Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

3
votes
1answer
48 views

Can I lock iCloud System Preference pane?

Here is the scenario. Say I have a Mac that I have to leave in a semi publicly accessible location and which I need to be awake at all times (i.e. it has to be accessible and not asleep/locked). I ...
5
votes
1answer
367 views

The account does not exist in bugreport.apple.com

I am about to file a bug, but I can not login... When I open the url https://bugreport.apple.com, It asks me to login. OK, I tried my three different AppleIDs, and all of them give me the same error ...
-1
votes
1answer
21 views

Prevent admin/Jamf Pro from accessing/deleting 2nd partition

The company I work for wants to install Jamf Pro on my "work" Macbook. I want to create a 2nd partition on my Macintosh HD (with its own Mac OS version) for personal use. If Jamf Pro is installed on ...
0
votes
1answer
38 views

External drive APFS encryption secure?

I just erased a newly purchased external USB disk using the Disk Utility program and set it to use the file system APFS Encrypted. I entered a strong password and the whole process took about a minute,...
2
votes
1answer
34 views

Is it safe to still use an iPhone 4?

I receive an iPhone 4 for free and I would like to use it. Last iOS version available is iOS 7.1.2 released on June 30, 2014 which is now unsupported. My questions are: Is there some known security ...
0
votes
0answers
16 views

How can i reset my apple user permission

so this MBP currently has two users Admin and the user. For the user account specifically i added chrome policies of which i do not want anyone but me the admin to access the plist. So the plist is ...
4
votes
0answers
61 views

How can I troubleshoot Security & Privacy issues with Mojave?

Mojave has expanded macOS's sandboxing rules for files and devices. When an application needs to use the camera or microphone, the user is supposed to get a prompt the first time to authorize it. ...
2
votes
1answer
80 views

Shady password required for Update Apple ID Settings

My iPhone (under iOS 12.1) informs me that I should "Update Apple ID Settings" for otherwise "Some account services will not be available until [I] sign in again." When I launch Settings > Update ...
1
vote
0answers
11 views

OS X Find my iPhone logs

How to check "Find my iPhone" start/stop logs? Thanks. The service was strangely disabled. I already checked some logs through the system Console App.
0
votes
0answers
12 views

Mac Pro 2012 Memory failure after security update

I'm running Sierra on a Mac Pro 5,1. I've got 48GB (6x 8GB) of RAM and after updating to the last security update I've got a RAM conflict, I've swapped some modules position and I could get just 32GB ...
0
votes
1answer
12 views

Can't update boot security on new Macbook Pro

I am trying to boot from an external device and it is asking for an administrator password. The machine is new and didn't have a password so I created an admin password and it still won't allow me to ...
0
votes
1answer
43 views

Can I rename the “Pictures” folder without “Full Disk Access”?

Our application needs write access to the user's Home directory, specifically to Pictures, Movies, Music, etc., so it can redirect them to our cloud support. But, on Mojave, renaming Pictures (to some ...
1
vote
0answers
21 views

Exclude admin user from global password policy

I have added a global password policy which enforces password rotation for every 90 days. But there are two types of accounts: User Accounts - Enable Password rotation for 90 days Admin Accounts - No ...
0
votes
0answers
84 views

Mojave 10.14.1 software update bypassing password

I have my setting to 'Automatic login' disabled. The 10.14.1 software update, ended up in the desktop, without going through the locked password screen. Since this is the first update through the ...
0
votes
2answers
81 views

Are Macs vulnerable to the recent SSD encryption vulnerability?

It was recently discovered that the hardware encryption of many SSDs is completely broken and cannot be trusted at all. Can this affect Macs? Does MacOS trust the hardware encryption of the SSD ...
3
votes
0answers
28 views

Can I avoid phishing messages using sender ID to fool me?

