If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

2
votes
1answer
754 views

Does iCloud use client-side encryption?

I would like to know if iCloud uses client-side encryption i.e. all data is encrypted on client side and even Apple can't decrypt the data and read it. Is this true for iCloud?
2
votes
1answer
47 views

Which Apps on my Mac need security updates?

I have a lot of software installed from sources other than the Apple Store. Is there a service to check which app have security updates ready to be downloaded? Opening each one on Fridays for a ...
10
votes
2answers
8k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
2
votes
1answer
2k views

OS X 10.7 Lion: Reset master password to FileVault 2

I need to reset or delete my master password to FileVault 2. This is the password found under System Preferences > Users & Groups > Service gear > Change Master Password. It's a backup in case a ...
4
votes
3answers
343 views

iPhone passcode security

I was looking at a companies that to do repairs to iPhones to decide if I wanted to DIY or just pay someone to do it, and noticed one company that listed a service named "Remove Passcode". This was ...
3
votes
3answers
2k views

How can I verify a Lion FileVault recovery key?

I have a volume that is encrypted with OS X Lion's full-disk FileVault. When I enabled FileVault I was given a recovery key, which I wrote down. I'd like to verify that the recovery key that I wrote ...
1
vote
1answer
66 views

Are there any security vulnerabilities that would allow an attacker to change the admin password?

A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured ...
1
vote
3answers
180 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this ...
6
votes
1answer
320 views

Is it possible that some hacker is logged in to my computer?

When I type w at the terminal I see myself logged in two times. What are console and s000? Is it possible that one of these neos is actually somebody else?
4
votes
1answer
549 views

Suspicious NTPD Connection

I use Little Snitch on Mac OS X 10.6.8 and noticed a connection that seemed suspicious to me. The snitch reported ntpd trying to connect to: "$host 94.23.243.53 53.243.23.94.in-addr.arpa domain ...
16
votes
3answers
256k views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
0
votes
2answers
40 views

Which version of iOS is the May 12 security paper referring to?

Apple has published a paper on security controls in iOS, which specific version is this referring to?
14
votes
1answer
817 views

Should I make my primary user an Administrator or not?

For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
4
votes
5answers
20k views

How do I examine my iPad for malware?

Lately I occasionally get redirected to other websites when I load some news websites. It could be a banner redirect I guess, but I suspect something more sinister. The iPad is NOT jailbroken and ...
2
votes
1answer
649 views

TPM chip on iPhone

Do Apple devices ship with a TPM chip? My Mac doesn't have a TPM chip, but does an iPhone have of a TPM chip or how do I determine if the iPhone has a TPM chip or not? On my Mac, I use this command to ...
12
votes
4answers
3k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
10
votes
2answers
6k views

My MacBook was stolen: can the thief access my files without my account password?

My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
2
votes
2answers
468 views

Getting errors when trying to send something using Gmail and Mail 5

I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
1
vote
1answer
112 views

Is this a feasible security measure for my retail iPod Touches?

I'm considering using several iPod Touch devices as mobile computers in a retail setting. If I did do this, I'd have to provide some measure of security for them. I'm thinking of using the retail ...
2
votes
0answers
102 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
3answers
2k views

Can someone read messages on my locked iPhone?

I left my iPhone in a taxi cab. I locked the phone to make sure nobody finds it and makes expensive calls. But does locking the phone prevent someone from seeing the texts I am sending? What if the ...
1
vote
2answers
1k views

How to delete or untrust all root certificates in OSX?

In Keychain Access it looks like you can only untrust/delete certificates one at a time. But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time? ...
-1
votes
1answer
481 views

How do I allow a single IP to access everything on my Mac?

I tried IceFloor, but it's not working to white list all traffic from a single IP to bypass firewalls.
0
votes
1answer
223 views

Installing snort on OS X

I am on the lookout for an IDS/IPS solution for OS X 10.6. I tried compiling snort for 10.6 and I'm having trouble compiling a dependency, DAQ. The error I get is: mv -f ...
5
votes
2answers
575 views

Password protect MacBook while keeping iTunes running

So I want to prevent anyone from messing with iTunes, or anything on my MacBook actually. How can I password protect it without losing the sound?
1
vote
1answer
549 views

Forgot password to FileVault. Still got access to the machine

I just realized, that few months ago I converted my disk to FileVault. I am afraid of loosing access to my data. I still have access to the machine: login, password, administrator account. Is there ...
4
votes
2answers
1k views

Checking apps for a “GateKeeper” Developer ID?

Is there any way for a Mac user currently running Snow Leopard or Lion to check, maybe from the Terminal command-line, whether some application downloaded from the net was digitally signed with an ...
0
votes
1answer
694 views

How can I leave my wifi connection connected after logging the user out of the OS?

Lets say the WiF network uses LDAP to authenticate users with a user and password and the users login to the OS using the same LDAP credentials. Is there a way that this WiFi connection can be always ...
5
votes
2answers
1k views

Does activating auto-login compromise secure password storage?

or: Does enabling auto-login in OS X add any additional security risks? How does this auto-login work? I'm not a security expert, but I imagine that such a procedure would require the password to be ...
3
votes
1answer
122 views

Is my system vulnerable to Apple's new password-in-clear-text bug?

