If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

learn more… | top users | synonyms

4
votes
0answers
781 views

What features will I lose if I disable Bonjour's 'whats-my-name' service?

Upgrading to Yosemite (from Mavericks) enabled Bonjour's "whats-my-name" service on my Mac; I would like to disable this (for security policy reasons) but wonder if some feature (perhaps something new ...
4
votes
0answers
59 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
3
votes
0answers
66 views

Identifying which admin changed another admin's privileges

Have a bit of a people issue and one user who has admin has changed another's privileges from admin to standard. This is a university setting, but the student association not the university's ...
3
votes
0answers
45 views

Manipulate incoming HTML data

My ISP, injects JavaScript code into every website I visit. Is there a way to filter all incoming traffic in OS X and remove that injected code?
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
48 views

Gray globe (earth) appears after restart for no apparent reason - might something be wrong?

I restart my MacBook Air OSX 10.8.5 every few days as a routine habit. Twice in the last few months it has come back with the globe (earth) image displayed for 20-30 seconds (I believe it was ...
2
votes
0answers
182 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
2
votes
0answers
32 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
2
votes
0answers
108 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
2
votes
0answers
85 views

Which Applications are accessing the microphone in OS X?

I want to list the application names / process ids that are accessing any microphone / sound input device. This would be great if it were a Terminal command (like lsof) but even an application would ...
2
votes
0answers
351 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
341 views

What type of encryption does iOS 8 use for Bluetooth?

I know that iOS 8 encrypts Bluetooth connections: https://www.apple.com/br/privacy/docs/iOS_Security_Guide_Oct_2014.pdf https://support.apple.com/en-us/ht3647 What I don't know is what kind of ...
2
votes
0answers
274 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
2
votes
0answers
434 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
2
votes
0answers
61 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
181 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
2
votes
0answers
30 views

Encfs volume randomly unmounts

I have an encfs volume that used to be mounted continuously without any issues. Some months ago, the volume started occasionally become unmounted - even if there were open files on it! This ...
2
votes
0answers
141 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
2
votes
0answers
3k views

iPhone 5S stolen, name was changed in Find my iPhone and inforrmation request about factory reset behavior

I got my 5S stolen Thursday and today it was back online in Find My iPhone. First, I would like to know if there's a way to know if the iPhone is in locked mode or not. Next, from the time it got ...
2
votes
0answers
3k views

How to unlock iTunes account when prompted for my old e-mail address

This question was locked in an older post, however there was no resolution to the problem. I had a similar issue and was able to resolve it in the following manner with the help of the Account ...
2
votes
0answers
232 views

What does OS X use “associated” Apple IDs for?

On OS X it is possible to associate Apple IDs with user accounts. Apple lists three consequences of doing so: The Apple IDs can be used to reset the user account The Apple IDs can be used to access ...
2
votes
0answers
340 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that ...
1
vote
0answers
66 views

Upgrade/Move OpenSSL in OS X to alternate Apache version/folder location

We are running a Mac Apache web server. It currently has OpenSSL/0.9.7l running on it which is not compatible with SHA2. OpenSSL is running within a special user-interface called iTools 9; iTools is ...
1
vote
0answers
56 views

The website “secure-web.cicsco.com” requires a client certificate

My dad got the message in the subject line in Safari today, with a list of certificates and "cancel" and "continue" buttons. He chose "continue". I gather from a discussion at Apple's site that it's ...
1
vote
0answers
175 views

Disable 'open this page in [Application]' prompt (iOS)

I currently have an application called App Icon, which allows me to theme my iOS device without being jailbroken, by having web bookmarks on my homepage that open the other application that I want. ...
1
vote
0answers
118 views

Malware attack freezes Safari—prevention or detection?

Several times in the past few months, a web link has popped up a box alleging that malware has been detected and I should click OK to let them fix it. I'm not stupid enough to even click anywhere ...
1
vote
0answers
142 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
1
vote
0answers
37 views

Determine the Mac’s RSA key fingerprint

When starting a ssh session to a remote Mac, I get a message like this: The authenticity of host '201.33.2.107 (201.33.2.107)' can't be established.RSA key fingerprint is ...
1
vote
0answers
117 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
0answers
47 views

Setup a Wi-Fi which only works at login window

I have a Active Directory domain which has both Mac mini and MacBook as member computers. User login to those computers with their Active Directory credentials. Because Mac mini has a Ethernet port, ...
1
vote
0answers
598 views

Will 'Find My Mac' work after my Macbook Pro has been locked due to failed login attempts?