I've just received a phishing message on my iPhone that uses a fake sender ID of "Qantas". The message appears alongside legitimate messages coming from Qantas. The scam is described by Qantas on ...
0
votes
0answers
29 views

OS X 10.8 ERROR: The certificate of ‘example.com’ is not trusted

I have an older MBP which is still running OS X 10.8. Lately I've been running into SSL issues left and right. Today the Captive Network Assistant couldn't connect to get me connected to a hotel's ...
0
votes
1answer
30 views

Unfamiliar prompt when inserting new prepaid SIM card into iPhone in China

While visiting Shenzhen, China yesterday as a tourist I acquired a prepaid +86 SIM card from China Unicom. Everything seemed to work out fine, but I am wondering about one observation: When the sales ...
1
vote
1answer
47 views

In VPN setup, what is difference between IKEv2, L2TP and IPSec?

When manually configuring VPN, the type can be set to either "IKEv2", "IPSec" or "L2TP". However, as I understand it "L2TP" use "IPSec" for encryption and "IKEv1" for authentication, so it find the ...
1
vote
0answers
87 views

Updating to security update 2008-002 10.13.6 gives error 602

I get an error 602 when I try to run this update. I have had this in the past and resolved it by turning off automatic proxy configuration but that does not help in this case. Running it in safe mode ...
0
votes
0answers
29 views

Browser does not prompt for client certificate when deployed on port 443

I have run into a very strange situation. I am developing a web application that requires client certificate authentication. Whenever I deploy the application on the default HTTPS port 443 the ...
5
votes
1answer
70 views

What is this security feature called?

What is this "System software from developers" security feature called and where can I find the technical details for how it works with applications (like AVG)? I believe this is a kernel extension, ...
1
vote
1answer
128 views

localhost redirecting to https after Mojave upgrade [duplicate]

After the recent upgrade to macOS Mojave Safari started redirecting from http://localhost to https://localhost. The problem persists only in Safari, in Chrome everything is the same as before. Now I'm ...
1
vote
1answer
33 views

Use security to get a list of Keys in Keychain based on type?

I'm successfully using security to fetch keys from my Keychain via their label, e.g.: security find-generic-password -l "PDF Encryption" However, I'm trying to build a UI that offers me a CHOICE of ...
4
votes
1answer
382 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
3
votes
1answer
62 views

How to check which process took a desktop screenshot on macOS?

I heard a shutter sound when pressing the ▼ (down arrow) key on (lock screen) login page. I heard it again 10min after login, when using the same key again. And then heard it no more, even when ...
1
vote
1answer
128 views

How to debug malware popups in Safari

Around once a day a new tab opens in the background and automatically starts downloading some probably scam software disguised as a "flash player". I tried to fix it doing the things recommended ...
1
vote
0answers
16 views

What is password recoverable in RADIUS server (related to upgrade to macOS 10.14)

I am thinking about migrating from maOS Server to a dedicated opensource RADIUS server. In their Service Migration Guide Apple states the following: "Converting to the open source version allows ...
1
vote
0answers
21 views

Security warning related to frames appears when surfing the internet

I changed my computer password yesterday and now when using the internet I often get a security warning related to frames. I don't know what frame it is referring to since I'm not sure what they are ...
1
vote
0answers
48 views

How can I remove Applications from Security & Privacy?

Is it possible to completely remove Terminal and Chrome from the Privacy tab here?
0
votes
0answers
23 views

What is this Mojave security feature called? (screenshot) [duplicate]

Accessing certain files in Mojave via Terminal triggers the above security warning. What's the name of this particular security feature? And where can we find the technical details on how it works and ...
2
votes
2answers
702 views

Cannot add any apps to Security & Privacy preferences on Mojave

I recently updated my Mac to Mojave. I have several apps (e.g. Dropbox, Backblaze, Stay) that require specific permissions that can be granted via System Preferences > Security & Privacy > ...
0
votes
0answers
44 views

Cannot uncheck “Require password” in System Preferences>Security & Privacy

I've upgraded to Mojave and ever since I can't uncheck "Require password" or change the timing from "immediately" to something else in System Preferences>Security & Privacy. More precisely: it let'...
10
votes
2answers
5k views

Someone in China tried to log into my AppleID account. What should I do?

