If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

0
votes
0answers
40 views

App Name not Displayed Correctly

I've created an AppleScript, saved it as an app and run it by launchd. For an undetermined reason, the app's name in Preferences > Security & Privacy > Privacy is displayed with a long string of ...
3
votes
0answers
128 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
2
votes
2answers
455 views

How to prevent Safari saved passwords being seen with Mac password?

In Safari on OS X via Safari/Preferences/Passwords/ it is possible to view all saved passwords in plain text by entering the Mac password. I want to use a different password. Is this possible? I ...
3
votes
0answers
70 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's ...
-2
votes
3answers
164 views

Killing discoveryd process affected by malware [closed]

There was a malware attack on my system. It has affected the discoveryd process. I do a grep to find the process id for related discoveryd processes. I get the following - _mdnsresponder 6115 ...
9
votes
2answers
558 views

How to prevent keychain passwords being seen with iPhone passcode?

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone. Is it possible to still be able to use Keychain passwords and ...
1
vote
1answer
102 views

OS X Server safely facing WAN and LAN?

Our OS X Server serves our company DNS, web and mail with an external IP address to the Internet. It currently does not have a local address on the LAN and thus cannot be used e.g. for software update ...
0
votes
0answers
134 views

OS X lets me run softwareupdate command without sudo: is this normal?

I am able to run and install updates with the softwareupdate command without prefixing sudo. Is this normal, can anybody else do this on there system? The man page states that admin privileges are ...
1
vote
0answers
696 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
1answer
98 views

Get alerted whenever someone uses your Mac?

I have a dedicated Mac Mini in a colocation that I access via Remote Desktop. I trust the colocation provider, but I don't trust my password is secure enough. Without resorting to a more secure ...
1
vote
1answer
186 views

sudo asking for password even though user doesn't have a password set

I have a computer that doesn't not require a password. I'd like this to continue into sudo, but unfortunately it doesn't recognise a user not having a password. According to Apple the sudo command ...
2
votes
1answer
167 views

FileVault 2 Encrypted drive was reformatted by thief then returned. Is the original encrypted data salvageable?

I had a Macbook Air Yosemite which was FileVault 2 encrypted. The laptop was stolen from me. The thief was able to reinstall OS X and some apps (was bringing it to market for sale). The laptop was ...
3
votes
2answers
5k views

OS X 10.9: where are password hashes stored

I think on previous versions of OS X, password were stored in the /etc/shadow file. Nevertheless, this file doesn't appear to exist in the later versions of the operating system - specifically OS X ...
0
votes
1answer
97 views

Cable lock with Mac Mini

How do I use a cable lock with my Mac Mini? It doesn't appear to have any mounts for the typical cable lock. Do I have to get an enclosure and secure that to the desk?
3
votes
3answers
435 views

Does the Apple Watch really identify “you”?

In several places in the iOS Apple Watch settings app, important functionality depends on "you" wearing the watch. Critically under the settings for unlocking the watch without requiring a passcode ...
2
votes
1answer
103 views

Screen saver no longer asks for a password

I'm using a MacBook Air 13" mid 2012 with Yosemite 10.10.3, it rebooted itself this morning without a reason and since then the screen saver is no longer asking for a password on unlock. This is a ...
4
votes
2answers
2k views

How to dump the content of keychain from the shell?

I'm testing the following command-line in the Terminal: sudo security dump-keychain -d login.keychain which I'd like to use to save all my passwords into a file. However when I run it, it keep ...
0
votes
1answer
117 views

How do you control the security of Firefox browser in Yosemite to run educational Java app?

I am trying to run the following Java applet in the following web page: http://artint.info/demos/rl/q.html However, Firefox is blocking it due to a security issue. Not sure if it's an Apple issue ...
1
vote
1answer
140 views

MAC Filtering in Internet Sharing

How can I enable MAC Filtering on my MAC OSX 10.9.4? I tried adding <key>allow</key> <array> <string>0:17:43:a3:2d:45</string> </array> to my /etc/bootpd.plist, ...
2
votes
1answer
790 views

How reliable and trustworthy are the Objective-See Security tools (KnockKnock (UI), Dynamic Hijack Scanner and BlockBlock)?

DHS found an issue Is this a false positive? Anybody else with the same message? I installed BlockBlock. What do you think about it? Do you trust those Security tools? BlockBlock (beta) ...
4
votes
1answer
7k views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
1answer
47 views

Can your information security be compromised by opening attachments in Gmail in iOS?

I know people can put virus or other dangerous programs in email attachments and send them to you, but is that just for the computer world and not tablets? I mean, if you get such an email to your ...
1
vote
0answers
1k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
0
votes
1answer
117 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
2
votes
3answers
719 views

How can I install a single app from an unknown developer?

