If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

110
votes
23answers
18k views

Is there a quick way to lock my Mac?

On Windows you can hit the keys Windows+L to lock your computer if you step away. I don't want to have to remember if sleep currently asks for a password, if there is a time out where my screen isn't ...
335
votes
7answers
242k views

How do I recompile Bash to avoid Shellshock (the remote exploit CVE-2014-6271 and CVE-2014-7169)?

Given that Bash 3.2 (the version shipped by OSX) is vulnerable to the remote execution exploit known as "Shell Shock" (CVE-2014-6271 and CVE-2014-7169) how do I rebuild Bash and secure my system ahead ...
11
votes
2answers
23k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
6
votes
3answers
38k views

How secure is Activation Lock on iOS 7?

Apple showed this new feature in iOS 7 called Activation Lock, that if you enable "Find My iPhone" on a device that is lost or stolen, a person that finds/gets the iPhone will not be able to wipe it ...
35
votes
10answers
2k views

Is it generally advisable to get anti-virus software for Mac OS X?

Is it worth to buy an anti-virus software for Mac OS X? I heard both opinions like "it's not possible to get a virus on Mac OS X" and "Mac OS X is also vulnerable against virus... " Which is true? ...
24
votes
3answers
483k views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
24
votes
3answers
7k views

How to securely erase an SSD drive?

I'm pretty new to SSD technology, so I don't know how it compares to hard drives when it comes to securely erasing the drive. Is it enough to run Disk Utility and erase the drive with the option ...
14
votes
10answers
32k views

Is there a way to password protect individual apps?

Is it possible to password protect a specific Mac application? For example, I am interested in protecting Mail because even if you cannot retrieve new emails, you still can read all the already ...
46
votes
5answers
27k views

Are Macs vulnerable to the Bash shellshock bug?

Red Hat recently announced a major security-related bug in the Bash shell. Some are calling it the "shellshock" bug. Since OS X is built off of Unix, is it vulnerable to attacks that exploit this bug? ...
15
votes
6answers
41k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
6
votes
6answers
54k views

How to completely disassociate iMessage from my device?

I have an older iPhone that I was thinking about selling soon in order to get a new one. I've set up iMessaging on the device. Normally I would just erase the phone a couple of times and be done with ...
9
votes
3answers
1k views

Hard wired link between webcam and led indicator?

In light of stories about stories about secret monitoring over laptop webcams (such as this one or this one), I wonder about the reliability of the green LED next to the camera that indicates that ...
29
votes
6answers
81k views

How can I open a .pkg file manually?

Some applications come in .pkg files, and ask for you administrator password, even if all they do is copy the binary to /Applications. I like to have my applications in ~/Applications, and I do not ...
11
votes
4answers
2k views

Tools to compress and encrypt files

I want to compress several files and encrypt them with a password if possible. Are there any build-in tools in Mac OS that provide such functionality? If not, can you recommend me a (freeware) ...
30
votes
5answers
2k views

Is my Mac infected with the Flashback trojan?

I own a 2011 model of MacBook Pro with a Core i7 processor and Snow Leopard. I have found out there is a trojan horse which now controls 600,000 Macs. How can I find out if my MacBook is being ...
12
votes
3answers
455 views

What are the risks of connecting a MacBook to an insecure wireless network?

What privacy and security risks am I exposing myself to when I connect my MacBook to an open insecure wireless network? Are there any risks that are worse or better when compared to a Windows PC ...
13
votes
2answers
4k views

What user behavior is necessary to make Filevault 2 maximally secure?

Situation: Filevault 2 passwords can be stolen Passware has released the Passware Kit Forensic 11.3 which is able to steal the FileVault 2 password from the RAM by performing a DMA Attack via the ...
28
votes
2answers
21k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
10
votes
3answers
579 views

Can the built-in OS X “Location” feature auto select locations based on wireless networks?

My home network is very secure, but my school's wireless network is open, which makes it vulnerable to wireless sniffing (e.g. with Firesheep). I just discovered the Location feature and I think it's ...
18
votes
7answers
915 views

How to limit my Mac's exposure to malware?

With OS X malware increasingly in the news (see the Flashback Trojan issue), is there anything that I should do to increase the security of my Mac and reduce my exposure to malware? What I'm doing ...
7
votes
2answers
827 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
2
votes
1answer
13k views

How can you reset security questions on an Apple ID when you have the password, but the security email is incorrect?

There's a bit of a story, but the nub of the issue is we have forgotten the answers to the security questions on an Apple ID used for purchasing apps and music and can't reset the answers / questions ...
9
votes
2answers
5k views

How long does Apple provide support for Mac OS X?

I am currently using Apple 10.6 (Snow Leopard). How long will Snow Leopard be supported for? Does Apple provide an end-of-life policy in writing? I have read that Apple tends to only provide security ...
7
votes
2answers
28k views

How to block internet traffic of an application?

Little Snitch can block internet traffic of a particular app. Can I do something similar without (paying) Little Snitch?
6
votes
2answers
848 views

How should I use VPN on a Mac to prevent compromise before the VPN starts?

As most experienced users will have heard, using a Mac in a public untrusted Wi-Fi can be potentially harmful. A tool like Firesheep1 has made it very easy to intercept unencrypted communication. ...
3
votes
1answer
2k views

List failed login attempts

I want to see if somebody has tried to log in on my computer, which is running Mavericks. I have seen the Q&A's How do I detect failed remote login attempts and block them? Where do I find the ...
3
votes
3answers
862 views

scheduled account lock Mac OS X

You can set your Mac OS X account to automatically lock the screen so that the password is required after a certain amount of time of inactivity, but can you do the same thing using a schedule (say at ...
3
votes
2answers
963 views

Security hole in firmware password by installing another boot loader?

