If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
0answers
73 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
1answer
38 views

Yosemite Security Defaults

I've just made a fresh Yosemite install and noticed two strange security defaults Firewall is disabled User is created as an admin account It is hard for me to imagine how a disabled firewall is a ...
1
vote
1answer
27 views

What are the recommended steps to take before selling an iPhone? [duplicate]

I "lost" my iPhone at work, could not find it anywhere. I reported it lost, and got another through the insurance. A month later, I found it hiding in a file in one my desk drawers. The phone is just ...
3
votes
1answer
1k views

What happens after a stolen Mac was remotely wiped?

A Macbook Air was stolen from us last month and we immediately activated "Find my Mac" and a few minutes later we requested it to be wiped (through iCloud). Today, 1 month later, we received an email ...
0
votes
0answers
89 views

A Macbook was stolen and returned: How can I detect the changes that were made on the OS?

My Macbook Pro running OS X Yosemite and a Windows 7 Bootcamp was stolen a month ago when I left it sitting in Frankfurt airport. I had used FindMyiPhone to add a lock and wipe it but it never came ...
2
votes
0answers
33 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
0
votes
1answer
33 views

How do i know if install isn't malicious

I just got my first osx device (a late 2012 mac mini), the last owner said he did a fresh install of yosemite. Is there a way to check that he didn't install any mallware/spyware?
1
vote
2answers
158 views

Guest Account as Thief Trap in case of losing MacBook

One week ago my MBPro has been stolen, and unfortunately no "Where's My Mac" like's helped. My idea for securing my next MacBook is to create Password-free/guest-like account in case of another bad ...
1
vote
1answer
128 views

Empty Firmware Password?

I was wanting to reveal the EFI password on my Mac using this in the Terminal: sudo nvram security-password but instead of outputting hex data, it gives me this: nvram: Error getting variable - '...
1
vote
1answer
194 views

Keychain Issue - Yosemite

Apologies for the vague title - I couldn't really think of any other way to sum up my problem. I've been trying all day to work my own way around this issue but I've ultimately hit a brick wall so ...
1
vote
1answer
43 views

Earphone security risk

Can plugging public earphones in our iPhone 5's audio jack pose any security risk? Can our data (pictures, videos) be accessed? How often one can try a unknown earphone into iPhone 5c's audio jack in ...
9
votes
1answer
3k views

How to prevent storing the WiFi password on the recovery partition?

I always wondered how my Mac could connect to the internet when the recovery partition is booted and my main system partition is locked (filevault2). Some googling revealed today (e.g. here, here, ...
-2
votes
1answer
72 views

iCloud login issue [closed]

I have lost my @me.com password and answer to 2nd security question. I have tried many ways but all suggestions ends at verify via email which I have lost password to access and 2nd is answer the ...
0
votes
1answer
84 views

Where does OS X get defaults from in Guest User Web access Parental Controls?

I did not put these here, I don't know where they came from. WHOIS by IP seems to indicate they are from Amsterdam? (149.154.175.50 copy-pastable for anyone who wants to check)
0
votes
2answers
1k views

How can I upgrade Mac OS without the administrator password?

I recently received an old iMac secondhand. I have no way to reach the original owner. I am trying to upgrade the OS software, but the prompts demand the administrator's name (which is auto-filled) ...
2
votes
1answer
262 views

What information is accessible through iCloud? Can the administrator on my home PC access these files?

Recently my texts were accessed somehow and I'm not exactly sure how this person did it. We share the same PC at home but have separate user accounts with passwords on them. My iCloud and iTunes also ...
2
votes
0answers
121 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
0
votes
0answers
28 views

How to prevent AutoOpen feature for apps

Several vendors provide their drivers with AutoOpen feature: image file contains single application SomeApp usually installs drivers or connection manager. I've discovered how it works: Mac OS X ...
0
votes
1answer
41 views

What is the worst thing that will happen if I do not update iTunes to its latest version?

Okay, I like iTunes, and it is a wonderful software. I run it on Windows, unfortunately sometimes when I do update to minor version updates, the whole windows panel of iTunes becomes unresponsive and ...
3
votes
1answer
1k views

No secure ad-hoc network with Yosemite?

iMac (late 2009) OSX 10.10.3 iPads (a 1 and a 2) iOS 8.? I am a retired IT engineer playing at being a DJ/VJ. That means I'm often in a room with lots of folks with cells and iPads. Before Yosemite,...
3
votes
0answers
151 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
2
votes
2answers
517 views

How to prevent Safari saved passwords being seen with Mac password?

In Safari on OS X via Safari/Preferences/Passwords/ it is possible to view all saved passwords in plain text by entering the Mac password. I want to use a different password. Is this possible? I ...
3
votes
0answers
72 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's network;...
-2
votes
3answers
170 views

Killing discoveryd process affected by malware [closed]

There was a malware attack on my system. It has affected the discoveryd process. I do a grep to find the process id for related discoveryd processes. I get the following - _mdnsresponder 6115 ...
9
votes
2answers
572 views

How to prevent keychain passwords being seen with iPhone passcode?

