If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
0answers
409 views

“Delete references & files” with keychain using security delete-keychain

I have a script that uses a keychain to store various privates keys and certificates into a certain keychain (different from login and System). I'd like to enable it to purge all the content of its ...
0
votes
0answers
32 views

Is CUPS (Common Unix Printing Service) a security issue?

Is this service, using port 631 being open create any security risks ? And by this I mean a way for hackers to somehow compromise a system by injecting some type of code to elicit a connection or ...
1
vote
1answer
42 views

Earphone security risk

Can plugging public earphones in our iPhone 5's audio jack pose any security risk? Can our data (pictures, videos) be accessed? How often one can try a unknown earphone into iPhone 5c's audio jack in ...
0
votes
0answers
164 views

Mac mini 2007 (Core 2 Duo) with OS X Lion - better OS options?

I have a Mac mini 2007 (Core 2 Duo) running OS X Lion 10.7.5. It has a 32 bit EFI and does not officially support any newer version of OS X. After a long time, I'm now concerned about not having ...
9
votes
1answer
3k views

How to prevent storing the WiFi password on the recovery partition?

I always wondered how my Mac could connect to the internet when the recovery partition is booted and my main system partition is locked (filevault2). Some googling revealed today (e.g. here, here, ...
-2
votes
1answer
71 views

iCloud login issue [closed]

I have lost my @me.com password and answer to 2nd security question. I have tried many ways but all suggestions ends at verify via email which I have lost password to access and 2nd is answer the ...
0
votes
1answer
84 views

Where does OS X get defaults from in Guest User Web access Parental Controls?

I did not put these here, I don't know where they came from. WHOIS by IP seems to indicate they are from Amsterdam? (149.154.175.50 copy-pastable for anyone who wants to check)
0
votes
2answers
1k views

How can I upgrade Mac OS without the administrator password?

I recently received an old iMac secondhand. I have no way to reach the original owner. I am trying to upgrade the OS software, but the prompts demand the administrator's name (which is auto-filled) ...
2
votes
1answer
249 views

What information is accessible through iCloud? Can the administrator on my home PC access these files?

Recently my texts were accessed somehow and I'm not exactly sure how this person did it. We share the same PC at home but have separate user accounts with passwords on them. My iCloud and iTunes also ...
2
votes
0answers
120 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
0
votes
0answers
28 views

How to prevent AutoOpen feature for apps

Several vendors provide their drivers with AutoOpen feature: image file contains single application SomeApp usually installs drivers or connection manager. I've discovered how it works: Mac OS X ...
0
votes
1answer
39 views

What is the worst thing that will happen if I do not update iTunes to its latest version?

Okay, I like iTunes, and it is a wonderful software. I run it on Windows, unfortunately sometimes when I do update to minor version updates, the whole windows panel of iTunes becomes unresponsive and ...
3
votes
1answer
1k views

No secure ad-hoc network with Yosemite?

iMac (late 2009) OSX 10.10.3 iPads (a 1 and a 2) iOS 8.? I am a retired IT engineer playing at being a DJ/VJ. That means I'm often in a room with lots of folks with cells and iPads. Before Yosemite,...
3
votes
0answers
145 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
2
votes
2answers
496 views

How to prevent Safari saved passwords being seen with Mac password?

In Safari on OS X via Safari/Preferences/Passwords/ it is possible to view all saved passwords in plain text by entering the Mac password. I want to use a different password. Is this possible? I ...
3
votes
0answers
71 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's network;...
-2
votes
3answers
169 views

Killing discoveryd process affected by malware [closed]

There was a malware attack on my system. It has affected the discoveryd process. I do a grep to find the process id for related discoveryd processes. I get the following - _mdnsresponder 6115 ...
9
votes
2answers
567 views

How to prevent keychain passwords being seen with iPhone passcode?

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone. Is it possible to still be able to use Keychain passwords and ...
1
vote
1answer
108 views

OS X Server safely facing WAN and LAN?

Our OS X Server serves our company DNS, web and mail with an external IP address to the Internet. It currently does not have a local address on the LAN and thus cannot be used e.g. for software update ...
0
votes
0answers
144 views

OS X lets me run softwareupdate command without sudo: is this normal?

I am able to run and install updates with the softwareupdate command without prefixing sudo. Is this normal, can anybody else do this on there system? The man page states that admin privileges are ...
1
vote
0answers
707 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
1answer
119 views

Get alerted whenever someone uses your Mac?

I have a dedicated Mac Mini in a colocation that I access via Remote Desktop. I trust the colocation provider, but I don't trust my password is secure enough. Without resorting to a more secure ...
1
vote
1answer
191 views

sudo asking for password even though user doesn't have a password set

I have a computer that doesn't not require a password. I'd like this to continue into sudo, but unfortunately it doesn't recognise a user not having a password. According to Apple the sudo command ...
2
votes
1answer
170 views

FileVault 2 Encrypted drive was reformatted by thief then returned. Is the original encrypted data salvageable?