I set up a firmware password on my MacBook. One thing I don't understand is how I can install a tool such as rEFIt, and effectively bypass the entire firmware password (i.e. installing it never asked ...
1
vote
2answers
537 views

Software was blocked from opening because it is not from an identified developer

I went to run LibreOffice on my OS X 10.9 and it would not let me install it. It said it was from an unidentified developer. I'm aware of the security features of the Mac and went to System ...
1
vote
1answer
1k views

I can't find a setting to disable WINS in Network settings

In my Network settings under WINS I have the NetBios name (elly) that I would like to disable (kill). The message shows that the "elly"is currently been used ? By whom, for what ? There a bunch of ...
7
votes
2answers
2k views

Where to find the Mac OS X Lion security configuration guide?

Most Mac OS X releases have very nice security configuration guides, but Lion is not in the list. Is this document available somewhere else on Apple's site, or is there a roughly-equivalent document ...
5
votes
1answer
907 views

How to isolate an application from the system (fully sandboxed application)?

Is it possible to do something like the concept of sandboxing (like all apps on iOS have its own system software resources) for all existing applications (so - not while designing an own new ...
5
votes
5answers
19k views

How to disable automatic wifi connection?

When OSX already knows an wifi network it auto connects to it, but when it doesn't know the wifi network it will auto connect depending of the setting of the "ask to join" toggle setting in system ...
4
votes
2answers
3k views

Does Remote Wipe securely wipe the contents of the drive?

With all the ruckus surrounding the Mat Honan debacle, I'm curious: When you remotely wipe a Mac, is it a secure wipe or does it just lock down the machine with a code? From the Wired article: ...
3
votes
3answers
2k views

Apple Shellshock patch for 10.6?

I am running a small HTTP server (Apache) off my Mac mostly as a hobby. If it becomes compromised it isn't the end of the world but it is something I would certainly like to prevent. I set up a ...
1
vote
2answers
2k views

How to make specifics apps password protected even after passcode in iPhone?

I have passcode on iphone but sometimes i need to give my iphone to other to make calls. I want to make specific things password protected, things like mail, sms, contacts and some games. Is it ...
7
votes
1answer
4k views

How stealthy is the stealth mode of the firewall? Does it increase security?

In the System Preferences there is the option: `Security & Privacy -> Firewall -> Advanced... -> Enable Stealth Mode Does this options significantly increase the security when ...
3
votes
2answers
460 views

What are the numerous incoming connections I see on public wifi for?

In general I have incoming connections disabled by my security software (Little Snitch). But even when I do this, on public wifi, I see numerous incoming connections for netbios and mDNSResponder ...
3
votes
1answer
1k views

How can I disable Mac OS Lion asking if I really want to open a downloaded file?

I already tried this: cd ~/Downloads find . -print0 | xargs -0 xattr -d com.apple.quarantine But it doesn't seem to work under Mac OS X 10.7 (aka. Lion) anymore: xattr: ./cabin/Cabin-Bold.otf: No ...
13
votes
3answers
10k views

Is there a tool I can use to securely wipe data from iPhone, iPad, or iPod Touch?

Is there a tool or application that will securely wipe an iPhone, iPod Touch, or iPad (i.e. any iOS device?) I'm not interested in a complete wipe that would brick the device. Rather, I'd want to ...
10
votes
10answers
17k views

Can I trust Apple Store's employees with my laptop?

This might be a bizarre but crucial question, can I fully trust leaving my laptop in repairs (Genius Bar) while they have full access to it ? I recently went to the genius bar to get my display ...
6
votes
1answer
4k views

Is iTunes required for iOS7 iPhone to trust PC with Windows 7?

Every time I connect my iPhone 5S (7.0.3, but have had this issue since 7.0 with both 5S and iPhone 4) to my computer (Latitude E6410 with Windows 7 Pro) I get prompted to Trust the computer. I trust ...
6
votes
2answers
1k views

How do I deactivate my microphone and iSight for security reasons?

In OS X 10.8 it is possible to log in via SSH and get access to hardware input devices like microphone and iSight camera. Thus it is possible to remotely record audio and video of other users sitting ...
5
votes
1answer
7k views

Prevent my Mac from connecting to an unsecure Wi-Fi network?

How can I prevent my Macbook from connecting to non-secure wireless networks? I've ticked the "Ask to join new networks" option and removed the offending network from the Preferred Networks list in ...
9
votes
3answers
5k views

How secure are iCloud backups?

Are iCloud backups encrypted, both when transmitted and stored? Is it possible for someone at Apple to access any backup made to the data enter? I have heard that when apps have been pulled from the ...
8
votes
3answers
4k views

What is Apple's policy for supporting security updates on older versions of OS X?

Does Apple have a policy regarding how long they will continue to release and support security fixes for each OS X release? I've looked around the Internet, and found some forum posts that claim ...
7
votes
4answers
3k views

How can I get the exact URLs/requests that a program is trying to connect to?

I currently use Little Snitch to control network traffic on my Macbook Pro, and see what my apps are connecting to. Unfortunately, Little Snitch only shows you the hostname that an app is connecting ...
7
votes
2answers
466 views

How to wipe a thoroughly secured old computer

I have an old computer of mine (the first MacBook Pro model) that I'm trying to wipe clean and repurpose. But back in the day, I was quite security conscious, and my own barriers are foiling me: ...
7
votes
2answers
3k views

Turn Wifi Off via command line

I'm sharing my internet in work and forgot to turn it off! Does anyone know how I can do it via the command line? I have SSH access but thats it. D'oh.
6
votes
3answers
168 views

Avoiding malware in recommendations?

Occasionally, answers on this site include software recommendations. Let’s assume a "legitimate developer" pretends to have created a useful application that is (secretly) capable of doing harm. How ...