If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

3
votes
0answers
57 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's ...
3
votes
0answers
36 views

Manipulate incoming HTML data

My ISP, injects JavaScript code into every website I visit. Is there a way to filter all incoming traffic in OS X and remove that injected code?
3
votes
0answers
51 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
22 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
2
votes
0answers
37 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
2
votes
0answers
56 views

No secure ad-hoc network with Yosemite?

iMac (late 2009) OSX 10.10.3 iPads (a 1 and a 2) iOS 8.? I am a retired IT engineer playing at being a DJ/VJ. That means I'm often in a room with lots of folks with cells and iPads. Before ...
2
votes
0answers
177 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
223 views

What type of encryption does iOS 8 use for Bluetooth?

I know that iOS 8 encrypts Bluetooth connections: https://www.apple.com/br/privacy/docs/iOS_Security_Guide_Oct_2014.pdf https://support.apple.com/en-us/ht3647 What I don't know is what kind of ...
2
votes
0answers
654 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
2
votes
0answers
184 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
2
votes
0answers
52 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
27 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
2
votes
0answers
3k views

iPhone 5S stolen, name was changed in Find my iPhone and inforrmation request about factory reset behavior

I got my 5S stolen Thursday and today it was back online in Find My iPhone. First, I would like to know if there's a way to know if the iPhone is in locked mode or not. Next, from the time it got ...
2
votes
0answers
3k views

How to unlock iTunes account when prompted for my old e-mail address

This question was locked in an older post, however there was no resolution to the problem. I had a similar issue and was able to resolve it in the following manner with the help of the Account ...
2
votes
0answers
231 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
2
votes
0answers
124 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
0answers
328 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that ...
1
vote
0answers
12 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
0answers
15 views

Configuring `fail2ban`

I’ve noticed some attempts to log into my Mac via SSH: 30/07/2015 13:30:59.274 sshd[52991]: error: PAM: authentication error for root from 59.47.0.150 via 192.168.1.68 30/07/2015 13:31:00.217 ...
1
vote
0answers
30 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
1
vote
0answers
262 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
0answers
56 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
1
vote
0answers
55 views

Is there any way to run Network Link Condition from a Standard User account?

There is a known issue in Network Link Conditioner where if you install it in the normal way (Xcode > Open Developer Tool > More Developer Tools > Install Hardware Tools) it will run from an Admin ...
1
vote
0answers
194 views

Trim Enabler w/disabled kext signing - is it possible to get warning of or track source of kext installs? - security with kext-signing disabled

The goal is to track when kexts are installed and determine whence kexts came. For instance TRIM is disabled for 3rd party drives in OS X Yosemite. To use a utility like Trim Enabler one must disable ...
1
vote
0answers
366 views

Mac preventing loading Java site

I am trying to administer my Western Digital MyBookLife home network drive, using the Java based admin console provided by WD. The console is a web application served up from the drive itself. ...
1
vote
0answers
11 views

securing boot process against port access but not full physical access

Is it possible to secure a Mac Mini (2014) for use in an scenario where users have access to the ports but not full physical access to the computer's internals? I need to be able to disable cd boot, ...
1
vote
0answers
70 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
1
vote
0answers
21 views

User permissions prevent me from loading the Security & Privacy settings — how do I fix this?

I can't seem to load the System Preferences > Security & Privacy settings pane. I inadvertantly changed admin settings on my machine and since then I've been unable to access my documents and ...
1
vote
0answers
283 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
1
vote
0answers
228 views

My iPhone got stolen and appears offline

Okay, so I lost my iPhone 4s last night and it appeared as offline immediately upon signing on to Find My iPhone. I placed it on Lost Mode right away. I got an email that my Apple ID password got ...
1
vote
0answers
144 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
1
vote
0answers
101 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
1
vote
0answers
98 views

Printer can write into laptop folder

Well that was surprising. And a little alarming. I got a new multifunction printer, a Canon MG7120. It is connected wirelessly to my home local area network. I installed the latest drivers from ...
1
vote
0answers
5k views

Updates: Mavericks 10.9.2 + Critical Security Update → no reboot

Update On an iMac running Mavericks 10.9.0, I just selected within App Store the 2 last OS updates: Critical Security Update (version 1.0) OS X Update Combined (version 10.9.2) These 2 updates ...
1
vote
0answers
96 views

Automounting & fix permissions for home folder on encrypted sparse bundle?

