If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

-1
votes
0answers
26 views

What are the ignored codepoints in filenames on Darwin? [on hold]

I just remember about 0x200c being stripped when attempted to be writen inside a filename (triggering 2 major flaws in git and mercurial). But generally, what is the rule for telling what characters ...
0
votes
0answers
22 views

How does iOS distinguish between 'managed' and 'unmanaged' apps under MDM?

MDM pushes a configuration profile listing managed apps, presumably using only their BundleIDs? iOS takes this information and makes logical decisions/rules for that application. I know that for an ...
0
votes
0answers
27 views

Is my system hacked - localhost points to a remote IP different from my public IP. [on hold]

I tried to scan ports open on localhost I found, it points to a remote IP Address in Australia, the IP Address is different from my IP Address. What can I ensure to restore the control of my ...
0
votes
0answers
16 views

How can I manually disable secure input?

Since upgrading to 10.11 I've noticed that Secure Input regularly fails to disable itself when I wake my Mac from sleep and type my password in. I know this because TextExpander starts telling me that ...
1
vote
2answers
71 views

How to prevent someone accessing my iMac

My desktop is in the living room where anyone visiting can access it. I'd like to make it secure from those in my home since I have a roommate.
3
votes
4answers
1k views

A security update locked OSX.GenieoDropper.A

I need to launch an app but OSX recognise it as a malware. While launching this app, OSX says "app will damage this computer. You should eject this disk image. It contain OSX.GenieoDropper.A". ...
1
vote
1answer
246 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
1
vote
1answer
25 views

How secure are files on an unencrypted hard disc?

How secure are files, that I saved on an internal Macbook hard disc using OSX 10.11? I cannot check whether the hard drive is encrypted using FileVault as the machine crashed. I am thinking whether I ...
0
votes
0answers
21 views

OS X and apps keep forgetting saved credentials and login status

The past couple of weeks, several apps have forgotten stored credentials a number of times: Google and iCloud account configured on the Macbook (have had to verify my Google account using 2-step ...
2
votes
1answer
587 views

How is it possible to remotely access photos on iPhone?

Is there any software to do so, and what would it take to install it? Another person had physical access to my phone, so I suspect the possibility of installation of such software. Even photos which I ...
1
vote
1answer
49 views

Hardening OSX 10.11

I'm following the instruction, on hardentheworld.org to harden my OS X 10.11. When I send the following command: sudo defaults write /System/Library/LaunchDaemons/com.apple.mDNSResponder ...
2
votes
2answers
139 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
1
vote
1answer
23 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
1
vote
1answer
1k views

impact and removal of XcodeGhost

Unfortunately, I installed some of the apps mentioned on this list, and confirmed that the versions I have are still compromised by XcodeGhost: ...
0
votes
0answers
23 views

Making local web server (nginx) accessible from local network

Previous versions of OS X had a Sharing setting called "Web sharing" I think, which opened port 80 so the local Web server could be accessed from other computers in the same local network. This ...
28
votes
1answer
937 views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
1
vote
2answers
47 views

Does FileVault 2 encrypt keys in sleep mode?

I have an early 2015 13" MacBook Pro running OS X 10.11.2 and I'm considering enabling FileVault 2. I realize that the disk is always encrypted, even when the machine is in use and only parts of it ...
4
votes
1answer
5k views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
2answers
3k views

Is my Mac partition secure if it has FileVault 2 but the Boot Camp partition is unencrypted?

With a Macbook Pro Retina running OS X 10.10 and Boot Camp Windows 7, my Mac HD is encrypted with FileVault 2 and the Boot Camp partition is unencrypted. Does this weaken the security of the Mac HD ...
1
vote
1answer
18 views

What determines the relevant version of OpenSSL in a given network connection?

My own system is I think fully "up to date" as far as Apple security updates through the App Store, but the version of OpenSSL installed on my system is 0.9.8zg, a version that was current during the ...
8
votes
1answer
7k views

Is the lock screen PIN secure enough when sending in for repair?

The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
7
votes
7answers
23k views

3rd-party SSDs: enabling TRIM without disabling kext signing

Before reading this long question, please note that it is mostly outdated in light of the more recent developments reflected by the top answer. Unfortunately Apple has decided to create kext signing ...
8
votes
2answers
2k views

How do I automatically connect to a VPN when using Wi-Fi in OS X? [duplicate]

The FBI issued a warning regarding hotel Wi-Fi access points, and any other public access point. I'd like to make sure my apple device always uses a VPN when using Wi-Fi. That way even if an attacker ...
7
votes
6answers
40k views

How to disable automatic wifi connection?

When OSX already knows an wifi network it auto connects to it, but when it doesn't know the wifi network it will auto connect depending of the setting of the "ask to join" toggle setting in system ...
0
votes
0answers
34 views

Security issue on my Mac

I have recently installed kaspersky internet security 2015 on my macbook pro, when I managed to update some applications from the Mac app store it required entering the password, BUT when I entered it ...
3
votes
2answers
132 views

My computer has no admin user

In system preferences, under users, standard is written under my name and there is no admin. When i try to change preferences it asks for admin name and password to unlock it but my login password ...
6
votes
2answers
162 views

How can I create a user that can login through SSH but not on the local desktop in MacOS X El Capitan?

