If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
2answers
1k views

FileVault security hole when used on SSDs

I just woke up to the fact that it looks like user data can be leaked when using FileVault and Migration Assistant on an SSD on a new Mac when following the default prompts. When I set up a new Mac, ...
0
votes
1answer
32 views

Allow program to make changes

I have a program called ServiceCenter from Native Instruments which is basically a downloader and installer for updates etc. But every time I open it it prompts for my password to allow it to make ...
0
votes
1answer
121 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
0
votes
1answer
53 views

iCloud Keychain search on iOS

Am I just not seeing a way to search my iCloud keychain when I go to (iOS) Settings>Safari>Passwords & AutoFill>Saved Passwords ? The list is very long and they don't even give me a way to ...
3
votes
4answers
4k views

How do I force iOS to check for updates?

I've got an iPad2 that's supposedly susceptible to the latest encryption hole in iOS 7. However, it's not offering me the update automatically. Where can I go to force it to check for updates?
11
votes
4answers
3k views

Does iOS 5 have a SSL security bug that got patched on iOS 6/7?

Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug. I can't find anything official about iOS 5. Does iOS 5 have the same bug? Please cite your answer.
15
votes
6answers
43k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
0
votes
0answers
4k views

Forgot iCloud account security answers. No recovery email set. Reset link doesn't get displayed

I've forgotten my iCloud account security questions' answers. I also haven't set a recovery email, I think, because the link to reset the questions is missing. I can login to my account using my ...
1
vote
3answers
43 views

MBP security and safety

At work, I rely on a public wifi and don't see any good security standards or requirements or tips from Apple. Are there some general tips on first steps to take for securing OS X - if so they would ...
1
vote
3answers
644 views

How can I wipe a disk from a Mac with firmware password set?

I'm in a somewhat odd situation: I need to wipe the disk of a MBP, but I can't boot into Recovery Mode/from a CD/etc. as there is a firmware password set. Is there a way to wipe the disk from within ...
2
votes
3answers
217 views

How can I get Apple mail or Outlook 2011 to look up SMIME encryption certificates for users?

I want the ability to lookup an encryption certificate for SMIME in Outlook for recipients who have SMIME certs, but I just don't have their public key. I noticed the keychain has a directory ...
0
votes
0answers
3k views

iPhone 5S stolen, name was changed in Find my iPhone and inforrmation request about factory reset behavior

I got my 5S stolen Thursday and today it was back online in Find My iPhone. First, I would like to know if there's a way to know if the iPhone is in locked mode or not. Next, from the time it got ...
3
votes
1answer
2k views

List failed login attempts

I want to see if somebody has tried to log in on my computer, which is running Mavericks. I have seen the Q&A's How do I detect failed remote login attempts and block them? Where do I find the ...
4
votes
1answer
59 views

Anything comparable to Windows' “Network Location” in MacOS?

This is my first Mac. On Windows I can set each network connection as either Home, Work or Public using "Network Location". Each mode has different sharing and security options. Is there a way to do ...
11
votes
2answers
3k views

I was physically robbed and now can't manage my Apple ID… how can I extract my purchases?

TL;DR Since it seems obvious that at present Apple can do nothing to help me: I need some way of getting as much of my content (music/apps/contacts/etc) out of this account... what can I do? All of ...
1
vote
1answer
345 views

How can I give an app permanent permission so it doesn't ask for my password every time?

I am using an application called Hostbuddy to manage entries in my hosts file. It works great, the only problem is that is asks for my password every time I use it, which adds up to a lot of ...
1
vote
1answer
190 views

How do I change askForPasswordDelay from the command line? dwrite alone doesn't work

I normally run my Mac with a very long password delay on the screensaver. Sometimes, though, I want to reduce the delay to just 1-2 seconds. This command is supposed to reduce the time for the delay ...
1
vote
1answer
675 views

Google Chrome would like to control this computer using Accessibility

I installed LastPass and on restarting Chrome got a notification similar to this: http://superuser.com/questions/657015/google-software-update-would-like-to-control-this-computer-what, except it was ...
0
votes
2answers
102 views

Which drive to I select to completely erase my system's hard drive?

Apple's instructions for completely erasing a system say to "select your startup disk". But my system shows a hardware drive icon and some gobbledygook as a name, and under that another icon and name ...
0
votes
1answer
71 views

Do root actions as non root in Mavericks?

Why does this work as (not) expected? touch filename chown root filename sudo chmod 700 filename rm filename I get asked if I want to delete the file an then!?!? The file gets really deleted! How ...
-1
votes
1answer
275 views

How to keep my PowerPC Macbook Pro running OSX 10.5.8 Leopard secure?

I have a pretty fast and good Macbook Pro with PowerPC chips inside. I cannot upgrade to newer operating systems anymore, and do not receive any upgrades anymore. Therefore, I an concerned about how ...
2
votes
1answer
385 views

codesign reports invalid Info.plist on an app dl'ed from the internet. Has the app been possibly compromised?

I downloaded an app from github (mac2imgur), and it refused to run. $ codesign -vv mac2imgur.app mac2imgur.app: invalid Info.plist (plist or signature have been modified) In architecture: x86_64 It ...
3
votes
2answers
145 views

What are the implications of linking your Apple ID to your Mac User Account in OS X System Preferences?

What are the various effects, in terms of usability, privacy and security, of storing your Apple ID in 'Users & Groups’ in your Mac System Preferences, like so? E.g., could one effect be not ...
5
votes
2answers
1k views

Strange message in terminal when visiting a website

I have my terminal open most of the time. Today while I was searching for a software, search results took me to http://download.cnet.com. I didn't like the software, closed the page and carried on. ...
0
votes
2answers
120 views

how can i stop the thief from using my iPhone?

