If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

1
vote
0answers
12 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
0
votes
1answer
137 views

How do I disable Bonjour visibility after Yosemite install?

Since upgrading to Yosemite (from Mavericks) my MacBook Pro (Retina mid-2014) advertises itself on Bonjour (with "whats-my-name"). It was not visible in this way prior to Yosemite, and I have no ...
3
votes
3answers
2k views

Apple Shellshock patch for 10.6?

I am running a small HTTP server (Apache) off my Mac mostly as a hobby. If it becomes compromised it isn't the end of the world but it is something I would certainly like to prevent. I set up a ...
0
votes
1answer
97 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
2
votes
1answer
23 views

Bulk removing Wifi networks from an iOS device

This article, "What we give away when we log on to a public Wi-Fi network", demonstrates how dangerous it is for you to turn on Wi-fi on your phone. It advertises the name of every network it has ...
0
votes
0answers
14 views

Is my machine always visible while to Bluetooth while Handoff is enabled?

Since installing Yosemite, my machine shows up (at least on my iPhone) as visible to Bluetooth. This is appears to be the result of enabling Handoff. If that's the case, at what point in the Handoff ...
-1
votes
1answer
81 views

Why is my MacBook visibile on Bluetooth after Yosemite install?

Since upgrading to Yosemite (from Mavericks) my MacBook Pro (Retina mid 2014) is visible on bluetooth (at least to my iPhone). It was not visible prior to Yosemite, and there's nothing that I did on ...
109
votes
23answers
17k views

Is there a quick way to lock my Mac?

On Windows you can hit the keys Windows+L to lock your computer if you step away. I don't want to have to remember if sleep currently asks for a password, if there is a time out where my screen isn't ...
2
votes
4answers
4k views

Pop-up windows that disappear mysteriously

It's been a while since, every now and then, I see a pop-up window appearing for a few milliseconds, that then disappears. I don't even have the time of reading what it says. Any idea on what could ...
2
votes
1answer
175 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...
333
votes
7answers
234k views

How do I recompile Bash to avoid Shellshock (the remote exploit CVE-2014-6271 and CVE-2014-7169)?

Given that Bash 3.2 (the version shipped by OSX) is vulnerable to the remote execution exploit known as "Shell Shock" (CVE-2014-6271 and CVE-2014-7169) how do I rebuild Bash and secure my system ahead ...
1
vote
1answer
1k views

Is Java 6 on Mavericks safe to use?

I have some web applications (java applets) which have trouble running with Java 7 and java 64 bit. The tech support wants me to install Java 6 and disable Java 7, here are the instructions: ...
46
votes
5answers
27k views

Are Macs vulnerable to the Bash shellshock bug?

Red Hat recently announced a major security-related bug in the Bash shell. Some are calling it the "shellshock" bug. Since OS X is built off of Unix, is it vulnerable to attacks that exploit this bug? ...
3
votes
2answers
314 views

Have Apple announced whether the “Shellshock” bash update will be applied automatically via the App Store patching mechanism?

As described here, I'm technically vulnerable to the "Shellshock" bug in my shell. I'm running Mavericks. Apple has released an update to bash that addresses this issue. As per the example test ...
4
votes
2answers
3k views

Best way to disable SSLv3 in Chrome for Poodle vulnerability

Fixing Chrome for the Poodle vulnerability seems to be more difficult on OSX than the other Operating Systems This seems to work... Exit chrome Open Applescript editor Enter this script do shell ...
25
votes
2answers
18k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
0
votes
1answer
51 views

How do I reset/change my security questions on my Apple Id

I have an Apple ID and I know my password, but forgot the answer to the security question. I tried to change it at appleid.apple.com but we don't have a link to reset it. See the picture. Please help ...
1
vote
1answer
43 views

Turning off Require Password on a filevault enabled MacBook Air 2011

I am trying to use the product form soma-zone.com called RedHand. The only catch is you must have Require Password turned off in the Security Preferences Pane. RedHand won't start until it is turned ...
1
vote
2answers
162 views

FileVault 2 caches main password even after power off?