I am a US citizen who volunteers for a human rights organization and noticed my iCloud account had a login attempt by someone in Nanchang, China I'm not sure if I should fear of my personal safety, ...
6
votes
2answers
2k views

Do the chips in 2018 Macbook Pros have fixes for Spectre and Meltdown?

I know there are software fixes in macOS, but I want to know when the hardware is fixed. I'd like to buy a new Macbook Pro, but only after the hardware is completely fixed. The 2018 Macbook Pros have ...
2
votes
1answer
32 views

Is there a way to validate that an apple update is legitimate?

I have reason to suspect that somebody may have had unauthorized access to my computer. I've just reset my copy of OS X from the recovery partition. Afterwards, I was prompted twice to update my OS ...
1
vote
1answer
228 views

Access to ~/Library/Containers/com.apple.mail/Data/ denied

Since installing Mojave, I can no longer access ~/Library/Containers/com.apple.mail/Data/: pse@Mithos:~$ ll ~/Library/Containers/com.apple.mail/Data/ ls: DataVaults: Operation not permitted I've ...
4
votes
1answer
431 views

Stop password characters from being shown

When I type in a password in iOS 11.4.1, the last entered character is shown only for a split second. For security reasons, I do not want the characters to get echoed. How do I disable this split ...
1
vote
1answer
88 views

“A recovery key has been set” but remains invisible with macOS FileVault

I have just turned on FileFault on macOS High Sierra with option "Allow my iCloud account to unlock my disk." While encryption is running, macOS informs me that "A recovery key has been set". Is it ...
3
votes
2answers
48 views

How can I remove the “downloaded from the internet” security from all files in a directory?

I have a bunch of files I copied from another computer and am unable to use them as I get various security and permission errors. When I compile using Xamarin I get permission denied. When I try to ...
2
votes
2answers
57 views

Get password prompt in the terminal/shell

When I am connecting a Mac through ssh, I don't have any GUI. However, for some of the commands like security find-internet-password, there will be a GUI prompt for the admin's password. How can I ...
0
votes
1answer
16 views

Recover obscured pixels

If I screenshot something on my phone and scribble out the text: Is it possible to get the text back? Are there computer programs that can analyse that jpg to see what’s under the scribble.
1
vote
1answer
53 views

Shove installed a launch daemon or agent popup window, what is it?

Please check the following screenshot: Today, I suddenly have this popup window warning. I have no idea what it is. Basically I have three questions. (1) Is this BlockBlock app warning? I have no ...
-2
votes
2answers
130 views

How to get notified for malware from the Mac AppStore?

Apple has distributed malware through its AppStore, again. Just one example: The Price of Free Software: Trend Micro’s apps exfiltrate your browser history and Mac App Store apps are stealing user ...
1
vote
1answer
49 views

How can I reconfigure my PF.conf to be more secure

I want to make my computer more secure and a part of it I want to do with reconfiguring my PF firewall. How can I reconfigure my PF.conf to be more secure? I made a github repo where I posted my ...
1
vote
0answers
71 views

How can I block all ports with PF except port 80 and 443?

How can I block/close (or drop all the packets coming from) all ports with PF except TCP port 80 and TCP 443? So I only want to make use of port 80 and 443 via TCP. I tried this, but I receive an ...
0
votes
0answers
12 views

What's the closest that OS X can get to Qubes-style VM compartmentalization?

Been reading about Qubes lately, an OS that provides security by compartmentalizing OS components to VMs, so that you can, for instance, spin up a local VM without internet access, or without access ...
0
votes
2answers
132 views

Firewall on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n

The firewall is on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n. How is that possible? jen:~ jen$ sudo pfctl -t blockedips -T show Password: No ALTQ support in kernel ALTQ ...
1
vote
3answers
656 views

How do I prevented the hackers (secret intel) manipulating my terminal again [closed]

How do I prevented the hackers manipulating my terminal again so that my terminal works correct again? Here in the Netherlands we perform cybertest at the company where we work and the attacks are ...
6
votes
4answers
2k views

Is it normal to have same user logged in twice but from another TTY?

I don't know if this is something that is in macOS, but in Linux I normally see only one user if I run the who and w command. Is it normal to have same user logged in twice but from another TTY? I ...