My i phone 5 was stolen and i'm freaking out because the thieves keep on using my i phone. i knew this because when i contacted my i phone it answered me. i tried to locate it but it keep on showing ...
1
vote
2answers
78 views

Is my Macbook safe?

So, I own a macbook but I'm unsure whether I need an antivirus software with real-time scanning capability or not. I don't have flash or Java enabled in my browser (using safari). I've configured my ...
2
votes
4answers
821 views

Steps to be done before selling your iPhone

I was curious about the things that we need to do before selling your iPhone or even before giving it back to Apple (Apple has a program where they will refund you some money if you want to get a new ...
1
vote
1answer
303 views

How to elegantly obstruct the iSight lens?

Sometimes you see people placing a sticker over the iSight camera on their MacBook's such that no one can spy on them. This might seem ridiculous, but from a previous answer it is clear that it is ...
1
vote
2answers
822 views

Securely wipe all user data from iBook G4 / OSX 10.4?

I have unearthed an old working iBook G4 which I'd like to clean and then give away. I don't have a copy of 10.4 on hand to install. And I'm not terribly interested in wiping the installed ...
2
votes
4answers
2k views

How to get rid of booby-trapped pop ups to update flash player?

I'm coming across a malicious pop up to update my flash player. The message in the pop up: Warning! Your Adobe Flash Player version is outdated. Security risks. Please update now. I've seen this ...
5
votes
3answers
3k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but ...
1
vote
2answers
427 views

Get Apple ID security questions over email

I have forgotten the answers to my security questions, but I don't want to/have time to call apple support and have them tell me my questions. Is there any way to maybe reset/get them over email?
2
votes
1answer
60 views

Secure access to data while retaining convenience and performance

I am looking for a convenient solution to the following problem: I have some large data (tens of GB) that resides on the hard drive of a Mac. Access to the data needs to be restricted so even users ...
3
votes
2answers
507 views

What are the numerous incoming connections I see on public wifi for?

In general I have incoming connections disabled by my security software (Little Snitch). But even when I do this, on public wifi, I see numerous incoming connections for netbios and mDNSResponder ...
1
vote
2answers
684 views

What are 'com.apple.access_ssh' and 'com.apple.access_screensharing'; can I delete them?

When I examine the list of users and groups on my machine (OSX 10.9) with id I get: uid=501(Rax) gid=20(staff) groups=20(staff) 103(Rax), 12(everyone), 61(localaccounts), ...
1
vote
0answers
14 views

Prevent apps from using wifi without VPN [duplicate]

When I travel and am connecting to public wireless networks (or, really, any wireless network I don't control), I use a VPN (either L2TP with the built-in networking support or OpenVPN with ...
1
vote
2answers
2k views

How to recover a compromised Mac OS 10.8.5

Computer got Safari hijacked by the "police" virus. Temporary solved by using Firefox instead. Questions: Read on numerous forums that you could reinstall OS X by holding down cmd + R keys. ...
2
votes
1answer
425 views

Securely delete guest accounts in OSX

I need a way to securely wipe guest accounts accounts off of my machine. On OSX, guests are automatically deleted on logout, with this deletion being done using the "RM" command. I need a way to alter ...
2
votes
0answers
40 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
0
votes
1answer
80 views

Is the iBooks app sandboxed on Mavericks?

I would like to know if ibooks app on Mavericks is sandboxed. I might read some unsecure ebooks (from internet).
0
votes
0answers
28 views

Where are updated Apple security guidelines for recent OS X versions? [duplicate]

Pardon my paranoia; but with an 80,000-strong[#] global work force, one would think the need to cover important security guidelines for users would easily be met with each new OS X release. Yet a ...
1
vote
0answers
297 views

what does installd do in privacy setting?

there is a installd icon in the setting->accessibility->privacy. it can be seen in the screenshot Any ideas what it is for?
-1
votes
3answers
145 views

Any way to be sure, that Macs don't come with built-in hardware keyloggers?

What the title says. If this is the case, even if you choose to delete everything OS X related and put entirely Linux in your box; you'd still be screwed. Hardware keyloggers sit between the keyboard ...
6
votes
2answers
1k views

How do I deactivate my microphone and iSight for security reasons?

In OS X 10.8 it is possible to log in via SSH and get access to hardware input devices like microphone and iSight camera. Thus it is possible to remotely record audio and video of other users sitting ...
1
vote
1answer
136 views

Is there a way to force ssh tunneling to be required for Screen Sharing

I have enabled Remote Management on a mac. Everything works fine when I connect from another mac using Apple's Remote Desktop app. However, I also want to have a client on a windows machine. In that ...
4
votes
2answers
5k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
1
vote
1answer
940 views

OSX Firewall: Forwarding Ports & Ignoring Non-Local Requests

On my production Debian server I use this to forward requests that come in to port 80 to a non-root process running on port 8080: sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j ...
7
votes
2answers
896 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
1
vote
2answers
124 views

Pf firewall logging

I have pf configured and working with rule sets that are logged. Where is pf logging to? How do I check these logs? How do I configure them?
3
votes
1answer
7k views

Trying to securely erase hard drive, but Security Options not available (Mavericks)

Recently got a new Macbook Pro 13″ and I'm preparing my old Macbook Air for sale. I'm following steps in the Apple Support article on this topic (as well as other similar articles I've found). I'm ...