If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
1answer
8 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
1
vote
0answers
4 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. A prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec when available, and ...
8
votes
1answer
181 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
0
votes
1answer
21 views

“File” NOT “App”… can't be opened because it is from an unidentified developer

got an mp3 via email from a musician friend of mine today. when i try to open it (in any app... itunes, quicktime, vlc, etc), i get this message as if it's a new Application that i just downloaded ...
0
votes
0answers
36 views

I can't find the adware to remove it [duplicate]

I have some pretty invasive adware going on right now. It is in both Safari and Chrome, so I don't believe it is an extension (I have also looked through all extensions). I have also tried searching ...
0
votes
0answers
8 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
1
vote
1answer
11 views

Safari for one user can't connect to local server via https due to new cert

This is similar to Safari can't connect to https, but is just for one single https site. Safari can't connect to my local NAS' HTTPS site anymore because it "can't establish a secure connection". ...
2
votes
1answer
39 views

Accessing iCloud passwords without a Mac

I mostly use Macs and iOS devices, so I've started using the iCloud password manager for better account security. Of course, all the world is not a Mac, but passwords are ubiquitous. When I am using ...
3
votes
2answers
49 views

What are the risks if you install an app that's not from the App Store?

On my iPhone (iOS 8.2), I installed an app that wasn't coming from the App Store. I chose to trust it because a serious news website had spoke about it, but now I'm a little bit worried of what this ...
-3
votes
0answers
26 views

What is doulci? [closed]

Is it really a only one which is used to break icloud security??can anyone tell me that how it is working.if apple know this then why they are not taking any action against DOULCI???
13
votes
3answers
29k views

Is the message “You must change your passcode within 60 minutes” valid / non-malware?

A few minutes ago, after unlocking my phone (iPhone 4, iOS 7.0.1) I got a dialog over the home screen: Passcode Requirement You must change your passcode within 60 minutes and it offered to ...
2
votes
1answer
98 views

Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root

I'm working on a security agent. Wherein I do not want to allow any user/admin/root to delete my security agent application normally. If user/admin/root try to delete the .app file then OS should ...
1
vote
1answer
83 views

Security Update 2015-002 Asks To Setup Mac

I just had to install the latest Security Update from the Mac App Store and it started auto updating. Then when I completed the update (and restarted) my Mac asked me to enter in my Apple ID ...
0
votes
1answer
38 views

Mac OSX : How to protect daemon process from stopping by root/admin

I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1. The daemon I've currently can ...
0
votes
1answer
904 views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
0
votes
1answer
24 views

How to get rid of annoying Non-secure Jabber Login popup?

My Messages app out-of-blue started to complain that my GTalk credentials are being sent in non-secured manner. Your name and password will be sent in a way that is not secure. Do you still ...
3
votes
2answers
248 views

My iMac has been hacked via sshd. What now?

My iMac runs Mac OS X Yosimite 10.10.1 I accidentally had "Remote Login" enabled in my Mac's system preferences, so the sshd was running. I just notified in Little Snitch's network monitor window, ...
-1
votes
0answers
19 views

How long Before Apples FileVault AES 128 Encryption Will Be Cracked? [duplicate]

Hey everyone so I have an encrypted hard drive that has countless memories on it and I do not know the password to it. When I was encrypting I retyped the password twice then clicked that stupid key ...
14
votes
3answers
35k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
2
votes
1answer
101 views

JetDrive 725 - SHould I use TRIM enabler?

I just installed a JetDrive 725 and it is really nice! As I am using Yosemite, TRIM can not be enabled that easily, and the TRIM Enabler is needed. Now there is a certain risk when using it, as ...
1
vote
2answers
2k views

FileVault security hole when used on SSDs

I just woke up to the fact that it looks like user data can be leaked when using FileVault and Migration Assistant on an SSD on a new Mac when following the default prompts. When I set up a new Mac, ...
3
votes
1answer
63 views

What info does a Mac broadcast and how to hide it?

I want to run a Mac in the cloud as a webserver and for facilitative use. I've secured most of my used tools already, but I was wondering about the OS itself. Imagine I'm running an up-to-date ...
1
vote
2answers
715 views

Safari not warning on SSL certificate hostname mismatch

For some reason (e.g., bad preferences setting, maybe?) Safari 6.0.5, on OS X 10.8.4, is failing to give me an SSL Certificate Warning when I visit a site whose hostname doesn't match the hostname ...
4
votes
2answers
10k views

Allow Apps won't unlock in Security & Privacy - Yosemite

When I was running Mountain Lion I selected "Allow apps downloaded from: Anywhere" in Security & Privacy. I updated to Yosemite a few days ago. The update set that back to: "Mac App Store and ...
0
votes
1answer
41 views

Will OS X ever install anything suspicious without my express permission?

I clicked a link (turned out to be Breitbart) that said "your Flash is not updated", despite the fact that I just installed it yesterday. The two choices were "Update" and "Ok". Strangely, there was ...
4
votes
1answer
2k views

Can I decrypt a dm-crypt filesystem on OS X?

