my Mac. I don't want an administrator to snoop into another administrator's account. Is there any way I can prevent an ...
1
vote
0answers
66 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
1answer
35 views

Yosemite Security Defaults

I've just made a fresh Yosemite install and noticed two strange security defaults Firewall is disabled User is created as an admin account It is hard for me to imagine how a disabled firewall is a ...
1
vote
1answer
26 views

What are the recommended steps to take before selling an iPhone? [duplicate]

I "lost" my iPhone at work, could not find it anywhere. I reported it lost, and got another through the insurance. A month later, I found it hiding in a file in one my desk drawers. The phone is just ...
3
votes
1answer
954 views

What happens after a stolen Mac was remotely wiped?

A Macbook Air was stolen from us last month and we immediately activated "Find my Mac" and a few minutes later we requested it to be wiped (through iCloud). Today, 1 month later, we received an email ...
0
votes
0answers
81 views

A Macbook was stolen and returned: How can I detect the changes that were made on the OS?

My Macbook Pro running OS X Yosemite and a Windows 7 Bootcamp was stolen a month ago when I left it sitting in Frankfurt airport. I had used FindMyiPhone to add a lock and wipe it but it never came ...
2
votes
0answers
32 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
0
votes
0answers
36 views

Can I use our SSL certificate for digital mail signatures?

We have a GoDaddy SSL Certificate that we use on our OS X Server for securing some web sites and the Mail Service running on it. Our company website FQDN is one of the 5 named on that certificate but ...
0
votes
1answer
33 views

How do i know if install isn't malicious

I just got my first osx device (a late 2012 mac mini), the last owner said he did a fresh install of yosemite. Is there a way to check that he didn't install any mallware/spyware?
1
vote
2answers
146 views

Guest Account as Thief Trap in case of losing MacBook

One week ago my MBPro has been stolen, and unfortunately no "Where's My Mac" like's helped. My idea for securing my next MacBook is to create Password-free/guest-like account in case of another bad ...
1
vote
1answer
113 views

Empty Firmware Password?

I was wanting to reveal the EFI password on my Mac using this in the Terminal: sudo nvram security-password but instead of outputting hex data, it gives me this: nvram: Error getting variable - ...
1
vote
1answer
178 views

Keychain Issue - Yosemite

Apologies for the vague title - I couldn't really think of any other way to sum up my problem. I've been trying all day to work my own way around this issue but I've ultimately hit a brick wall so ...
0
votes
0answers
377 views

“Delete references & files” with keychain using security delete-keychain

I have a script that uses a keychain to store various privates keys and certificates into a certain keychain (different from login and System). I'd like to enable it to purge all the content of its ...
0
votes
0answers
31 views

Is CUPS (Common Unix Printing Service) a security issue?

Is this service, using port 631 being open create any security risks ? And by this I mean a way for hackers to somehow compromise a system by injecting some type of code to elicit a connection or ...
1
vote
1answer
42 views

Earphone security risk

Can plugging public earphones in our iPhone 5's audio jack pose any security risk? Can our data (pictures, videos) be accessed? How often one can try a unknown earphone into iPhone 5c's audio jack in ...
0
votes
0answers
159 views

Mac mini 2007 (Core 2 Duo) with OS X Lion - better OS options?

I have a Mac mini 2007 (Core 2 Duo) running OS X Lion 10.7.5. It has a 32 bit EFI and does not officially support any newer version of OS X. After a long time, I'm now concerned about not having ...
9
votes
1answer
3k views

How to prevent storing the WiFi password on the recovery partition?

I always wondered how my Mac could connect to the internet when the recovery partition is booted and my main system partition is locked (filevault2). Some googling revealed today (e.g. here, here, ...
-2
votes
1answer
69 views

iCloud login issue [closed]

I have lost my @me.com password and answer to 2nd security question. I have tried many ways but all suggestions ends at verify via email which I have lost password to access and 2nd is answer the ...
0
votes
1answer
81 views

Where does OS X get defaults from in Guest User Web access Parental Controls?

I did not put these here, I don't know where they came from. WHOIS by IP seems to indicate they are from Amsterdam? (149.154.175.50 copy-pastable for anyone who wants to check)
0
votes
0answers
33 views

Missing Items From KeyChain Dumps

I'm using the process outlined here to export my OS X keychain items to .csv files. After getting many blank .csv files, I adapted the script using this guy's suggestion. After making this change, ...
0
votes
2answers
1k views

How can I upgrade Mac OS without the administrator password?

I recently received an old iMac secondhand. I have no way to reach the original owner. I am trying to upgrade the OS software, but the prompts demand the administrator's name (which is auto-filled) ...
2
votes
1answer
225 views

What information is accessible through iCloud? Can the administrator on my home PC access these files?

Recently my texts were accessed somehow and I'm not exactly sure how this person did it. We share the same PC at home but have separate user accounts with passwords on them. My iCloud and iTunes also ...
2
votes
0answers
118 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
0
votes
0answers
26 views

How to prevent AutoOpen feature for apps

Several vendors provide their drivers with AutoOpen feature: image file contains single application SomeApp usually installs drivers or connection manager. I've discovered how it works: Mac OS X ...
0
votes
0answers
59 views

Messages bug on iOS 8.2, how to clean or restore Messages or iOS?

I have a serious security bug on iOS 8.2 I am able to reproduce. This bug is well known and within Messages. When I start Messages the application displays a white screen for a few seconds and exit ...