If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
458 views

Finally upgraded my Mac, now I can't install security update

I finally upgraded from Snow Leopard to Mountain Lion (I didn't trust my older iMac (iMac11,3) to run the newest OS X) but now I can't install an important security update, the Security Update 2015-...
9
votes
2answers
522 views

How can the average user easily validate the integrity of their Mac's firmware?

How can the average user easily validate the integrity of their Mac's firmware? Before you downvote this question or lecture me on how I am paranoid and no one should ever need to do that, please ...
1
vote
0answers
160 views

Malware attack freezes Safari—prevention or detection?

Several times in the past few months, a web link has popped up a box alleging that malware has been detected and I should click OK to let them fix it. I'm not stupid enough to even click anywhere ...
0
votes
0answers
12 views

Infecting a new Macbook by plugging in an iPhone that was previously plugged into a potentially compromised old Macbook

I have an non-jailbroken iPhone 5s that was previously plugged into a Macbook that was potentially compromised by a malicious presence. I bought a new Macbook recently. If I were to plug this iPhone ...
0
votes
0answers
26 views

Reinfecting a new Macbook by signing into an iCloud account that was used on a potentially compromised Macbook

I use iCloud for Find My capabilities and to sync contacts and calendar entries only (no iCloud Drive, Keychain or iPhotos etc) between my Macbook and iPhone. The Apple ID I currently use that's ...
3
votes
0answers
347 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
0
votes
1answer
97 views

OS X management profiles / root certificate

My father asked me to sort out some things on his MacBook. He's recently left his company where he used his laptop on the company servers/IT system whilst he was there. At some point in the past he ...
7
votes
1answer
2k views

I want to make an Apple ID, but someone has already used my email to create their own. How do I kick them out completely?

Since this person has used my email as their login, I was able to reset the password since it was listed as the primary email. Unfortunately this person has set their own security questions and ...
0
votes
3answers
686 views

Is eBay app update bypassing Apple's app store screening?

On iPad, the ebay app keeps popping up a screen asking me to update. No updates have shown available in the app store for a long time. Is this a way to get around Apple's vetting process and give ...
5
votes
1answer
6k views

iOS auto-erase after 10 wrong passcode attempts: will the iCloud activation lock still work?

After a recent and unsettling experience of having my iPhone stolen a few weeks ago, I have tried to harden the security settings on my new device. The old device has still not responded to a remote ...
1
vote
1answer
2k views

impact and removal of XcodeGhost

Unfortunately, I installed some of the apps mentioned on this list, and confirmed that the versions I have are still compromised by XcodeGhost: http://researchcenter.paloaltonetworks.com/2015/09/...
1
vote
2answers
63 views

How do I have any privacy on my mini iPad?

So my sister & her boyfriend are all into this hacking and spying and invading people's privacy and doing malicious things to the with what they gather. They have been doing it to me and trying to ...
1
vote
0answers
205 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
15
votes
3answers
29k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following these steps however when I run the application I ...
0
votes
0answers
96 views

how to restore user password using Time Machine

Using 10.9.5, about a month ago I reset a user's password. The user forgot her password, so I reset it using a CMD-R reboot and passwordreset. Of course this left her login keychain out of sync (maybe ...
0
votes
1answer
453 views

How do I uninstall the Proxinator Security Agent Plugin?

A while ago, using OS X Mavericks, I installed an OS X utility named Proxinator, which was supposed to allow me to lock and unlock my Mac by proximity sensing my iPhone using bluetooth and a companion ...
0
votes
1answer
28 views

Secure Login Equivalent on OS X

On Windows you can configure "Secure Login" so that you have to press Control + Alt + Delect to show the login screen like so: Does this feature exist on OS X or is there a third-party application ...
0
votes
1answer
66 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
236 views

What if someone knows my iPhone passcode (not simple passcode) & restriction passcode?

Lets say I was just taking a walk or was in a train or a bus. I had to unlock my iPhone with passcode there and use the restriction passcode. Somehow a person saw me entering the passcode and I ...
1
vote
1answer
139 views

Securely remove personal information, without reinstall on Yosemite?

Scenario: I have a work provided Macbook on Yosemite that I've used for 2 years. All company files are stored in cloud drives, and all company programs are similarly cloud based. The company does ...
7
votes
3answers
2k views

How can I secure a Retina MacBook Pro to a desk? (similar to how the older MacBook Pro could use a Kensington Lock)

I work for a company renting office space from a downtown skyscraper. In order to deter casual theft from building employees and cleaning staff my company prefers we secure our laptops to our desks ...
1
vote
0answers
40 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is 5b:dc:2a:b4:cd:bf:e8:e3:...
0
votes
1answer
42 views

Can I verify if data protection was enabled from a backup?

I recently lost my phone but have a very recent backup. I've enabled the remote wipe feature using iCloud but the device has not been online since being lost. It was low on battery power so likely ...
1
vote
1answer
2k views

iPhone stolen, Activation Lock was turned off but iPhone is still iCloud device list. Can it still be used by the thief? [closed]

My phone was snatched. Its Activation Lock was turned off and it was not signed in on iCloud. However, I still see my phone as listed among the devices in iCloud. Since the iPhone is still in my ...
2
votes
3answers
2k views

Stolen iPhone: what is the security risk?

