If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

6
votes
1answer
6k views

iOS auto-erase after 10 wrong passcode attempts: will the iCloud activation lock still work?

After a recent and unsettling experience of having my iPhone stolen a few weeks ago, I have tried to harden the security settings on my new device. The old device has still not responded to a remote ...
6
votes
1answer
23k views

Remove personal data without doing a full reinstallation

I am selling an old Mac with OS X 10.4 (Tiger), and I don't have the installation CD anymore so I can't format and re-install; I have to leave the current installation intact. Obviously, I'd like to ...
4
votes
2answers
8k views

How to create a password protected ad-hoc network on Yosemite

I just tried to create an ad-hoc network on OS X Yosemite and noticed there are no password options. Are they hidden? If so, is there any way to enable them? Is Terminal an option? Is it possible to ...
1
vote
0answers
64 views

CVE-2016-4631 and Older Devices

tldr; How far back does the TIFF exploit affect iOS and OS X legacy versions? I've found conflicting information regarding how far back the recently reported image exploit can affect both iOS and OS ...
0
votes
1answer
12 views

Apple support contacted by someone pretending to be me

Yesterday i received an automatic mail for apple thanking me to have contacted the support and there was a practice ID and my mail. The problem is that i never contacted the apple support, so i ...
1
vote
3answers
1k views

Disable System Integrity Protection on OS X running on VMware

I have an instance of OS X El Capitan running on VMWare Workstation 10. I need to make changes to /System and therefor have to disable System Integrity Protection. How do I access recovery mode on ...
0
votes
0answers
13 views

Blocking IP address and on certain ports using hosts.allow and hosts.deny

The IT department of my employer has detected brute force attacks via SSH and VNC on some Mac computers, and we're trying to solve this problem by editing hosts.deny and hosts.allow to block all ...
1
vote
1answer
902 views

How do I enable DNSSec on OSX? (Or DNSCurve)

I want to support encrypted IPSec communications, and DANE certs in DNS. Notably, DNSSSec is a prerequisite is IPSec (secure IP addresses from DNS) How can I configure my OS X computer to use DNSSec ...
0
votes
0answers
8 views

WiFi Certificates Accidentally Deleted

I accidentally deleted some certificates from the Keychain Access application and I think they were somehow related to WiFi networks. Now everytime I try to join a network that uses PEAP ...
1
vote
1answer
34 views

Apple.ca accepts answer, Apple ID app/ iCloud doesn't?

how can Apple.ca accept my answers for security questions but when I type them into the set up for iCloud their wrong?? They are each 3 letter words, so spelling & capatlization wouldn't be a. ...
14
votes
4answers
88k views

Which free alternatives to Little Snitch can I use to block internet traffic per applications?

Little Snitch can block internet traffic of a particular app. Can I do something similar without (paying) Little Snitch, either by using free alternatives or configuring the OS X firewall directly?
1
vote
1answer
598 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
0
votes
0answers
13 views

Certificate fingerprint in iOS

When I connect to a particular Wi-Fi network, it asks me to accept a certificate. I can check the certificate details, such as signatures and so on, but not the fingerprint. I'm fairly certain the ...
1
vote
1answer
25k views

How long does it take to Erase All Content and Settings on iPhone 5?

Corporate policy at my job requires a lockscreen passcode on iDevices with corporate email on them, even personal. Yesterday, I set my password, then 5 minutes later had to use it. When I entered it, ...
14
votes
4answers
13k views

Is there a tool I can use to securely wipe data from iPhone, iPad, or iPod Touch?

Is there a tool or application that will securely wipe an iPhone, iPod Touch, or iPad (i.e. any iOS device?) I'm not interested in a complete wipe that would brick the device. Rather, I'd want to ...
13
votes
5answers
352 views

What point is there in using an everyday non-admin account on OS X?