My late 2013 Macbook Pro was stolen a week ago and I've been tracking it with 'Find My Mac'. The thief would turn the laptop on for a few minutes at a time in the evenings and probably try a few ...
1
vote
0answers
1k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
1
vote
0answers
112 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
1
vote
0answers
447 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
1
vote
0answers
241 views

Trim Enabler w/disabled kext signing - is it possible to get warning of or track source of kext installs? - security with kext-signing disabled

The goal is to track when kexts are installed and determine whence kexts came. For instance TRIM is disabled for 3rd party drives in OS X Yosemite. To use a utility like Trim Enabler one must disable ...
1
vote
0answers
580 views

Mac preventing loading Java site

I am trying to administer my Western Digital MyBookLife home network drive, using the Java based admin console provided by WD. The console is a web application served up from the drive itself. ...
1
vote
0answers
14 views

securing boot process against port access but not full physical access

Is it possible to secure a Mac Mini (2014) for use in an scenario where users have access to the ports but not full physical access to the computer's internals? I need to be able to disable cd boot, ...
1
vote
0answers
90 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
1
vote
0answers
22 views

User permissions prevent me from loading the Security & Privacy settings — how do I fix this?

I can't seem to load the System Preferences > Security & Privacy settings pane. I inadvertantly changed admin settings on my machine and since then I've been unable to access my documents and ...
1
vote
0answers
310 views

My iPhone got stolen and appears offline

Okay, so I lost my iPhone 4s last night and it appeared as offline immediately upon signing on to Find My iPhone. I placed it on Lost Mode right away. I got an email that my Apple ID password got ...
1
vote
0answers
138 views

Printer can write into laptop folder

Well that was surprising. And a little alarming. I got a new multifunction printer, a Canon MG7120. It is connected wirelessly to my home local area network. I installed the latest drivers from ...
1
vote
0answers
5k views

Updates: Mavericks 10.9.2 + Critical Security Update → no reboot

Update On an iMac running Mavericks 10.9.0, I just selected within App Store the 2 last OS updates: Critical Security Update (version 1.0) OS X Update Combined (version 10.9.2) These 2 updates ...
1
vote
0answers
101 views

Automounting & fix permissions for home folder on encrypted sparse bundle?

For security on a shared machine, I've moved my entire home folder to an encrypted sparse bundle disk image. I then set my User settings home folder to the image. But along the way, I believe ...
1
vote
0answers
47 views

How to display the remaining time that the device will be locked for?

I locked my iPad by accident after upgrading to iOS 7 and noticed that it no longer displayed the remaining time that the device will be locked for. Is there any way to enable this?
1
vote
0answers
229 views

How many tries on iTunes Security Questions

I folgot the answer to one of my security questions and now, for the first time in years, I need to answer them to buy music from my iPod. Now, I know I can change my questions, but I would really ...
1
vote
0answers
140 views

Applying Filtering on NAT'd Packets NetBSD (pf.conf)

Is there a way to filter packets after applying NAT? What I am trying to do: Apply NAT to packets going to some host, but block packets with a specific port. I have tried a few things but nothing is ...
1
vote
0answers
32 views

Enforcing firewall (native or 3rd-party)

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
0answers
1k views

Do Java security settings in Mountain Lion cause java.lang.ExceptionInInitializerError?

In a nutshell, I have a java app that crashes in java.lang.ExceptionInInitializerError and I'm looking to see if my OS/Java settings might be causing this error. I cannot change the security settings ...
1
vote
0answers
194 views

entered wrong password while switching users, now can't switch, log out, or sleep?

I attempted to use the fast user switching menu to switch to a different account on my mac (it's a new Macbook Pro with OS 10.8.2, but I migrated users and settings from my old mac). I misremembered ...
1
vote
0answers
96 views

Facebook Photo Verification on iPad's Safari

I work with a social media company and recently experienced something very vexing at a live event. We have visitors sign in temporarily on iPad kiosks for registration purposes to their Facebook ...