Hot answers tagged

2

Your keychain is encrypted with your login password, so the passwords stored in it should be pretty safe as long as they aren't somewhere else, too. Unfortunately, information sometimes leaks, so there may be notes, password reset emails, etc lying around unencrypted and potentially readable by whoever stole the laptop (or their fence, or...). So in theory ...


2

There are two ways of having backups encrypted. First, Time Capsule allows for you to encrypt the disk. If you enable this, the disk can only be mounted by the device if you provide it with the password to do so. This encryption is local and thus doesn't address your concern. It does mean that if the disk somehow gets taken out of the TC, it can't be read. ...


2

The security command is working as expected, and is following the same keychain access policies that any other program would follow. Accessing a user's keychain is not an admin function -- the user's keychain belongs to them, so admin access is irrelevant. On the other hand, the System keychain (/Library/Keychains//System.keychain) is "owned by" the ...


2

When a wipe occurs, the file system key is deleted. It's as simple as that. Page 11 of the September 2015 iOS Security White Paper states that the file system key is stored in NAND. The metadata of all files in the file system is encrypted with a random key, which is created when iOS is first installed or when the device is wiped by a user. The file ...


1

Your data is stored in a non-encrypted form onto your Macintosh HD. A password prevents the users from loading the OS, not from accessing your data. Said that the only way to protect data is encryption, a thief could actually insert a Live USB Bootable device (free and easy to create) with a Linux distro on it (like Ubuntu), mount your HFS+ partition, read ...


1

To answer your main question - they are very unlikely to leak if you stored them in keychain. The attacker would have to know your login password to access every keychain item. However - you still need to change them (as you said you would) - especially your email password! First and foremost the attacker may gain access to your email through your ...


1

Ransomware works by selecting certain files (normally by type - like docs, bitcoin wallets, etc), encrypting those individual files and forcing you to pay up for a key to decrypt them. FileVault protects your data on your Mac by encrypting the whole disk. When you boot up your Mac, you put in a password that effectively "decrypts" the drive and allows it to ...


1

One good reason to use case sensitive file system is using git repositories. Syncing them to the repo causes problems again and again, if not using case. But I suggest adding another partition using HFS+ formatted case sensitive for such an application and link the directories you need to that partition. My system partition is still case insensitive not ...


1

DNSSEC is an extension of the DNS infrastructure. Usually a browser is not involved in domain name resolution. So there is no way for Safari to detect DNSSEC directly. There is an Safari DNSSEC extension though which allows you to check the existence and validity of DNS Security Extensions (DNSSEC) records and Transport Layer Security Association (TLSA) ...


1

Instead of force quit you could find the name of the process(es) you want to quit using Activity Monitor and then create a script that uses the kill command to get rid of them. Some details: Chriswrites


1

The only way I could resolve this was to delete the account and then add it back. This was from an account I had for years when google seemed to use jabber. Now it is GTalk which seems to be secure.



Only top voted, non community-wiki answers of a minimum length are eligible