If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
264 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
6
votes
2answers
674 views

How to mitigate CVE-2015-1130 (Hidden Backdoor with Root) due to lack of Apple support?

This is related to CVE-2015-1130, a.k.a Hidden backdoor API to root privileges in Apple OS X. It appears Apple has refused to fix it in OS X 10.9 and earlier. Emil Kvarnhammar, the one who reported ...
3
votes
2answers
239 views

Are OS X Security Updates Cumulative?

I can't seem to find a definitive answer anywhere, but are Mac OS X Security Updates cumulative? The update in question is 2015-004. I've checked https://support.apple.com/en-us/HT204659 but it doesn'...
4
votes
2answers
985 views

What lock can secure a 4th generation Time Capsule from theft?

The 4th generation Time Capsule has a security slot at the far right of the back panel: However, the manual does not mention what kind of lock I can attach to it. What locks are compatible? For ...
1
vote
1answer
45 views

password built in an app for restricted download?

I have built an app. It's a magazine and a few brochures with rich content. I will upload it as a multi issue app. Once it's approved and available in the iTunes app store, I would like it to be ...
0
votes
0answers
44 views

Any verification tricks for Mac OS X files?

Is there a good way to verify the various files in Mac OS X? Ideally, one wants to verify system files in an installed system, but right now I'm curious about verifying the Yosemite installer. If ...
5
votes
2answers
12k views

How do I encrypt an external drive with FileVault 2 in OSX Yosemite

Ok, so according to https://www.apple.com/osx/what-is/security/ I should be able to encrypt ANY external drive..."with ease" using FileVault 2. I have a brand new (empty) 2TB Fantom Drive model: ...
0
votes
0answers
74 views

Ping being hijacked?

On my Mac terminal, I typed cat /etc/resolv.conf nameserver 8.8.8.8 nameserver 8.8.4.4 and I do a dig dig www.facebook.com ; <<>> DiG 9.8.3-P1 <<>> www.facebook.com ;; ...
1
vote
1answer
1k views

iMac password stopped working, Apple Persistent State Encryption shows a recent modified date

I'm not sure if we should be worried... Mom does not change passwords for her iMac system login, nor do I, but when I went to update some software this morning, the password doesn't work, nor can I ...
1
vote
1answer
911 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. Notably, DNSSSec is a prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec ...
1
vote
1answer
356 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same host,...
2
votes
1answer
363 views

“File” NOT “App”… can't be opened because it is from an unidentified developer

got an mp3 via email from a musician friend of mine today. when i try to open it (in any app... itunes, quicktime, vlc, etc), i get this message as if it's a new Application that i just downloaded ...
0
votes
0answers
37 views

I can't find the adware to remove it [duplicate]

I have some pretty invasive adware going on right now. It is in both Safari and Chrome, so I don't believe it is an extension (I have also looked through all extensions). I have also tried searching ...
1
vote
1answer
182 views

Safari for one user can't connect to local server via https due to new cert

This is similar to Safari can't connect to https, but is just for one single https site. Safari can't connect to my local NAS' HTTPS site anymore because it "can't establish a secure connection". ...
2
votes
1answer
541 views

Accessing iCloud passwords without a Mac

I mostly use Macs and iOS devices, so I've started using the iCloud password manager for better account security. Of course, all the world is not a Mac, but passwords are ubiquitous. When I am using ...
3
votes
2answers
133 views

What are the risks if you install an app that's not from the App Store?

On my iPhone (iOS 8.2), I installed an app that wasn't coming from the App Store. I chose to trust it because a serious news website had spoke about it, but now I'm a little bit worried of what this ...
1
vote
1answer
121 views

Security Update 2015-002 Asks To Setup Mac

I just had to install the latest Security Update from the Mac App Store and it started auto updating. Then when I completed the update (and restarted) my Mac asked me to enter in my Apple ID ...
0
votes
1answer
156 views

Mac OSX : How to protect daemon process from stopping by root/admin

I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1. The daemon I've currently can ...
3
votes
4answers
6k views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...
2
votes
1answer
395 views

Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root

I'm working on a security agent. Wherein I do not want to allow any user/admin/root to delete my security agent application normally. If user/admin/root try to delete the .app file then OS should ...
2
votes
2answers
3k views

JetDrive 725 - SHould I use TRIM enabler?

I just installed a JetDrive 725 and it is really nice! As I am using Yosemite, TRIM can not be enabled that easily, and the TRIM Enabler is needed. Now there is a certain risk when using it, as kext-...
0
votes
1answer
171 views

Will OS X ever install anything suspicious without my express permission?

I clicked a link (turned out to be Breitbart) that said "your Flash is not updated", despite the fact that I just installed it yesterday. The two choices were "Update" and "Ok". Strangely, there was ...
2
votes
1answer
43 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
1
vote
1answer
39 views

How to be sure my Mac is fully disconnected?

On many occasion thinking that my Mac was disconnected from any form of network (with or without wire), I discovered that in fact it was confortably chating at full speed with the rest of the world ...
0
votes
1answer
69 views

Lock computer without disabling output to external monitor

I want to display a video on an external monitor while the computer is locked (so that no one can walk up and stop the video, access my account, etc.). Can I do this in OS X? If not, are there any ...
11
votes
1answer
798 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
2
votes
1answer
997 views

Sandbox browser for safely viewing malicious websites

I'm looking for a quick and safe way to browse potentially malicious / infected websites. So far all of the products I've found are PC only. I can run a Virtual PC environment but it's a pain and I'm ...
1
vote
0answers
147 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
2
votes
1answer
32 views

Is there any way to let apple know shellshock patch download is broken?

