If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
195 views

Suppress Java warnings

I'm using a website with a Java plugin (applet I think) that prompts me everytime I use it to access the local file system. These are the two pop ups: and: I already have the site in question ...
1
vote
2answers
103 views

Detecting malware in panic reports

Is there a way to identify kernel modules that shouldn't be there out of a panic report? For example, looking at this discussion https://discussions.apple.com/thread/2778885, there it was pretty ...
1
vote
1answer
57 views

Is using 10.8 (over 10.9) a security risk?

Is 10.8 currently (as of 2014 Aug) fully supported, especially security-wise, or using it might be a security risk?
3
votes
1answer
1k views

How to always allow “[program] wants to make changes. Type your password to allow this.”

I use a program which prompts me often to "make changes" (make a system-level/root-level change). I trust this program and want to always allow it to do so. How is this done? I would expect an "always ...
2
votes
1answer
886 views

If I didn't activate my find my iPhone is it possible for the thief to reset factory settings?

I just got my iPhone stolen. I quickly turn on find my iPhone. I wonder if before I did that the thief have reset factory setting first. Is it possible? It seems that the mere act of setting my ...
1
vote
0answers
21 views

User permissions prevent me from loading the Security & Privacy settings — how do I fix this?

I can't seem to load the System Preferences > Security & Privacy settings pane. I inadvertantly changed admin settings on my machine and since then I've been unable to access my documents and ...
1
vote
0answers
252 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
0
votes
0answers
29 views

Why doesn't Apache show up under Firewall (System Preferences » Security)?

Why doesn't Apache show up under Firewall settings, and are there other programs that aren't showing up here? (outside of those that are inclusive of "basic internet services", e.g. DHCP, Bonjour, ...
1
vote
1answer
326 views

How to securely delete individual files (documents) on the iPhone?

My understanding is that when files are deleted on a computer (and here, I am considering the iPhone a "computer"), those files are typically recoverable using forensic tools. I know there are easy ...
0
votes
0answers
256 views

Getting verify certificate errors after adding Google Account & iCloud keychain problem?

I keep getting a verify certificate error whenever I add my Google Account. The domina is an old company I used to work at and I have removed all account in reference to that account. However I get ...
5
votes
1answer
154 views

How to enforce sandbox rules for the particular app?

I wrote an sandbox specification file (inspired by files from /usr/share/sandbox and manuals like this) and now I can launch some app in sandbox with sandbox-exec $path_to_rules ...
1
vote
0answers
222 views

My iPhone got stolen and appears offline

Okay, so I lost my iPhone 4s last night and it appeared as offline immediately upon signing on to Find My iPhone. I placed it on Lost Mode right away. I got an email that my Apple ID password got ...
0
votes
0answers
228 views

iPhone acting on its own

Something weird was happening with an iPhone when we used it with a 12V output, it started to do thing (press the screen) by it self. The power setup was like this: Solar power battery 12V to 220V ...
0
votes
0answers
226 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
0
votes
0answers
125 views

How do I import a SMIME certificate and automatically set the Keychain trust?

We are deploying SMIME certificates to all clients and we need to ensure that these certificates are only trusted for email. Given that our users are "unmanaged" and off the corporate network, how ...
1
vote
2answers
1k views

Is there an actually secure VNC iOS app for use with OS X Screen Sharing?

All iOS VNC clients I have tried use regular VNC authentication. This is insecure because of the 8 character limit on the password, and so on. Some apps such as RealVNC's VNC Viewer, does have info ...
1
vote
2answers
426 views

FileVault 2 caches main password even after power off?

I had set up FileVault 2 encryption while using long&strong user password, and later changed user password to a shorter one. At first time it seemed like everything is working as I expect: OS X ...
1
vote
2answers
564 views

Prevent installation of malware, spyware… Admin password requirement

I am new in Mac world. I am the only user of my Mac with OS X 10.9.3 but sometimes other people use my computer. My purpose is to prevent installation of malware, spyware and surveillance software. ...
2
votes
2answers
603 views

How to scan a Mac for rootkits and other stealthy security hazards

I'm looking at buying a second-hand Mac, probably one that does not include an OS installation disk. How can I scan it to make sure that it has not had security threats installed on it? Is there a ...
0
votes
1answer
170 views

Why files created by Kaleidoscope App are in quarantine?

I like to use Kaleidoscope (v 2.1.0 - build 133.01 under Mac OS X 10.8.5) to compare 2 directories. But, when I create files by copying them from a directory to another using ...
1
vote
1answer
154 views

Can you passlock specific Apps on an iPhone? [duplicate]

I know the easiest way to secure your iPhone is by using a 4-digit-passcode to lock the entire phone. However, I was wondering if there is a way to securely passcode-protect only the Photo and Mail ...
2
votes
0answers
51 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
1answer
226 views

OS X 10.9 Screen Sharing: disable file transfer

On OS X 10.7 or newer (10.8, 10.9) simply drag'n'drop files between your desktop and remote desktop to transfer the files between computers How can I disable this? I have made restricted ...
1
vote
0answers
139 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
2
votes
2answers
81 views

how can I protect the private data on my Iphone?

