All Questions
2,337 questions
0
votes
1
answer
39
views
How to find malware on a MacBook Pro?
My sister has been complaining that her MacBook Pro is irregularly slow and I suspect there might be a virus on it however Avira is not detecting anything. I realize this is really vague and I may ...
- 23
0
votes
0
answers
15
views
How does Keychain Access decide what goes in My Certificates?
I have a .pem file I need to use for accessing a website. I have added it to Keychain Access, however it only shows up in All Items (under System) and not under My Certificates. When I visit the ...
- 701
0
votes
0
answers
13
views
Use touchID instead of password for apps asking for elevated permissions? [duplicate]
Even tough touchID can be used for many things, when apps want to install some components, a password prompt still pops up.
Is there a way to use touchID for this also?
This is more convenient, and ...
- 441
0
votes
1
answer
40
views
This happened when I was trying to open python IDLE in venv: WARNING: Secure coding is not enabled
WARNING: Secure coding is not enabled for restorable state! Enable secure coding by implementing NSApplicationDelegate.applicationSupportsSecureRestorableState: and returning YES.
I wrote: "...
1
vote
2
answers
86
views
How can I revoke Terminal's access to dragged-in folders?
I intentionally do not grant the standard macOS Terminal app "Full Disk Access".
What I had done recently, in order to access a folder's contents that Terminal normally could not access with ...
- 4,532
0
votes
0
answers
11
views
Authentication prompt for "Connect to server" - Touch ID?
Is there any way to make the 'Connect to server' routine in Finder authenticate in a different way?
As a basic password prompt, it's a bit annoying to have to find the password and paste it in. But I ...
1
vote
1
answer
48
views
Locked out of iPad
I am locked out of iPad due to forgotten password and I tried to many times, so it got security locked. Is there a way to get back in when I now know my Apple ID and password?
0
votes
0
answers
29
views
Can content blocker apps see the URLs and content of sites visited in Safari?
In the version history of my content blocker it says it can show the trackers that were blocked. I thought the content blocker apps in iOS don't have access to the URLs that were blocked?
From https://...
- 1
0
votes
2
answers
40
views
Is it possible to Airdrop a keystroke logger or other bugging software?
While shooting stills and video of an event, using my iPhone 15 Pro Max, a fellow asked if I would share my shots with him via AirDrop. I stopped and did that. Then I asked if he would send me what he ...
- 11
0
votes
0
answers
44
views
Cannot change Apple Account info on web but there is no device logged in to iCloud
This feels like a feature gap: A device logged in to my Apple Account for use in only App Store is treated a trusted device, but it cannot be used to alter Apple Account information.
Note that this is ...
- 35
1
vote
0
answers
100
views
How to change Apple Account password on web when Stolen Device Protection is on and my only Apple device is stolen?
My device is fine for now. However, I do notice that, if I log in to account.apple.com using 2FA (password + device authentication code), I cannot change certain information, like to update Apple ...
- 35
1
vote
1
answer
49
views
adding certificate to the trusted list in macOS keychain - commandline vs GUI
I was wondering if there's any difference between adding trusted certificate from commandline : sudo security add-trusted-cert -d -r trustRoot ~/c1.cer
and opening the certificate in the keychain UI ...
- 161
1
vote
1
answer
37
views
How may I audit unencrypted network traffic on macOS device?
I'm doing day-to-day activities on a MacBook connected to a coffee shop wifi network, which is an 'Unsecured Network...':
When clicked on:
I'm only visiting https websites, but I know websites aren'...
- 5,395
0
votes
1
answer
157
views
Is the Passwords App really secure?
It appears to be great and very convenient but is it flawed?
It can be opened using the same lock code as the screen so all it takes is for a thief to watch someone enter the passcode before stealing ...
- 379
1
vote
0
answers
244
views
pkcs12 file exported with no password doesn't gets imported in macOS Sequoia 15.0 (24A335)
I exported the pkcs12 file which contains the Apple Distribution Certificate with the Private Key on macOS Sonoma 14 with no password.
I was able to import the same on different macOS Sonoma 14 ...
- 111
1
vote
1
answer
266
views
How to erase personal data from a MacBook Pro that is locked via MDM
I am dealing with a company MacBook Pro model A2918, M3 chip, made in 2023. The company terminated me, and I am trying to remove my personal data from it before returning it. However, the company ...
- 21
0
votes
1
answer
114
views
Why iPhone 6S & iPad Pro (2015) do not connect to WPA3 network?
