If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

4
votes
1answer
54 views

Limit list of apps user can launch?

In Windows it is possible to configure system so, that user runs only some list of applications (for example Word, Excel, PowerPoint...) and user can't launch anything else. How can I configure OS X ...
1
vote
1answer
517 views

How can I instal VirtualBox without Admin permissions? [closed]

I am using a MacBook Air. Its got a 60gb harddrive. I want to install VirtualBox so I can run Horizon, Modio, and Usb XTAF explorer. I've tried using Crossover (I don't know how it works :(. I tried ...
5
votes
1answer
595 views

How do I automatically connect to a VPN when using Wi-Fi in OS X?

The FBI issued a warning regarding hotel Wi-Fi access points, and any other public access point. I'd like to make sure my apple device always uses a VPN when using Wi-Fi. That way even if an attacker ...
1
vote
3answers
3k views

Locking down all apps except the phone/call app on the iPhone 4 running iOS6?

Is there a way to lock out all apps except just the phone app in order to make calls? I understand "Guided Access" isolates you to a particular app and not let you move out. This works fine but is ...
3
votes
2answers
522 views

AD User as an administrator on the Mac?

I'm looking for a way to add an Active Directory user to a Mac and let them administrate the machine, without making more than just that user an administrator. Right now, I'm using Directory Utility ...
2
votes
1answer
86 views

secure erasing empty space without destroying the disk

I know I can use Disk Utility to secure erase a disk. My question is: I have a disk half empty. I would like to know if there's a way to secure erase the empty part of the disk. I mean, an ...
0
votes
0answers
135 views

Calendar, addressbook access by an app and the data use policy questions

When an iOS app seeks permission to access my addressbook or calendar, what is it that they can do with my data? I am thinking of these things. Do they transfer the data from my device to their own ...
2
votes
1answer
2k views

How can I enable fingerprint authentication on a Mac? What compatible scanners are available?

Do you know if there's a way to have fingerprint authentication on Mac? If so, is there any scanner compatible available?
10
votes
1answer
256 views

Clipboard survives a reboot. Is it secure?

I noticed that things in my clipboard survive a reboot - love it, very convenient. But I'd guess that's written to disk, and if I had physical access to your machine, I could reboot it and access the ...
1
vote
1answer
599 views

How to fetch an AirPort/Wi-Fi password using /usr/bin/security

I have been trying to use /usr/bin/security rather than hard coding login/password information into scripts. For example, here's how you get the password for 'pinboard.in' security 2>&1 ...
0
votes
2answers
894 views

Is JavaScript secure? [closed]

I have a couple of websites I have to use that require Java so I am leaving it on in Java Preferences.app, disabling it on all browsers bar one that will only be used for those sites. Am I safe to ...
-1
votes
2answers
4k views

How to not allow other people to access your mac?

i've been noticing strange things since I moved in my apartment. One time or another I can see airplay icon that appears out of no where, I'm concerned that someone might get access to my mac, is ...
1
vote
1answer
447 views

How do System Preferences remain unlocked?

To make certain modifications to system preferences, you first need to unlock the preference pane. Some of these changes are done on a system level and the command-line equivalent would need to be ...
20
votes
2answers
2k views

What potential dangers arise from a mass iOS UDID leak?

Can anyone enlighten us with what a hacker could use one (or a list of) UDID for? The leak reported September 4 of 1 million UDID's by AntiSec makes me worry. But should I? What is the worst case ...
0
votes
1answer
225 views

What is Logger.bundle?

I am running a late 2010 MacBook Air running OSX Mountain Lion with latest update. Looking around in my system folders I found a file called Logger.bundle and it's in my ...
4
votes
1answer
297 views

Is there a way to enable Java only for specific applications?

I know that it is possible to completely disable Java in OS X, and to disable its use from within a given browser. I use just one or two applications that require Java, and would like to enable it for ...
0
votes
1answer
281 views

how to track the pid of a process using mDNSResponder?

I'm searching the right way to identify which pid/process ask to mDNSResponder to resolve dns query. In other terms I want do identify which process do which dns query through mDNSResponder and in ...
6
votes
3answers
160 views

Avoiding malware in recommendations?

Occasionally, answers on this site include software recommendations. Let’s assume a "legitimate developer" pretends to have created a useful application that is (secretly) capable of doing harm. How ...
0
votes
1answer
462 views

Public Wifi spot + “Not trusted” = Danger?

Occasionally, when trying to connect to open Wifi spots (unknown to me)... ... my iPhone gives me a warning about the server identity... ... and shows a dialog that looks like a certificate ...
1
vote
1answer
309 views

How I do permanently authorize an app on my mac?

I use Clean My Mac to periodically clean out old log files and caches. Right before the clean, it asks me permission and I have to enter my password to authenticate. Is there any way I can authorize ...
0
votes
0answers
186 views

Why does OSX hang when logging in to a Windows network?

For the last couple of years I've used a MacPro + SnowLeopard at work. We have a Windows network so I have to do a network login into our domain. I sometimes login with my local Mac machine account ...
1
vote
0answers
185 views

Do I have malware? Mysterious connection made by app

I have Little Snitch installed. I use an app [that shall remain nameless in case this is a false alarm]. I was recently reviewing connection attempts in Little Snitch, and it claims that [this app] ...
2
votes
0answers
224 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
3
votes
1answer
376 views

Remember Kerberos tickets after reboot

I need to use Kerberos to connect to my network at work. The built-in kinit and ssh in Lion work fine for me. However, I need to get a new ticket and re-enter my password every time I restart the ...
9
votes
2answers
4k views

How long does Apple provide support for Mac OS X?