I am trying to patch Lion (10.7.5). According to shellshocker.net, I am vulnerable to 6 out of 7 possible exploits. The download link for Lion is broken: https://support.apple.com/kb/DL1767?locale=...
0
votes
1answer
76 views

How to update Mac OS X 10.9 keychain access

I am using Mac OS X 10.9 and I am trying to update my keychain password. I have just changed some Facebook password so that now when I log into Facebook, the password that is put by my Mac OS X system ...
3
votes
1answer
7k views

Can't remember security questions and rescue email ends with .cim instead of .com so I can't use it to reset my questions

My cousin wanted to buy something from the app store. I let her use my account to do so. It asked us to answer security questions but I couldn't remember them. So I tried to reset it but the link to ...
2
votes
3answers
3k views

Is there a security tools package for Mac OS X?

I mean a package of tools like those in the Kali Linux distribution.
1
vote
2answers
213 views

Mysteriously, a rectangle has appeared in the middle of the screen. How to get rid of it?

I have a iMac (27-inch, Late 2009) running OS X Yosemite v 10.10.2. Mysteriously, a rectangle has appeared in the middle of the screen. Proportionately, it looks like a golden section. It floats on ...
0
votes
1answer
67 views

show Apple ID or Email on iMessage

How can you change the phone Nr. from showing up on iMessage? I'd rather have it changed to my email or Apple ID instead.
2
votes
1answer
8k views

Apple ID password vs iCloud password - better to be the same or different?

I have too many passwords to track on too many devices. With my apple devices & services, it would be easier for me if both my iCloud and Apple ID passwords were the same. Should this be ok or is ...
0
votes
0answers
51 views

“wants to make changes” dialogue

Suppose I want to run an application I have downloaded and I am prompted with the following dialogue. If I enter my username and password, being user that has administrator privileges, and press ok,...
1
vote
1answer
2k views

accessing Keychain Access from terminal - OSX

I am on OSX and using my terminal to access my Keychain Access. So I use this command security find-internet-password -a myaccount -s myservice -g and it works correctly but before I can get the ...
0
votes
1answer
469 views

Apple ID - Security questions reset

When I'm logging in my Apple ID (https://appleid.apple.com/account/home) in the tab "Password and Security" there are security questions, just like this article says: http://support.apple.com/ru-ru/...
0
votes
0answers
333 views

Someone else registered my e-mail as their Apple ID

Someone has opened an account with an Apple ID in a domain that I own. I did not open it. I am absolutely sure I did not. It is {my name}@{my surname}.com. So needless to say, I want the Apple ID ...
0
votes
3answers
553 views

How can I check USB drive contents safely?

I would like to check the contents of a USB stick drive from a not-quite trusted source (my sister): is there a safe way to do this in OSX 10.9.5 or 10.10.1?
3
votes
2answers
4k views

My iMac has been hacked via sshd. What now?

My iMac runs Mac OS X Yosimite 10.10.1 I accidentally had "Remote Login" enabled in my Mac's system preferences, so the sshd was running. I just notified in Little Snitch's network monitor window, ...
0
votes
1answer
873 views

App Store keeps asking for admin password

I periodically get the following dialog box on my MacBook, running OS 10.9.5: App Store is trying to install Apple-provided software. Type an administrator's name and password to allow this. I ...
10
votes
9answers
840 views

Trash folder is not emptying because of the P ͎̮͉͍ͨ̈́̾̈́A ͎̮͉͍ͨ̈́̾̈́I ͎̮͉͍ͨ̈́̾̈́N ͎̮͉͍ͨ̈́̾̈́.jpg file

When I cd ~/.Trash in the terminal, it shows that there is a folder Downloads, and inside the Downloads folder, another folder Reactions, and inside Reactions, there is a file called Shutting down ...
2
votes
1answer
144 views

Is there any way to run Network Link Condition from a Standard User account?

There is a known issue in Network Link Conditioner where if you install it in the normal way (Xcode > Open Developer Tool > More Developer Tools > Install Hardware Tools) it will run from an Admin ...
0
votes
2answers
68 views

Can iPad be hacked if password's security is questionable?

Is it possible for a "family member" that knows my passwords and has had access to my iPad to control my iPad from a different location? ....Camera or even turn off my iPad completely? Recently my ...
1
vote
1answer
501 views

How can I use wifi only for handoff?

Ok OSX wizards... I have a dilemma. In order to use handoff/continuity at work I need to connect my Mac and iPad/iPhone to the same wifi network. Moreover, I also need to be connected to the ...
0
votes
1answer
174 views

FaceTime on my MacBook

I just noticed that my camera light was on on my MacBook. I looked down at my dashboard and it said 9 users were on my FaceTime. I freaked and shut it down. Now is there anyway I can find out who was ...
1
vote
1answer
602 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
1
vote
2answers
3k views

Is my Mac partition secure if it has FileVault 2 but the Boot Camp partition is unencrypted?

With a Macbook Pro Retina running OS X 10.10 and Boot Camp Windows 7, my Mac HD is encrypted with FileVault 2 and the Boot Camp partition is unencrypted. Does this weaken the security of the Mac HD ...
0
votes
1answer
114 views

Internet Sharing abnormal password request

My Mac lost ethernet connection yesterday briefly whilst Internet Sharing was running. I rebooted. Internet Sharing wasn't accepting connections at all. I deleted the relevant files in: /Library/...