I had a Macbook Air Yosemite which was FileVault 2 encrypted. The laptop was stolen from me. The thief was able to reinstall OS X and some apps (was bringing it to market for sale). The laptop was ...
3
votes
2answers
6k views

OS X 10.9: where are password hashes stored

I think on previous versions of OS X, password were stored in the /etc/shadow file. Nevertheless, this file doesn't appear to exist in the later versions of the operating system - specifically OS X ...
0
votes
1answer
105 views

Cable lock with Mac Mini

How do I use a cable lock with my Mac Mini? It doesn't appear to have any mounts for the typical cable lock. Do I have to get an enclosure and secure that to the desk?
3
votes
3answers
468 views

Does the Apple Watch really identify “you”?

In several places in the iOS Apple Watch settings app, important functionality depends on "you" wearing the watch. Critically under the settings for unlocking the watch without requiring a passcode (...
2
votes
1answer
107 views

Screen saver no longer asks for a password

I'm using a MacBook Air 13" mid 2012 with Yosemite 10.10.3, it rebooted itself this morning without a reason and since then the screen saver is no longer asking for a password on unlock. This is a ...
4
votes
2answers
2k views

How to dump the content of keychain from the shell?

I'm testing the following command-line in the Terminal: sudo security dump-keychain -d login.keychain which I'd like to use to save all my passwords into a file. However when I run it, it keep ...
0
votes
1answer
126 views

How do you control the security of Firefox browser in Yosemite to run educational Java app?

I am trying to run the following Java applet in the following web page: http://artint.info/demos/rl/q.html However, Firefox is blocking it due to a security issue. Not sure if it's an Apple issue ...
1
vote
1answer
145 views

MAC Filtering in Internet Sharing

How can I enable MAC Filtering on my MAC OSX 10.9.4? I tried adding <key>allow</key> <array> <string>0:17:43:a3:2d:45</string> </array> to my /etc/bootpd.plist, ...
2
votes
1answer
880 views

How reliable and trustworthy are the Objective-See Security tools (KnockKnock (UI), Dynamic Hijack Scanner and BlockBlock)?

DHS found an issue Is this a false positive? Anybody else with the same message? I installed BlockBlock. What do you think about it? Do you trust those Security tools? BlockBlock (beta) ...
4
votes
1answer
8k views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
1answer
48 views

Can your information security be compromised by opening attachments in Gmail in iOS?

I know people can put virus or other dangerous programs in email attachments and send them to you, but is that just for the computer world and not tablets? I mean, if you get such an email to your ...
1
vote
0answers
1k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
0
votes
1answer
122 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
2
votes
3answers
749 views

How can I install a single app from an unknown developer?

I am new to Mac and am trying to install a Hex Editor. Google sent me to "Hex Fiend", but, when I try opening it, I get "'Hex Fiend.app' can't be opened because it is from an unidentified developer." ...
5
votes
1answer
242 views

How to limit any devices to appear on any Bonjour/Airplay capable devices close by?

This is an issue at my school district where I work as a network admin. Right now, I could see around the list of at least 15-20 Apple TVs that is located across school buildings when I press on ...
0
votes
1answer
153 views

How to set up Mac for multiple user remote access log in and a shared network drive?

I have users who want to share a highpowered mac in a lab. It has a decent processor and a ton of RAM. They want to be able to remotely access this mac from both PC/Mac just like a user would be able ...
0
votes
0answers
222 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
28
votes
4answers
25k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
1
vote
1answer
257 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
6
votes
2answers
667 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...
3
votes
2answers
228 views

Are OS X Security Updates Cumulative?

I can't seem to find a definitive answer anywhere, but are Mac OS X Security Updates cumulative? The update in question is 2015-004. I've checked https://support.apple.com/en-us/HT204659 but it doesn'...
4
votes
2answers
972 views

What lock can secure a 4th generation Time Capsule from theft?

The 4th generation Time Capsule has a security slot at the far right of the back panel: However, the manual does not mention what kind of lock I can attach to it. What locks are compatible? For ...
1
vote
1answer
45 views

password built in an app for restricted download?

I have built an app. It's a magazine and a few brochures with rich content. I will upload it as a multi issue app. Once it's approved and available in the iTunes app store, I would like it to be ...
0
votes
0answers
43 views

Any verification tricks for Mac OS X files?

Is there a good way to verify the various files in Mac OS X? Ideally, one wants to verify system files in an installed system, but right now I'm curious about verifying the Yosemite installer. If ...
5
votes
2answers
11k views

How do I encrypt an external drive with FileVault 2 in OSX Yosemite

Ok, so according to https://www.apple.com/osx/what-is/security/ I should be able to encrypt ANY external drive..."with ease" using FileVault 2. I have a brand new (empty) 2TB Fantom Drive model: ...
0
votes
0answers
73 views

Ping being hijacked?

On my Mac terminal, I typed cat /etc/resolv.conf nameserver 8.8.8.8 nameserver 8.8.4.4 and I do a dig dig www.facebook.com ; <<>> DiG 9.8.3-P1 <<>> www.facebook.com ;; ...
1
vote
1answer
1k views

iMac password stopped working, Apple Persistent State Encryption shows a recent modified date

I'm not sure if we should be worried... Mom does not change passwords for her iMac system login, nor do I, but when I went to update some software this morning, the password doesn't work, nor can I ...