I am currently using Apple 10.6 (Snow Leopard). How long will Snow Leopard be supported for? Does Apple provide an end-of-life policy in writing? I have read that Apple tends to only provide security ...
4
votes
3answers
579 views

What is accessible to an attacker who has reset my administrator password?

I understand that it is possible to reset the administrator password on a Mac, allowing someone with physical access to a machine to create a new password that gives them access to all files unlocked ...
1
vote
1answer
345 views

How are passwords stored by Apple TV?

Apple TV stores a number of passwords (or some kind of credentials) needed to access services like Vimeo and YouTube, as well as the Apple IDs needed to access the iTunes Store (and the now defunct ...
2
votes
1answer
188 views

Has iOS Always had Secure Boot?

In Apple's recent iOS Security paper here http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf They speak about the Secure Boot Chain, my question is has iPhones/iPods/iPads always had ...
1
vote
1answer
184 views

What steps I should take for data security and prevent misuse of my lost iPhone?

I lost my iPhone 4 and mistakenly wiped it using "Find my iPhone" from https://www.icloud.com/. Can i even track it? It was locked by password. Now I think it's sure that I can't track my phone. I ...
4
votes
2answers
1k views

Should I use the same Apple ID for iCloud and iTunes?

Should I use the same Apple ID for iCloud and the iTunes store? My immediate assumption was "sure, of course, keep it simple", but today I read the following recommendation: One potential problem ...
3
votes
2answers
3k views

Does Remote Wipe securely wipe the contents of the drive?

With all the ruckus surrounding the Mat Honan debacle, I'm curious: When you remotely wipe a Mac, is it a secure wipe or does it just lock down the machine with a code? From the Wired article: ...
8
votes
2answers
338 views

How does Apple's Power Nap interact with File Vault?

If a machine is periodically waking up to check for updates with Power Nap, does this also mean the disk encryption keys are always in RAM? If so, this makes a DMA attack against a "sleeping" Mac ...
1
vote
1answer
1k views

Where are Safari 6.0 passwords saved?

Prior to version 6.0 Safari had no features for managing passwords distinct from the system wide support provided by Keychain: but Safari 6.0 adds a new tab in its Preferences dialog for saving and ...
1
vote
4answers
289 views

Why is Mountain Lion more security conscious?

Whenever I open an application not downloaded from the App store (or a trusted vendor) I get a warning. The warning reminds me a bit of the awful window popup that comes up every time you want to ...
0
votes
1answer
82 views

Apple Developer certificates for signing mail?

If every registered Apple developer have a certificate for signing their apps. Is that certificate also good for signing mails? And by this, I also mean if their certificate is backed up by a root ...
11
votes
1answer
3k views

With a firmware password set on a Retina MacBook Pro, what are recovery options?

I am considering setting a firmware password on my Retina MacBook Pro for security reasons. If I do this and later lose the password (or other such extenuating circumstances), how can the data be ...
2
votes
1answer
822 views

Does iCloud use client-side encryption?

I would like to know if iCloud uses client-side encryption i.e. all data is encrypted on client side and even Apple can't decrypt the data and read it. Is this true for iCloud?
2
votes
1answer
47 views

Which Apps on my Mac need security updates?

I have a lot of software installed from sources other than the Apple Store. Is there a service to check which app have security updates ready to be downloaded? Opening each one on Fridays for a ...
11
votes
2answers
12k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
2
votes
1answer
2k views

OS X 10.7 Lion: Reset master password to FileVault 2

I need to reset or delete my master password to FileVault 2. This is the password found under System Preferences > Users & Groups > Service gear > Change Master Password. It's a backup in case a ...
4
votes
3answers
361 views

iPhone passcode security

I was looking at a companies that to do repairs to iPhones to decide if I wanted to DIY or just pay someone to do it, and noticed one company that listed a service named "Remove Passcode". This was ...
3
votes
3answers
2k views

How can I verify a Lion FileVault recovery key?

I have a volume that is encrypted with OS X Lion's full-disk FileVault. When I enabled FileVault I was given a recovery key, which I wrote down. I'd like to verify that the recovery key that I wrote ...
1
vote
1answer
66 views

Are there any security vulnerabilities that would allow an attacker to change the admin password?

A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured ...
1
vote
3answers
193 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this ...
6
votes
1answer
325 views

Is it possible that some hacker is logged in to my computer?

When I type w at the terminal I see myself logged in two times. What are console and s000? Is it possible that one of these neos is actually somebody else?
4
votes
1answer
704 views

Suspicious NTPD Connection

I use Little Snitch on Mac OS X 10.6.8 and noticed a connection that seemed suspicious to me. The snitch reported ntpd trying to connect to: "$host 94.23.243.53 53.243.23.94.in-addr.arpa domain ...
21
votes
3answers
343k views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
0
votes
2answers
41 views

Which version of iOS is the May 12 security paper referring to?

Apple has published a paper on security controls in iOS, which specific version is this referring to?
14
votes
1answer
846 views

Should I make my primary user an Administrator or not?

For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
4
votes
5answers
22k views

How do I examine my iPad for malware?

Lately I occasionally get redirected to other websites when I load some news websites. It could be a banner redirect I guess, but I suspect something more sinister. The iPad is NOT jailbroken and ...