Unfortunately today my iPhone 6 Plus was stolen from my pocket on the streets of Sao Paulo. I did not have cellular data turned on. I had Touch ID and a 4 digit number lock in place. How much data ...
0
votes
1answer
47 views

iPhone security question

I think I made a rather stupid mistake My iPhone battery was getting old, so I went to a local repair shop to get it replaced. It's not an Apple Store, just a couple of guys who fix PCs and do odd ...
0
votes
0answers
66 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
2
votes
1answer
834 views

On my iPad, how can I tell if a website is secure on Safari?

Does the web address have to be in green, or is it secure if it's in black?
1
vote
2answers
131 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...
1
vote
1answer
49 views

Sharing folders between 2 users

I just downloaded a virtual box VM which I will be sharing with my wife. Both my wife and I have accounts on our mac. I copied the downloaded VM into /Users/Shared/MyNewVM Then I went into System ...
13
votes
2answers
4k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
1
vote
0answers
168 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
1answer
97 views

Does Facebook's “find friend” algorithm get data from the iOS app?

When I download a Facebook app on my smartphone (e.g. iPhone), what data does Facebook then access? Names? Telephone numbers?
-5
votes
1answer
915 views

Is there a SDK or private framework that can access iMessage contents from an iOS app on a non-jailbroken phone?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", on StackExchange Security, linked below. I wish to know the internal details of how ...
0
votes
0answers
35 views

Mail Failed to Load After Changed Gmail Password or Enable TFA

This happens after either you change your gmail password or enable Two Factor Authentication. Anyone faced this before and how did you resolve this? Thanks.
6
votes
1answer
849 views

Is an Erased, Stolen iPhone, Safe on iCloud?

My wife's iPhone was stolen, and because our iCloud is connected via Family Sharing, I immediately put it on stolen mode and then erase mode to remove all the data once it came online. I checked ...
0
votes
0answers
30 views

How Can Web Sites (Ad Networks) Connect to Different IPs?

I use Safari on my Mac, and I also use Little Snitch (Awesome program, but it can get in the way, from time to time). When I connect to some sites (not always the same ones), it tends to rat out the ...
2
votes
3answers
360 views

How does a Google iOS app save and restore active accounts across app deletion?

On an iOS 8 device, I installed Google Hangouts and upon first launch, it pre-populated an account that was previously associated with a different, and long ago deleted, Google app. Since I had just ...
2
votes
1answer
224 views

Prevent administrator from resetting password of another administrator

I'm running Mac OS X Yosemite. There are multiple administrator accounts in my Mac. I don't want an administrator to snoop into another administrator's account. Is there any way I can prevent an ...
1
vote
0answers
72 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
1answer
36 views

Yosemite Security Defaults

I've just made a fresh Yosemite install and noticed two strange security defaults Firewall is disabled User is created as an admin account It is hard for me to imagine how a disabled firewall is a ...
1
vote
1answer
27 views

What are the recommended steps to take before selling an iPhone? [duplicate]

I "lost" my iPhone at work, could not find it anywhere. I reported it lost, and got another through the insurance. A month later, I found it hiding in a file in one my desk drawers. The phone is just ...
3
votes
1answer
1k views

What happens after a stolen Mac was remotely wiped?

A Macbook Air was stolen from us last month and we immediately activated "Find my Mac" and a few minutes later we requested it to be wiped (through iCloud). Today, 1 month later, we received an email ...
0
votes
0answers
84 views

A Macbook was stolen and returned: How can I detect the changes that were made on the OS?

My Macbook Pro running OS X Yosemite and a Windows 7 Bootcamp was stolen a month ago when I left it sitting in Frankfurt airport. I had used FindMyiPhone to add a lock and wipe it but it never came ...
2
votes
0answers
32 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
0
votes
0answers
36 views

Can I use our SSL certificate for digital mail signatures?

We have a GoDaddy SSL Certificate that we use on our OS X Server for securing some web sites and the Mail Service running on it. Our company website FQDN is one of the 5 named on that certificate but ...
0
votes
1answer
33 views

How do i know if install isn't malicious

I just got my first osx device (a late 2012 mac mini), the last owner said he did a fresh install of yosemite. Is there a way to check that he didn't install any mallware/spyware?
1
vote
2answers
152 views

Guest Account as Thief Trap in case of losing MacBook

One week ago my MBPro has been stolen, and unfortunately no "Where's My Mac" like's helped. My idea for securing my next MacBook is to create Password-free/guest-like account in case of another bad ...
1
vote
1answer
120 views

Empty Firmware Password?

I was wanting to reveal the EFI password on my Mac using this in the Terminal: sudo nvram security-password but instead of outputting hex data, it gives me this: nvram: Error getting variable - '...
1
vote
1answer
183 views

Keychain Issue - Yosemite

Apologies for the vague title - I couldn't really think of any other way to sum up my problem. I've been trying all day to work my own way around this issue but I've ultimately hit a brick wall so ...