I had set up FileVault 2 encryption while using long&strong user password, and later changed user password to a shorter one. At first time it seemed like everything is working as I expect: OS X ...
3
votes
1answer
1k views

Can I decrypt a dm-crypt filesystem on OS X?

I've been an Ubuntu user for years, and I just got my first Mac. One thing I haven't yet figured out is how to decrypt my encrypted filesystem on which I store my SSH and GPG keys on my flash drive. I ...
0
votes
0answers
26 views

Turn off the security setting of apple store acount

How can i turn off the security setting of an apple store account so i can sign into it from a foreign country ? Because once i try to sign into it it prevents me and send me a warning Email about ...
1
vote
1answer
64 views

Someone made a FaceTime call with my number

My husband told me that he received a FaceTime call from my number but he missed the call. I never called him and I don't have any outgoing calls in my phone or anything. Is my Apple ID compromised?
1
vote
1answer
872 views

how to reset security question [duplicate]

I forgot the answer to my security question and no email to rescue mail received. How can I change my rescue email? Or is there a way to change the answer to something like "used code for mobile ...
4
votes
1answer
179 views

Someone used “Find my Iphone” to wipe my phone. Can I use the same app to find their location?

This morning someone decided via either a prank or otherwise to log in to my apple id, and use Find my Iphone app to lock and then erase my phone, then leaving me the ominous message "This is what u ...
0
votes
1answer
32 views

How to enable “Show message on Lock Screen” with Script

So, In Mavericks, you can set text to be displayed on the lock screen by checking the box: System Preferences > Security & Privacy > General > "Show a message when the screen is locked", then ...
4
votes
4answers
76k views

What is the difference between the WPA2 Personal, WPA and WPA2 WiFi security passcodes?

I was editing the configuration for my Time Capsule, when I noticed that I had the following options for network encryption: Why is there an option of WPA/WPA2? Is it as secure as WPA2 Personal? ...
16
votes
5answers
24k views

Is data transmitted over 3G secure?

When data is transferred from my iPhone via 3G, is it encrypted, or is it relatively simple for a hacker to read the data that's transferred to AT&T's cell tower? What about after it reaches the ...
2
votes
2answers
6k views

How do I get iTunes to take my security update info?

Recently, when attempting to make a purchase (or free download) on the App Store iTunes was requesting I update my security info. This is not the 3 digit code on my credit card, but the 3 security ...
3
votes
1answer
1k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
4
votes
1answer
340 views

How to mitigate Bash risk while waiting for a patch (sans a recompile)?

This is related to How do I recompile Bash to avoid the remote exploit CVE-2014-6271 and CVE-2014-7169?, Are Macs vulnerable to the Bash shellshock bug? and Are Bash, Bourne, and Korn shells compiled ...
0
votes
2answers
1k views

FileVault security hole when used on SSDs

I just woke up to the fact that it looks like user data can be leaked when using FileVault and Migration Assistant on an SSD on a new Mac when following the default prompts. When I set up a new Mac, ...
3
votes
6answers
1k views

Can bash be replaced entirely in OS X?

Because of CVE-2014-6271 and CVE-2014-7169 on OS X I was wondering: can bash be replaced entirely by another, non-affected shell (eg dash or others)?
1
vote
1answer
71 views

Has my computer been hacked

I'm trying to find out if someone has hacked my computer. In case I get the following message in my Terminal window: "Last login: Tue Sep 30 02:02:18 on console" does that mean a person has logged in, ...
0
votes
1answer
3k views

is there a patch against “Shell Shock” for my system MacOS 10.6.8 bash version 3.2.48(1)-release (x86_64-apple-darwin10.0) [duplicate]

I already run the following and I get "vulnerable" Mac cysunza$ env x='() { :;}; echo vulnerable' bash -c 'echo hello' vulnerable hello I read the post about it but appears to me that his is just for ...
3
votes
1answer
75 views

Are there any disadvantages to using the brew version of bash for /bin/sh?