what is the best way to secure data on my iphone? In my opinion I have to protect myself against the following risks: theft fault and phone must be returned I fear for the following data Logins ...
0
votes
1answer
536 views

Remove Airdrop function to do tightening of OSX

Could you tell me how to remove Airdrop function to do tightening of OSX? Looks somebody accessing my Mac via AirDrop. I would like to remove the function. Please tell me how to remove the function ...
1
vote
1answer
36 views

Putting SSH keys I've taken from Ubuntu

I came over to Mac from Ubuntu. I've saved all SSH files I had in the .ssh folder in Ubuntu. There are three files id_rsa id_rsa.pub known_hosts Is it possible to reuse these files in Mac? If so, ...
0
votes
1answer
160 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
2
votes
2answers
72 views

Using different passwords for usual login and for admin-requiring actions

I use Mac OS X 10.9.3. Background: I log into my profile very frequently (e.g. after closing lid) and often do it in public. Someone definetely should be able to see it, and no matter if I make it ...
1
vote
1answer
991 views

How can I tell which SSL ciphersuite Safari is using?

Qualsys tells me that current versions of Safari on OS X don't support AES-GCM for the SSL/TLS cipher algorithm. I'd like to verify this by observing which cipher suite is selected when visiting my ...
1
vote
1answer
73 views

Apple support, mac with unencrypted drive

Because of an incident happened a few days ago, I'll have to bring my MacBook Pro to an Apple Store to get it repaired. Problem: Even though automatic logins are disabled, and to access the computer ...
0
votes
1answer
90 views

Java Certificate Issues

Overview We are building a JAVA Application that communicates data over secure HTTPS lines. Problem When we run our application from Eclipse/Terminal, via the command "java -jar ...
2
votes
0answers
26 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
1
vote
1answer
792 views

Apple Push Notification Service: misbehaviour

On a new test iMac (running Mavericks 10.9.2) I discovered 2 repeated errors related to apsd (Apple Push Notification Service daemon). Repeated failing connections A netstat command displays a huge ...
0
votes
0answers
172 views

How to use the iPad wordpress app when blog runs iThemes Security

This was closed as off-topic on the Wordpress SE site, so I'm hoping it fits better here, since it's specific to using an iOS app. I'm using iThemes Security on my site, so I have a "secret word" ...
1
vote
1answer
78 views

Keychain: ask for certificate from command line

Is it possible to ask for certificate (.certificateRequest file) from command line? I want to mimic behavior like Keychain -> Certificate Assistant -> Request for Certificate in Certificate Buro from ...
0
votes
1answer
1k views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
2
votes
1answer
339 views

Block an application's read/write access to a specific file in OS X?

The premise is this: I have an app which has been set in its code to only run on OS X versions 10.4 to 10.9.2. (When I try to install it, it gives a message "This version of ____ is for Mac OS X 10.4 ...
7
votes
3answers
31k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
2
votes
3answers
571 views

Software recommendations for locking down a OS X based school computer lab

I am installing a computer lab with 25 brand new iMacs. I would like to secure the machines to prevent students from tampering with them. Some of the things I'd like to prevent including making ...
0
votes
3answers
210 views

If I bought someone's Macbook, can he spy on me?

What if someone sold me his Macbook he doesn't need anymore? When I remove old home profile and reinstall OS via Cmd+R (btw, would I need sudo pass for that?), after that would previous owner be able ...
1
vote
1answer
520 views

Safari adds links on any page

I had strange issue with Safari on Macbook today. It add on any pages I had visited links to other sites. It looks like an advertising. For example, if I had the page with next text: ".... answers ...
-2
votes
1answer
484 views

Founded iPhone. need help! [closed]

A friend of mine found a iPhone 5 and it was on lost mode, then he restored the phone through iTunes. Does Find My iPhone still works, and how do you bypass the activation lock? Should he jailbreak ...
2
votes
2answers
3k views

Do firewall tools exist for OS X Mavericks for preventing brute force attacks?

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running ...
1
vote
2answers
269 views

Does the coupons.com printing uninstaller leave anything behind?

A family member installed the coupons.com printing software on my Mac. Googling around tells me that the uninstaller doesn't fully remove elements of the installation from the Windows version. I ...
1
vote
4answers
157 views

Password managers for iOS

With the whole Heartbleed mess, I figured it was about time to start using a password manager. After doing some research, here is the list of things that I want and don't want in this kind of ...
1
vote
1answer
2k views

Why is the CAcert root certificate not trusted on iOS devices?

I distinctly remember that when I bought my first iPhone and iPad a couple of years back, I was able to install the CAcert root certificate on those devices and iOS would trust the certificate. These ...
44
votes
2answers
39k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
1
vote
2answers
310 views

If my iPhone 4 has spyware on it will encrypting my sms messages with an encryption app keep them private?

I am currently dealing with a stalking situation and my iPhone 4 is being monitored. The person knows all my phone info like meid, imei, phone number etc… Also I believe my phone has spy software on ...
1
vote
0answers
95 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?