This piece of advice is old but is coming back into fashion. I have seen it a lot recently, on a number of Mac websites or forums. "Your ‘everyday’ user account should not be an admin account. It ...
5
votes
1answer
814 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
1
vote
3answers
85 views

Securing Mac Server after Server Admin got fired

Recently our Network and Server Administrator got let go. We are a small organization and she was alone looking after Windows and Mac Servers. We have tried to secure the network by changing the ...
1
vote
1answer
15 views

Getting exchange password from keychain

Is there a way using security find-internet-password or something similar to get my exchange credentials on the command line? I'm trying to write a script to auto-login into an exchange server and I'...
1
vote
0answers
26 views

Not receiving push notifications for iCloud 2-factor authentication

I followed the instructions on this sixcolors.com blog post to disable and re-enable 2-factor authentication on my iCloud account in order to upgrade to the "newer" version. However, now when I ...
2
votes
1answer
2k views

Bulk removing Wifi networks from an iOS device

This article, "What we give away when we log on to a public Wi-Fi network", demonstrates how dangerous it is for you to turn on Wi-fi on your phone. It advertises the name of every network it has ...
1
vote
2answers
24 views

Forgot the password of a keychain (non the login one)

I have installed a bunch of certificates on my mac, due to italian legal system, in order to login to a certain website with a smartcard. It all worked well for a few months and then yesterday it ...
0
votes
2answers
47 views

What happens after an iPhone has its data auto-erased?

On the "Touch ID & Passcode", there's the option "Erase Data", which says Erase all data on this iPhone after 10 failed passcode attempts. Data protection is enabled. Is it possible to ...
0
votes
0answers
15 views

How secure is apple remote desktop can it be accessed over the internet without a vpn to the local network

If you setup sharing on a computer to allow apple remote desktop is there a danger someone would be able to login and control your computer ? Or can you only connect if you are on the same local ...
12
votes
1answer
25k views

Prevent my Mac from connecting to an unsecure Wi-Fi network?

How can I prevent my Macbook from connecting to non-secure wireless networks? I've ticked the "Ask to join new networks" option and removed the offending network from the Preferred Networks list in ...
16
votes
2answers
13k views

Where does Apple's predictive keyboard get it's “contextual” content from?

So I was playing around with the iOS 8, when I notice that upon typing "new" anywhere, the predictive keyboard suggests the term "NewTerm". I recall using this word in a tweet, so I brushed it off. ...
4
votes
6answers
4k views

Someone has created an account using an email adress in a domain a I own

I own "mydomain.com" (actually something else!) and have a catchall to receive all emails sent to any xxxx@mydomain.com Earlier this week I received an email from appleid@id.apple.com asking me to ...
1
vote
1answer
100 views

Does someone know my (old) Apple ID password?

Today, I suddenly got the following message on my iPod: Question 1: Does this mean that someone has entered my Apple ID password, or are there other situations where this dialog is triggered? ...
1
vote
0answers
122 views

Does auto-unlock in macOS Sierra also auto-lock? [closed]

In WWDC, it was announced that macOS Sierra will have an 'auto-unlock' feature using the Apple Watch whereby if you approach your Mac wearing your Apple Watch, the Mac will automatically unlock. I ...
0
votes
2answers
216 views

iRat Client in El Capitan Logs?

MacBook Air - Early 2014, OS 10.11.3 Hello, found this in my CoreTelephonyTraceScratch logs and found it concerning, based on some limited google results. I do not have an iOS device that I connect ...
2
votes
1answer
38 views

Flash Local Shared Object storage security issue?

I have encountered some strange behavior when navigating through the flash Local Shared Object folders on my computer running OS X version 10.11.5 The behavior is as follows: Navigate to the base ...
1
vote
2answers
2k views

How do I force my MacBook Air into “hibernation” mode?

I have a MacBookAir3,2 (late 2010) running 10.9.3. I want to be able to force the machine to immediately go into "hibernation" mode, but it seems impossible. The usual answer that I have seen is ...
1
vote
0answers
82 views

This Apple ID has been disabled for security reasons — more info?