I have patched bash & sh with the latest patches as described here, but now have some issues with some things in my dotfiles (particularly the loading of rvm and some custom functions and ...
-2
votes
1answer
136 views

Should bash shells be replaced with the new patched version? [duplicate]

This question has generated a lot of downvoting on three SE sites so let me try to explain where it comes from. The magnitude of the bash "shellshock" problem may turn out to be larger than anything ...
4
votes
1answer
176 views

Will recompiling bash to avoid Shellshock cause more harm than good

I wasn't particularly worried about Shellshock until I learned that a malicious DHCP server may be able to exploit my DHCP client to run arbitrary code on my system. It's not clear to me whether Macs ...
1
vote
1answer
37 views

Prevent Mac from connecting to WiFi networks with same name as preferred network

How can I prevent OS X (and ideally iOS devices as well) from connecting to a WiFi network which has the same name as one of my preferred networks, but isn't the same network? For example say my ...
3
votes
1answer
215 views

My MacBook Air is automatically connecting to a password protected network that's not mine!

I'm starting to think I've been hacked because my Macbook Air is frequently jumping to a neighbors password protected network on its own! I see the network in the "preferred network" list and I don't ...
0
votes
1answer
70 views

Can I turn off my Guest account and still use Find My Mac?

I understand that turning on Find My Mac also turns on a "Guest" account (in "login only" mode). For a variety of reasons, I would prefer not to have an enabled Guest account at all. Does Find My ...
1
vote
1answer
104 views

Why is a secure erase 'not necessary' for SSD's?

I'm about to trade in a 2010 MacBook Pro with an SSD. However, I'm unable to do a Secure Erase from the recovery disk (as I used to do with mechanical hard drives before selling or giving away a ...
0
votes
1answer
28 views

Confusion with sudo and multiple local accounts

I am having difficulties figuring out why certain things are much more complicated on a mac terminal than a standard linux shell.. Say I have two local accounts, one administrator called "adm" and a ...
4
votes
4answers
880 views

Is there a way to find out when a USB flash drive has been last used (on any computer)?

I have a USB flash drive and I believed someone else may have plugged it in their computer and copied some files. Using my Mac, how do I know when was the last time my usb flash drive was plugged ...
1
vote
1answer
77 views

How do I disable “iTunes Home Sharing”?

Whenever I launch iTunes, I see my computer appears listed among those offering Bonjour services (e.g., by iStumbler), with an entry for "iTunes Home Sharing" even though I have unchecked "Share my ...
10
votes
2answers
1k views

Where does Apple's predictive keyboard get it's “contextual” content from?

So I was playing around with the iOS 8, when I notice that upon typing "new" anywhere, the predictive keyboard suggests the term "NewTerm". I recall using this word in a tweet, so I brushed it off. ...
1
vote
0answers
136 views

Stolen mac locked automatically or by thief?

My MacBook Pro was stolen a few days ago. I have a lock on the start up screen requiring a password anytime the laptop comes out of sleep mode, however when I attempted the "Find My Mac" app, it says ...
2
votes
0answers
27 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
0
votes
1answer
24 views

Apple Mail is trying to use certificate and won't send without

I created an account on a website and they installed a certificate on my machine for authentication. I'm not sure how this technically works but the certificate is somehow linked to my GMail address. ...
2
votes
4answers
2k views

How to get rid of booby-trapped pop ups to update flash player?

I'm coming across a malicious pop up to update my flash player. The message in the pop up: Warning! Your Adobe Flash Player version is outdated. Security risks. Please update now. I've seen this ...
0
votes
0answers
34 views

Where are Internet Recovery system files stored?

I have just erased all data on my MacBook Air hard drive and reinstalled OS X using Internet Recovery. As you already know, recent Mac computers have Internet Recovery system which enables users to ...