I am new to Mac and am trying to install a Hex Editor. Google sent me to "Hex Fiend", but, when I try opening it, I get "'Hex Fiend.app' can't be opened because it is from an unidentified developer." ...
5
votes
1answer
235 views

How to limit any devices to appear on any Bonjour/Airplay capable devices close by?

This is an issue at my school district where I work as a network admin. Right now, I could see around the list of at least 15-20 Apple TVs that is located across school buildings when I press on ...
0
votes
1answer
139 views

How to set up Mac for multiple user remote access log in and a shared network drive?

I have users who want to share a highpowered mac in a lab. It has a decent processor and a ton of RAM. They want to be able to remotely access this mac from both PC/Mac just like a user would be able ...
0
votes
0answers
211 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
28
votes
4answers
25k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
1
vote
1answer
257 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
6
votes
2answers
660 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...
3
votes
2answers
221 views

Are OS X Security Updates Cumulative?

I can't seem to find a definitive answer anywhere, but are Mac OS X Security Updates cumulative? The update in question is 2015-004. I've checked https://support.apple.com/en-us/HT204659 but it ...
4
votes
2answers
961 views

What lock can secure a 4th generation Time Capsule from theft?

The 4th generation Time Capsule has a security slot at the far right of the back panel: However, the manual does not mention what kind of lock I can attach to it. What locks are compatible? For ...
1
vote
1answer
45 views

password built in an app for restricted download?

I have built an app. It's a magazine and a few brochures with rich content. I will upload it as a multi issue app. Once it's approved and available in the iTunes app store, I would like it to be ...
0
votes
0answers
43 views

Any verification tricks for Mac OS X files?

Is there a good way to verify the various files in Mac OS X? Ideally, one wants to verify system files in an installed system, but right now I'm curious about verifying the Yosemite installer. If ...
4
votes
2answers
10k views

How do I encrypt an external drive with FileVault 2 in OSX Yosemite

Ok, so according to https://www.apple.com/osx/what-is/security/ I should be able to encrypt ANY external drive..."with ease" using FileVault 2. I have a brand new (empty) 2TB Fantom Drive model: ...
0
votes
0answers
73 views

Ping being hijacked?

On my Mac terminal, I typed cat /etc/resolv.conf nameserver 8.8.8.8 nameserver 8.8.4.4 and I do a dig dig www.facebook.com ; <<>> DiG 9.8.3-P1 <<>> www.facebook.com ;; ...
1
vote
1answer
1k views

iMac password stopped working, Apple Persistent State Encryption shows a recent modified date

I'm not sure if we should be worried... Mom does not change passwords for her iMac system login, nor do I, but when I went to update some software this morning, the password doesn't work, nor can I ...
1
vote
1answer
777 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. Notably, DNSSSec is a prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec ...
1
vote
1answer
321 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
2
votes
1answer
350 views

“File” NOT “App”… can't be opened because it is from an unidentified developer

got an mp3 via email from a musician friend of mine today. when i try to open it (in any app... itunes, quicktime, vlc, etc), i get this message as if it's a new Application that i just downloaded ...
0
votes
0answers
37 views

I can't find the adware to remove it [duplicate]

I have some pretty invasive adware going on right now. It is in both Safari and Chrome, so I don't believe it is an extension (I have also looked through all extensions). I have also tried searching ...
1
vote
1answer
172 views

Safari for one user can't connect to local server via https due to new cert

This is similar to Safari can't connect to https, but is just for one single https site. Safari can't connect to my local NAS' HTTPS site anymore because it "can't establish a secure connection". ...
2
votes
1answer
520 views

Accessing iCloud passwords without a Mac

I mostly use Macs and iOS devices, so I've started using the iCloud password manager for better account security. Of course, all the world is not a Mac, but passwords are ubiquitous. When I am using ...
3
votes
2answers
111 views

What are the risks if you install an app that's not from the App Store?

On my iPhone (iOS 8.2), I installed an app that wasn't coming from the App Store. I chose to trust it because a serious news website had spoke about it, but now I'm a little bit worried of what this ...
1
vote
1answer
121 views

Security Update 2015-002 Asks To Setup Mac

I just had to install the latest Security Update from the Mac App Store and it started auto updating. Then when I completed the update (and restarted) my Mac asked me to enter in my Apple ID ...
0
votes
1answer
146 views

Mac OSX : How to protect daemon process from stopping by root/admin

I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1. The daemon I've currently can ...
3
votes
4answers
4k views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...
2
votes
1answer
367 views

Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root

I'm working on a security agent. Wherein I do not want to allow any user/admin/root to delete my security agent application normally. If user/admin/root try to delete the .app file then OS should ...
2
votes
2answers
3k views

JetDrive 725 - SHould I use TRIM enabler?

I just installed a JetDrive 725 and it is really nice! As I am using Yosemite, TRIM can not be enabled that easily, and the TRIM Enabler is needed. Now there is a certain risk when using it, as ...