Working with my ISP with whom I have a 1000/300 Mbps fibre network to find out why my download speed is stuck at 20 Mbps, they tried by changing the Security from WPA 2 Personal to WPA 3 Personal.
...
- 1,674
1
vote
1
answer
589
views
Websites assume the wrong country after using a VPN
I used a VPN yesterday (ProtonVPN) that set my location as Japan, and now even though I have quit the VPN and restarted the computer, and the VPN is not running anymore, websites I try to access ...
- 3,991
2
votes
3
answers
124
views
Potential malware from ybb-network.com
In my Screen Time on my Apple account, I'm seeing 24 hours a day over the last few weeks of accessing "https://ybb-network.com/". Screen Time confirms this is coming from my Mac Laptop.
I ...
2
votes
1
answer
173
views
Do third-party apps have full access to Files on iOS?
On iOS, when you want to use a photo in your photo library on a certain app, you will be prompted (at least for the first time) to select which photos you would like the app to be able to access, and ...
- 123
2
votes
1
answer
177
views
Can I remove my neighbor from showing up in the AirDrop options on MacOS Sonoma
I want to keep the "MacOS Sonoma" in the title because there are hundreds of obsolete Q&A pages or pages about the iOS version of this issue floating around the internet which I have ...
- 3,991
1
vote
0
answers
45
views
Unexpected WebAuthn / passkey prompt
Safari prompted me to authenticate to ioc.exchange today, when I had no Safari tabs or windows with ioc.exchange open. I do have an ioc.exchange account that I use only rarely. I do not have ioc....
- 123
1
vote
0
answers
61
views
Is there any way to view DKIM information on the iOS Mail App?
I don’t use my iPhone or iPad for most of my serious work, but one thin that bothers me is that it’s harder to check for fraudulent emails.
Is there a way to view DKIM information?
- 3,685
2
votes
0
answers
408
views
Visual Studio Code was blocked from use because it is not from an identified developer
I'm new to Mac and would like to know if this occurrence is normal,
I installed the Visual Studio code (exactly version 1.91 from the official site) by downloading the file and then inserting it into ...
1
vote
0
answers
1k
views
Face ID no longer works after activating Stolen Device Protection
The Face ID feature on my Apple iPhone 12 Pro no longer works after activating Stolen Device Protection. I can't even reset face ID in security settings either.
According to Apple website:
When ...
- 1,418
0
votes
0
answers
24
views
Allow every new AirPort network password access for my application
I made a CLI wifi that generates a QR-Code of the current wifi to connect with other devices. This CLI uses the next command:
security find-generic-password -a "$NETWORK" -D 'AirPort network ...
- 107
4
votes
1
answer
302
views
macOS Location Services gives my location as being in China when I'm outside China
I purchased a MacBook Air M2 in China. The macOS Maps app works well when I am in China where it correctly identifies my location. However, I am currently traveling to Europe and I noticed that the ...
- 151
0
votes
0
answers
25
views
Location access via internet sharing
I have an iPhone connected to a MacBook via USB. The phone is on airplane mode and has Wi-Fi turned off but my computer is sharing internet. I've confirmed the internet connection but even with ...
- 437
0
votes
0
answers
61
views
How do bulk update outdated passwords in iCloud Keychain?
In the past, I moved to using Bitwarden, because Chrome stopped natively supporting iCloud Keychain and I needed something that would work on all devices.
Now I'm using Arc Browser, which does seem to ...
- 191
0
votes
0
answers
93
views
How do I "toggle" macOS Sonoma Security/Features OFF/ON so I can use the full functionality of the `security` command?
I'm working on a script to import numerous Certs (Like 50) into System.keychain. macOS Sonoma Security Features are preventing the security command from fully working.
Note: Intune MDM Trusted Cert ...
0
votes
0
answers
88
views
What steps can I take to track down what is trying to gain sudo access?
I now have a prompt that recurs every 30s wanting me to allow running some unknown sudo script.
The prompt is a macos builtin prompt that takes the center of the screen and can lose focus but can't be ...
- 101
-5
votes
1
answer
137
views
Does Apple's new Password Manager work with 2FA QR codes? [closed]
Today I use Dashlane's family plan, which suits me well, but it comes with a cost.
I read in the announcement that Apple's password manager supports QR codes, which makes me understand that it's ...
- 105
2
votes
1
answer
40
views
Any way to access Startup Security Utility when Internal SSD dead/corrupt?
We have a 2018 MBP business laptop with an SSD that's died. The support company have declared it is dead and recommended recycling it. I'd very much like to get it booting from an external SSH. FYI: ...