I would like to have a user account in my MacOS X El Capitan system which is limited to login through SSH. I do not want that user to be able to use the system through any other means, especially not ...
13
votes
6answers
3k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, ...
0
votes
1answer
60 views

How (in)vulnerable is OS X to encryption ransomware?

These days, malicious software seems to be infecting Windows computers, encrypting their data against their will, and asking for a Bitcoin ransom in exchange for the encryption key. In order for ...
5
votes
1answer
208 views

How to enforce sandbox rules for the particular app?

I wrote an sandbox specification file (inspired by files from /usr/share/sandbox and manuals like this) and now I can launch some app in sandbox with sandbox-exec $path_to_rules ...
3
votes
1answer
42 views

How to ensure Slack runs safely in sandbox?

For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless ...
0
votes
1answer
97 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
1answer
58 views

OS X management profiles / root certificate

My father asked me to sort out some things on his MacBook. He's recently left his company where he used his laptop on the company servers/IT system whilst he was there. At some point in the past he ...
1
vote
1answer
36 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security ...
0
votes
1answer
50 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
2answers
3k views

iPhone 6 stolen. Did I accidentally cancel my pending data erase by removing account from iCloud too soon?

I lost my iphone 6 maybe 2 hours ago and proceeded to do some damage control by accessing the Find My iPhone feature on iCloud. In the following order in the span of maybe 10 minutes, I turned the ...
1
vote
3answers
111 views

Is my Macbook safe?

So, I own a macbook but I'm unsure whether I need an antivirus software with real-time scanning capability or not. I don't have flash or Java enabled in my browser (using safari). I've configured my ...
0
votes
0answers
23 views

Should a MacBook emit EMF fluctuations when wifi and bluetooth are turned off?

I have a couple of MacBooks. Both have SSD drives. Using a Trifield EMF meter with radio/microwave capability, if I hold the meter near the laptop (where I understand the wifi antenna is located), I ...
1
vote
1answer
2k views

Someone made a FaceTime call with my number

My husband told me that he received a FaceTime call from my number but he missed the call. I never called him and I don't have any outgoing calls in my phone or anything. Is my Apple ID compromised?
1
vote
1answer
1k views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
3
votes
1answer
50 views

Safe to allow students to access Terminal.app in a shared environment?

Background: We have a lab of Macintosh computers, all running 10.10.3 currently, that are for classroom instruction. Students typically use their own login/password via Active Directory to log in to ...
0
votes
1answer
48 views

What is Apple's policy for supporting security updates on older versions of iOS?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each iOS release? I observe that many people complain about performance issues with iOS ...
0
votes
0answers
43 views

Adobe Acrobat Reader DC / Acrobat Pro Data Submission TLS Issues

This question is somewhat related to this one (http://apple.stackexchange.com/questions/201310/how-to-activate-tls-1-0-in-adobe-acrobat-on-mac), as I've seen the same behavior in both Adobe Reader DC ...
-1
votes
1answer
32 views

Is a .sparseimage file with a strong password safe?

I have created a .sparseimage file of my Home folder on my 2009 iMac running OS 10.11.2 and have chosen a 17 character password which https://www.grc.com/haystack.htm notes that against an Offline ...
1
vote
1answer
98 views

Is there any way to run Network Link Condition from a Standard User account?

There is a known issue in Network Link Conditioner where if you install it in the normal way (Xcode > Open Developer Tool > More Developer Tools > Install Hardware Tools) it will run from an Admin ...
7
votes
1answer
1k views

I want to make an Apple ID, but someone has already used my email to create their own. How do I kick them out completely?

Since this person has used my email as their login, I was able to reset the password since it was listed as the primary email. Unfortunately this person has set their own security questions and ...
1
vote
2answers
2k views

Trust this computer - what is shared?

Apologies if this has been asked before, but when you trust a computer, what data is shared? I'm on iOS 8 and have been plugging my personal phone into my work PC for charging. I click "trust" ...
0
votes
0answers
18 views

Can Keychain use the same credentials for multiple sites?

I'm working in an enterprise environment in which one password is used across a number of different websites. Changing my password is painful, because it has to be re-entered for each site. Too many ...
0
votes
0answers
9 views

Can a backup HD be erased despite it NOT being able to be “unmounted”

An external portable HD simply stopped working [no longer recognised by my Mac] so I took it back for warranty replacement. He couldn't read or "unmount" it either [whatever that means] so I just said ...
2
votes
4answers
14k views

How to I protect my jailbroken iPhone/iPod Touch/iPad?

People always say, "Jailbreaking can cause security problems." That might be true, but in some instances, you just need to jailbreak it. How can I protect my iPhone and my data when it is jailbroken? ...