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone. Is it possible to still be able to use Keychain passwords and ...
1
vote
1answer
109 views

OS X Server safely facing WAN and LAN?

Our OS X Server serves our company DNS, web and mail with an external IP address to the Internet. It currently does not have a local address on the LAN and thus cannot be used e.g. for software update ...
0
votes
0answers
147 views

OS X lets me run softwareupdate command without sudo: is this normal?

I am able to run and install updates with the softwareupdate command without prefixing sudo. Is this normal, can anybody else do this on there system? The man page states that admin privileges are ...
1
vote
0answers
715 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
1answer
131 views

Get alerted whenever someone uses your Mac?

I have a dedicated Mac Mini in a colocation that I access via Remote Desktop. I trust the colocation provider, but I don't trust my password is secure enough. Without resorting to a more secure ...
1
vote
1answer
196 views

sudo asking for password even though user doesn't have a password set

I have a computer that doesn't not require a password. I'd like this to continue into sudo, but unfortunately it doesn't recognise a user not having a password. According to Apple the sudo command ...
2
votes
1answer
173 views

FileVault 2 Encrypted drive was reformatted by thief then returned. Is the original encrypted data salvageable?

I had a Macbook Air Yosemite which was FileVault 2 encrypted. The laptop was stolen from me. The thief was able to reinstall OS X and some apps (was bringing it to market for sale). The laptop was ...
3
votes
2answers
6k views

OS X 10.9: where are password hashes stored

I think on previous versions of OS X, password were stored in the /etc/shadow file. Nevertheless, this file doesn't appear to exist in the later versions of the operating system - specifically OS X ...
0
votes
1answer
112 views

Cable lock with Mac Mini

How do I use a cable lock with my Mac Mini? It doesn't appear to have any mounts for the typical cable lock. Do I have to get an enclosure and secure that to the desk?
3
votes
3answers
489 views

Does the Apple Watch really identify “you”?

In several places in the iOS Apple Watch settings app, important functionality depends on "you" wearing the watch. Critically under the settings for unlocking the watch without requiring a passcode (...
2
votes
1answer
107 views

Screen saver no longer asks for a password

I'm using a MacBook Air 13" mid 2012 with Yosemite 10.10.3, it rebooted itself this morning without a reason and since then the screen saver is no longer asking for a password on unlock. This is a ...
4
votes
2answers
2k views

How to dump the content of keychain from the shell?

I'm testing the following command-line in the Terminal: sudo security dump-keychain -d login.keychain which I'd like to use to save all my passwords into a file. However when I run it, it keep ...
0
votes
1answer
126 views

How do you control the security of Firefox browser in Yosemite to run educational Java app?

I am trying to run the following Java applet in the following web page: http://artint.info/demos/rl/q.html However, Firefox is blocking it due to a security issue. Not sure if it's an Apple issue ...
1
vote
1answer
154 views

MAC Filtering in Internet Sharing

How can I enable MAC Filtering on my MAC OSX 10.9.4? I tried adding <key>allow</key> <array> <string>0:17:43:a3:2d:45</string> </array> to my /etc/bootpd.plist, ...
2
votes
1answer
1k views

How reliable and trustworthy are the Objective-See Security tools (KnockKnock (UI), Dynamic Hijack Scanner and BlockBlock)?

DHS found an issue Is this a false positive? Anybody else with the same message? I installed BlockBlock. What do you think about it? Do you trust those Security tools? BlockBlock (beta) ...
4
votes
2answers
8k views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
1answer
50 views

Can your information security be compromised by opening attachments in Gmail in iOS?

I know people can put virus or other dangerous programs in email attachments and send them to you, but is that just for the computer world and not tablets? I mean, if you get such an email to your ...
1
vote
0answers
1k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
0
votes
1answer
127 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
2
votes
3answers
765 views

How can I install a single app from an unknown developer?

I am new to Mac and am trying to install a Hex Editor. Google sent me to "Hex Fiend", but, when I try opening it, I get "'Hex Fiend.app' can't be opened because it is from an unidentified developer." ...
5
votes
1answer
245 views

How to limit any devices to appear on any Bonjour/Airplay capable devices close by?

This is an issue at my school district where I work as a network admin. Right now, I could see around the list of at least 15-20 Apple TVs that is located across school buildings when I press on ...
0
votes
1answer
157 views

How to set up Mac for multiple user remote access log in and a shared network drive?

I have users who want to share a highpowered mac in a lab. It has a decent processor and a ton of RAM. They want to be able to remotely access this mac from both PC/Mac just like a user would be able ...
0
votes
0answers
226 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
29
votes
4answers
26k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
1
vote
1answer
263 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
6
votes
2answers
673 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...