- 338
-1
votes
1
answer
76
views
Are some apps always linked to iCloud.com via a SharedWebCredentials Library in its code?
I found that some apps contain a Library named SharedWebCredentials which contains the config json files that seem to always enable linking to iCloud. I am using Sonoma 14.5.
These apps include FindMy,...
- 1
2
votes
0
answers
111
views
Why does code-signing identity look revoked when using SSH, but good when using Terminal app?
Problem
If I SSH to the mac remotely from another computer, then view valid code-signing identities, I get CSSMERR_TP_CERT_REVOKED, as seen below.
# executing remotely in an ssh session
% security ...
- 121
2
votes
1
answer
357
views
Which iPhones can be found when powered off?
I have a question about lost and stolen iPhones.
My understanding is, should an iPhone get lost or stolen, the owner can use Find my iPhone to track the location and recover it.
Certain iPhones have ...
- 171
2
votes
1
answer
195
views
How can I apply security updates to the git client that comes with Xcode?
I am looking at how to upgrade my git client that comes with Xcode command line tools in the light of the recent vulnerability announcement.
Is this possible?
- 240
1
vote
1
answer
59
views
How can I program my Mac to know when my iPhone is home?
Situation: I wrote an alarm clock app that runs on a MacMini. (No, I have never found any commercial app that works like I want it to.) But sometimes I spend the night away from home, and I don’t ...
- 11
2
votes
2
answers
371
views
MacOS Recovery Mode Risk
(A related question was previously posted in the Asahi Linux forum, I didn't get an answer there; see https://discussion.fedoraproject.org/t/question-and-worries-about-wipe-linux-in-recovery-mode/...
user522753
0
votes
0
answers
68
views
ATT internet service incompatible with Macbook email
My elderly neighbor is having trouble with email on a new macBook.
Internet service is from AT&T in California.
ATT apparently farmed out personal email service to Yahoo.
So when you receive or ...
- 173
0
votes
1
answer
123
views
Proper value for com.apple.quarantine on 14.4.1
I’m running into an issue on macOS Sonoma 14.4.1 relating to file quarantine
xattr -w com.apple.quarantine true uTorrent\ Web
When I write quarantine metadata to a this file, it results in utorrent ...
- 617
6
votes
1
answer
728
views
Grant permissions from the command line
I want to grant a permission to an application (Cliclick, needs permission to control the computer), but currently only have ssh access to the machine I'd like to do this on. Is there any way to ...
- 61
0
votes
3
answers
191
views
If a hacker succeeds in using my Apple ID to log his device into my iCloud account, can he spy on my devices well enough to hack into my web accounts? [closed]
I ask, assuming the latest versions of iOS and MacOS.
Can he capture keystrokes created on my devices? Can he access my Google, Yahoo, etc website accounts if I'm logged into those sites, assuming he ...
1
vote
0
answers
48
views
How could you add a site to HSTS list on MacOS
Say you have a bank site that you want safari to go to always by https rather than http.
How could you pin that site to https if you are too lazy to type https:// prefix manually?
Alternative/shorter ...
- 617
0
votes
1
answer
65
views
`wants to make changes` dialog
Occasionally an app pops up a dialog like the one pictured. Some questions regarding it.
Is it true that an app that I launch has the same permissions as me? So why does it ask me for my credentials?...
- 513
1
vote
1
answer
466
views
Can I prevent turning wifi off or entering airplane mode on an unlocked iPhone?
My concern is robbery with a thief grabbing my unlocked iPhone and running away with my device out of my control.
The first thing the thief should do is to put the phone in airplane mode to prevent ...
- 2,562
3
votes
3
answers
160
views
Should ordinary web users somehow implement end-to-end protection of their DNS requests? [closed]
I've read that, when browsers send website requests, the DNS lookup part of the request is not encrypted, and is therefore a security vulnerability. Also, I'm aware that routers have DNS settings, ...
0
votes
0
answers
147
views
Can't add a certificate to iCloud keychain
I generated a certificate with developer.apple.com for publishing my app in Apple App Store and downloaded .cer file. Doubly clicked on .cer file, selected "System" at the bottom-right ...
- 157
1
vote
1
answer
60
views
How to remove scam sites from the actual LIST on Notifications?
Here's a typical scam site where I must have accidentally clicked yes on the notifications scam panel:
It's easy to click "off", but how do you literally remove the items from that list?
- 188
0
votes
1
answer
60
views
Change login timeout period?
When a user fails to enter a password they receive an increasingly long delay between login attempts.
By default it seems this retry failure increases to rather unergonomic values, for example you can ...
- 111