I've been an Ubuntu user for years, and I just got my first Mac. One thing I haven't yet figured out is how to decrypt my encrypted filesystem on which I store my SSH and GPG keys on my flash drive. I ...
4
votes
5answers
10k views

3rd-party SSDs: enabling TRIM without disabling kext signing

Unfortunately Apple has decided to create kext signing in Yosemite that creates issues for SSDs that require Trim support for optimal function and longevity. Whether this is vendor lock in or not, ...
1
vote
4answers
795 views

Why is my MacBook visibile on Bluetooth after Yosemite install?

Since upgrading to Yosemite (from Mavericks) my MacBook Pro (Retina mid 2014) is visible (in "advertising mode") on Bluetooth (at least to my iPhone). It was not visible prior to Yosemite, and there's ...
8
votes
2answers
3k views

How to disable single-user boot (command S)

By default, Macs are extremely insecure if somebody can get physical access, as they can simply shut it down, press the power button, hold command-S, and there, they get root access in 5 seconds. Is ...
2
votes
1answer
32 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
1
vote
1answer
29 views

How to be sure my Mac is fully disconnected?

On many occasion thinking that my Mac was disconnected from any form of network (with or without wire), I discovered that in fact it was confortably chating at full speed with the rest of the world ...
0
votes
1answer
24 views

Lock computer without disabling output to external monitor

I want to display a video on an external monitor while the computer is locked (so that no one can walk up and stop the video, access my account, etc.). Can I do this in OS X? If not, are there any ...
2
votes
1answer
65 views

Sandbox browser for safely viewing malicious websites

I'm looking for a quick and safe way to browse potentially malicious / infected websites. So far all of the products I've found are PC only. I can run a Virtual PC environment but it's a pain and I'm ...
1
vote
0answers
20 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
0
votes
1answer
4k views

How do I reset/change my security questions on my Apple Id

I have an Apple ID and I know my password, but forgot the answer to the security question. I tried to change it at appleid.apple.com but we don't have a link to reset it. See the picture. Please help ...
1
vote
1answer
1k views

Has my computer been hacked

I'm trying to find out if someone has hacked my computer. In case I get the following message in my Terminal window: "Last login: Tue Sep 30 02:02:18 on console" does that mean a person has logged in, ...
2
votes
4answers
3k views

How to get rid of booby-trapped pop ups to update flash player?

I'm coming across a malicious pop up to update my flash player. The message in the pop up: Warning! Your Adobe Flash Player version is outdated. Security risks. Please update now. I've seen this ...
2
votes
1answer
27 views

Is there any way to let apple know shellshock patch download is broken?

I am trying to patch Lion (10.7.5). According to shellshocker.net, I am vulnerable to 6 out of 7 possible exploits. The download link for Lion is broken: ...
0
votes
0answers
35 views

How to update Mac OS X 10.9 keychain access

I am using Mac OS X 10.9 and I am trying to update my keychain password. I have just changed some Facebook password so that now when I log into Facebook, the password that is put by my Mac OS X system ...
3
votes
1answer
130 views

Can't remember security questions and rescue email ends with .cim instead of .com so I can't use it to reset my questions

My cousin wanted to buy something from the app store. I let her use my account to do so. It asked us to answer security questions but I couldn't remember them. So I tried to reset it but the link to ...
2
votes
2answers
345 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...
1
vote
1answer
1k views

How to tell whether Little Snitch is running or stopped?

I am running Little Snitch in demo mode: After a few hours, how can I tell whether Little Snitch is running or stopped? From the official website: Free Evaluation License Little Snitch ...
2
votes
1answer
112 views

Disabling Java plug-in globally?

After following the instructions in this answer (briefly: Java prefs pane → Security → disable "Enable Java content in the browser") to disable the Java plug-in globally, I'm presented with an admin ...
7
votes
3answers
20k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
1
vote
1answer
67 views

Is there a security tools package for Mac OS X?

I mean a package of tools like those in the Kali Linux distribution.
1
vote
2answers
63 views

Mysteriously, a rectangle has appeared in the middle of the screen. How to get rid of it?

I have a iMac (27-inch, Late 2009) running OS X Yosemite v 10.10.2. Mysteriously, a rectangle has appeared in the middle of the screen. Proportionately, it looks like a golden section. It floats on ...
1
vote
1answer
179 views

mdflagwriter using port 21?

I have a 17" mid 2010 MBP with 8GB ram. After reading up on some of the latest vulnerabilities, I did a port scan and found port 21 OPEN vs stealth for all other ports. I cannot figure out what is ...
0
votes
0answers
35 views

How to lock down safari?

I'm a Linux user, but a friend comes to me with tech support questions from time to time. Generally, I refer him to the genius bar. He's getting spyware due to browsing habits, and, apparently, the ...
2
votes
4answers
9k views

How to I protect my jailbroken iPhone/iPod Touch/iPad?

People always say, "Jailbreaking can cause security problems." That might be true, but in some instances, you just need to jailbreak it. How can I protect my iPhone and my data when it is jailbroken? ...
0
votes
1answer
53 views

show Apple ID or Email on iMessage

How can you change the phone Nr. from showing up on iMessage? I'd rather have it changed to my email or Apple ID instead.