For security on a shared machine, I've moved my entire home folder to an encrypted sparse bundle disk image. I then set my User settings home folder to the image. But along the way, I believe ...
1
vote
0answers
43 views

How to display the remaining time that the device will be locked for?

I locked my iPad by accident after upgrading to iOS 7 and noticed that it no longer displayed the remaining time that the device will be locked for. Is there any way to enable this?
1
vote
0answers
184 views

How many tries on iTunes Security Questions

I folgot the answer to one of my security questions and now, for the first time in years, I need to answer them to buy music from my iPod. Now, I know I can change my questions, but I would really ...
1
vote
0answers
127 views

Applying Filtering on NAT'd Packets NetBSD (pf.conf)

Is there a way to filter packets after applying NAT? What I am trying to do: Apply NAT to packets going to some host, but block packets with a specific port. I have tried a few things but nothing is ...
1
vote
0answers
31 views

Enforcing firewall (native or 3rd-party)

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
0answers
1k views

Do Java security settings in Mountain Lion cause java.lang.ExceptionInInitializerError?

In a nutshell, I have a java app that crashes in java.lang.ExceptionInInitializerError and I'm looking to see if my OS/Java settings might be causing this error. I cannot change the security settings ...
1
vote
0answers
187 views

entered wrong password while switching users, now can't switch, log out, or sleep?

I attempted to use the fast user switching menu to switch to a different account on my mac (it's a new Macbook Pro with OS 10.8.2, but I migrated users and settings from my old mac). I misremembered ...
1
vote
0answers
93 views

Facebook Photo Verification on iPad's Safari

I work with a social media company and recently experienced something very vexing at a live event. We have visitors sign in temporarily on iPad kiosks for registration purposes to their Facebook ...
1
vote
0answers
241 views

Do I have malware? Mysterious connection made by app

I have Little Snitch installed. I use an app [that shall remain nameless in case this is a false alarm]. I was recently reviewing connection attempts in Little Snitch, and it claims that [this app] ...
1
vote
0answers
4k views

How do I configure a VPN in Lion?

I've tried to configure VPN in Lion (both L2TP and PPTP), but it never connected successfully. The same VPN works fine in Windows 7 and the iPad and other mobile devices, so I think it could be a ...
0
votes
0answers
11 views

Yosemite Security Defaults

I've just made a fresh Yosemite install and noticed two strange security defaults Firewall is disabled User is created as an admin account It is hard for me to imagine how a disabled firewall is a ...
0
votes
0answers
32 views

A Macbook was stolen and returned: How can I detect the changes that were made on the OS?

My Macbook Pro running OS X Yosemite and a Windows 7 Bootcamp was stolen a month ago when I left it sitting in Frankfurt airport. I had used FindMyiPhone to add a lock and wipe it but it never came ...
0
votes
0answers
12 views

Can I use our SSL certificate for digital mail signatures?

We have a GoDaddy SSL Certificate that we use on our OS X Server for securing some web sites and the Mail Service running on it. Our company website FQDN is one of the 5 named on that certificate but ...
0
votes
0answers
24 views

“Delete references & files” with keychain using security delete-keychain

I have a script that uses a keychain to store various privates keys and certificates into a certain keychain (different from login and System). I'd like to enable it to purge all the content of its ...
0
votes
0answers
14 views

Is CUPS (Common Unix Printing Service) a security issue?

Is this service, using port 631 being open create any security risks ? And by this I mean a way for hackers to somehow compromise a system by injecting some type of code to elicit a connection or ...