I recently got a "This Apple ID has been disabled for security reasons" message on all my apple devices. I've have since performed the obligatory password reset process and everything seems to be in ...
0
votes
0answers
12 views

Dynamic list of unknown shared computers appearing on wired computer

I recently setup an old Macbook Pro with OS X Server (El Capitan) and via ethernet connected it to my Airport Extreme. My network is secured with WPA2 personal and a diceware-generated password that ...
1
vote
2answers
1k views

Mac OS X Mail signing messages with S/MIME certificate from startssl

I've got myself an S/MIME certificate from StartSSL, which I have exported from the browser, imported into my keychain and as expected Mail.app is now signing my outgoing messages. However some ...
4
votes
2answers
121 views

An unknown computer is – sometimes – shown in my Finder

In the attached picture you can see the name of an unknown computer (desktop-aqnpumc) in my network. "Delat" means shared and SuperNova is my own TimeCapsule which is shown in Finder. I cannot ...
9
votes
1answer
9k views

Is the lock screen PIN secure enough when sending in for repair?

The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
0
votes
2answers
72 views

Change security question without calling apple

I just submitted a gift card on my apple id and wanted to purchase an app. After pressing buy it asked me to enter my security questions because it's my first time and I have forgot them. I have ...
1
vote
2answers
3k views

Is my Mac partition secure if it has FileVault 2 but the Boot Camp partition is unencrypted?

With a Macbook Pro Retina running OS X 10.10 and Boot Camp Windows 7, my Mac HD is encrypted with FileVault 2 and the Boot Camp partition is unencrypted. Does this weaken the security of the Mac HD ...
5
votes
1answer
76 views

Enterprise iPad: Limit which wifi network can connect to

I'm looking for a policy setting or a creative solution here. Is there a way to restrict the wifi networks an iOS device can connect to? We have business issued iPads, but are worried that they can be ...
18
votes
1answer
2k views

Can someone who registered my iPhone read all my text messages?

My ex-husband registered my iPhone and I have found out he has been using Apple iCloud storage to check up on my every move. Will he have been able to read all my personal text messages? And is ...
2
votes
1answer
1k views

How to get the hash linked to a GeneratedUID in El Capitan?

Trying to find the GeneratedUID in OS X still works (see example below): dscl localhost -read /Search/Users/<username> | grep GeneratedUID | cut -c15- But entering the following into the ...
43
votes
7answers
141k views

How can I open a .pkg file manually?

Some applications come in .pkg files, and ask for you administrator password, even if all they do is copy the binary to /Applications. I like to have my applications in ~/Applications, and I do not ...
2
votes
0answers
50 views

How do I verify a certificate when installing it on iOS?

I am installing a self-created certificate authority SSL cert onto a modern (iOS-9.3.2, iPod6) iOS device. It is self-signed and obtained over an untrusted transport. In normal, e.g. desktop, ...
2
votes
0answers
33 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
2
votes
2answers
3k views

Trust this computer - what is shared?

Apologies if this has been asked before, but when you trust a computer, what data is shared? I'm on iOS 8 and have been plugging my personal phone into my work PC for charging. I click "trust" ...
19
votes
2answers
629 views

Forcing `open` command to open unsigned app?

I've got my Security preferences set to allow apps downloaded from "Mac App Store and identified developers." When I try to open an unsigned app: open xyz.app I see the following: Usually, I ...
1
vote
3answers
475 views

How do I create a passwordless keychain?

How can I create passwordless keychain on OS X? Specifically, I'm wondering if it's possible to sign application without keychain storing p12 and developer certificates Using 10.7.1 OS X
2
votes
1answer
26 views

How can I see a list of apps that have the ability to record my keyboard history?

How can I see a list of programs/services that have the ability to record my keyboard history? My goal is to prevent programs from recording my keyboard history without root privilege. I cannot seem ...
0
votes
2answers
58 views

Non-existing URLs redirect to “searchguide - level 3” in Safari

I typed a URL in Safari to check whether a domain name had been registered or not, and was redirected to this page: (here I made the test with "http://fegiuebnfuybzh.com", a random string of ...