With the latest Lion security update, Mac OS X 10.7.3, Apple has accidentally turned on a debug log file outside of the encrypted area that stores the user’s password in clear text. How can I ...
3
votes
0answers
513 views

Turn off desktop screen/keyboard when connecting via VNC? [duplicate]

When I VNC into a remote OS X machine (e.g. my office machine), the remote screen is showing everything I'm doing. It also unlocks the screen so that if I'm not watching that screen, someone can use ...
1
vote
1answer
84 views

Web Start application management?

After the latest update Mac OS X Lion, I think that Apple disabled Java applications by default. When I try to run one, I get the following dialog: If I choose to "Enable" it, how would I disable ...
7
votes
3answers
2k views

Is the lock screen PIN secure enough when sending in for repair?

The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
1
vote
2answers
6k views

How do I get iTunes to take my security update info?

Recently, when attempting to make a purchase (or free download) on the App Store iTunes was requesting I update my security info. This is not the 3 digit code on my credit card, but the 3 security ...
3
votes
3answers
746 views

scheduled account lock Mac OS X

You can set your Mac OS X account to automatically lock the screen so that the password is required after a certain amount of time of inactivity, but can you do the same thing using a schedule (say at ...
3
votes
2answers
190 views

securityd goes nuts every 4 minutes & 30 seconds

securityd spams my console with the following : 19/04/2012 16:23:17.405 com.apple.securityd: Value of bTransmit: 00000001 repeated 563 times (after disabling the default mps_limit of 500). 4 ...
6
votes
2answers
2k views

Where to find the Mac OS X Lion security configuration guide?

Most Mac OS X releases have very nice security configuration guides, but Lion is not in the list. Is this document available somewhere else on Apple's site, or is there a roughly-equivalent document ...
6
votes
2answers
1k views

How would Find my iPod work on a locked iPod Touch?

In order for an iPod Touch (which has Find My iPod enabled) to let Apple's servers know where it is located (e.g. via Wi-Fi positioning), I believe it needs to transmit the location over Wi-Fi. Let's ...
2
votes
1answer
475 views

Hide/Block System Preference Panes?

I have just discovered that System Preference panes such as Mouse and Keyboard cannot be locked, this is a problem as one user could log in change the strings and then another user would log in and ...
3
votes
1answer
3k views

Adobe Reader Updater legitimate?

I just got the following popup: Is this a legitimate update from Adobe? The reason I'm concerned: The Flashback virus started off as a fake Adobe Flash update. The UI on the application does not ...
4
votes
1answer
830 views

App Store asking for credentials?

After trying to install an application on my iPhone 4, I just saw this popup for the first time: Security Info Required To help ensure the security of your Apple ID, you must confirm your ...
2
votes
3answers
3k views

Pop-up windows that disappear mysteriously

It's been a while since, every now and then, I see a pop-up window appearing for a few milliseconds, that then disappears. I don't even have the time of reading what it says. Any idea on what could ...
30
votes
5answers
2k views

Is my Mac infected with the Flashback trojan?

I own a 2011 model of MacBook Pro with a Core i7 processor and Snow Leopard. I have found out there is a trojan horse which now controls 600,000 Macs. How can I find out if my MacBook is being ...
1
vote
1answer
173 views

How do I change the output power on the OS X internet sharing wifi network?

I'm on 10.7, and I want to alter the broadcast power (so my wifi network doesn't extend beyond 10 ft radius or so). Also, if there's a way to change the security to WPA, which windows 7 can do, I'd ...
3
votes
3answers
1k views

How do I block OS X's auto detection of shared drives?

I'm a little concerned that I have a bunch of drives from other people's computers showing up in Finder whenever I'm at a company site. I don't plan to access those at all. I have sharing disabled, ...
18
votes
7answers
845 views

How to limit my Mac's exposure to malware?

With OS X malware increasingly in the news (see the Flashback Trojan issue), is there anything that I should do to increase the security of my Mac and reduce my exposure to malware? What I'm doing ...
9
votes
2answers
12k views

If my stolen iPod touch gets reset, will I receive a notification from iCloud?

My iPod touch was stolen. If the person type the wrong password 10 times, it will erase all my data. And, if that happens, will I receive the notification ("find my iPod") I requested in iCloud when ...
8
votes
3answers
3k views

What is Apple's policy for supporting security updates on older versions of OS X?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each OS X release? I've looked around the Internet, and found some forum posts that claim ...
4
votes
2answers
504 views

Flashback malware on Snow Leopard

My Mac OSX Snow Leopard got exploited by the Flashback malware. There's a summary by F-Secure that I'm trying to follow in order to remove it. This link is similar, and provides a little more detail. ...
2
votes
1answer
887 views

Are TimeMachine backups password protected?

If someone was to steal my external hard drive would they need to input my password to be able to read the TimeMachine backup data on there?