Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
0
votes
1answer
53 views

High Sierra 10.13.6 - Security update 2019-003 failing install

My 15" MacBook Pro (Retina, Mid 2012) is running slowly since I attempted but failed to install Security Update 2019-003 High Sierra. After researching the problem, I discovered a number of reports ...
0
votes
1answer
9 views

Can i set “accept incoming connection” option for Apple Remote Desktop (ARD)?

We already use Apple Remote Desktop (ARD) for Admin > User connections for admin / tech support sessions. In this instance we DO NOT require the User to confirm acceptance for the ARD session. We ...
1
vote
1answer
31 views

Selling water damaged MacBook Air 2017: Is it safe to simply remove the SSD?

I water damaged my Macbook Air 2017 and it will no longer turn on. I was thinking of selling the MBA for some money but wanted to make sure that my security is not compromised. If I remove the SSD ...
1
vote
1answer
32 views

If we install “modified games” on our iPhone or iPad, what risks are we exposing ourselves to? [on hold]

For example, through TweakBox, AppValley, or even some website, we can install some "mod" or "modified games" (such as a Pacman that never dies, or a game that requires your location but the app can ...
2
votes
0answers
57 views

Was my Macbook Pro remotely accessed?

I'm running Mojave on a Macbook Pro. A while ago, my screen started randomly scrolling down by itself while I was using Safari, and the problem persisted for a few seconds. The scrolling seemed almost ...
0
votes
0answers
39 views

Starting VPN Connection without Keychain Password Prompt

My IKEv2 VPN client certificates are stored in Keychain. When I initiate a VPN connection, I'm immediately prompted for my Macbook administrator account password before access to the Client ...
2
votes
2answers
74 views

“No administrator was found” in Startup Security Utility

My friend got a new MacBook Pro from office, later on he resigned and in a hurry erased the "Macintosh HD", now we are trying to install Mojave using Bootable USB but it won't allow because "External ...
4
votes
1answer
66 views

Why would port 19421 be open on an iPhone?

Following up on the Zoom vulnerability, I decided to run nmap and scan my local network for devices with port 19421 open. One of the devices turned out to be my iPhone! What service would use that ...
0
votes
0answers
24 views

iPhone suddenly unauthorized to use iCloud

My iPhone has been saying that I need to verify it on another device to use iCloud. I opened my MacBook and it's asking me to approve the iPhone. Has my device been pawned? What's going on here?
0
votes
1answer
23 views

Is Apple's Mail.app more secure over using webmail? [closed]

I have heard that webmail services (even the one with E2EE) are prone to JavaScript based attacks, while native apps like Mail.app in macOS are secure against such attacks. Is this true? Is it better ...
4
votes
1answer
118 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
1
vote
1answer
32 views

Automation Item

in Mojave > System Preferences > Security & Privacy > Privacy > Automation an Installer requires access to System Events. How to find out to which app this belongs and eventually (if wants to ...
0
votes
1answer
16 views

Move Secure Notes items from Keychain of one Mac to another?

I have a keychain created, to hold a bunch of Secure Notes items. These are not in the default keychain files created by Apple. In previous versions of macOS, I was able simply drag the keychain file ...
0
votes
0answers
34 views

How did hackers get in?

There has been some fraudulent access to my machine. I can see in browser history that they’ve tried to buy gift cards, tried to access PayPal, amazon, etc. I’ve turned off networking to the machine,...
0
votes
0answers
41 views

Disabling Gatekeeper is unfruitful : still get the prevention

I found out googling around that while the option to manually allow apps from anywhere to be opened directly was removed : https://www.techjunkie.com/gatekeeper-macos-sierra/ you could still use a ...
0
votes
0answers
22 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
0answers
45 views

Has Apple implemented some automatic form of “fix permissions”?

I've put things in /Users/Shared that I want my wife and I to have full access to, no matter which of us creates/reads/edits. I've tried to ensure this by setting group to rwx. Now, we're both in ...
2
votes
1answer
17 views

How to create installable app with setuid bit set owned by root

I have inherited a codebase that needs updating, but I don't have the build scripts that created the final pkg file. The code needs to access a connected USB device (treated as a drive) to read and ...
1
vote
0answers
27 views

MacBook Pro restores last user session after shutdown because of low battery

I had only one account on my MBP. I created a new account on it for my son and he has his own password. I was logged-in with an open session on my account. I closed the lid and left it there, ...
0
votes
1answer
52 views

Is it safe to charge my iPhone using my lightning cable and someone else’s adapter at the Airport?

The airport has USB ports that say they are for charging and I don’t know how to tell if this situation is safe. Is it safe to charge my iPhone by using USB connections that are behind a wall plate ...
0
votes
1answer
16 views

Unable to open a UDP port with nc

On ubuntu, I can open a UDP port: nc -lu 5555 Then in another terminal window, send a message: echo "hello" | nc -u localhost 5555 The message is received at the listener side, as expected. ...
3
votes
1answer
45 views

iPhone: Game app able to access Photos without permission

I have downloaded a game from the App Store onto my iPhone. My understanding is that apps need to ask for, and be granted or denied, permission to access iCloud, Photo gallery etc. But in this game, ...
1
vote
1answer
51 views

How are iOS apps protected from theft by other developers? [closed]

An app can contain proprietary resources like a Core ML model that a developer spent a lot of time developing. According to this answer, the app itself is not encrypted when it is downloaded to a ...
0
votes
0answers
30 views

Protecting my files/folders

I need any software / solution to protect some files/folders which means these files/folders should not be copyable or movable to another device any idea ? Update ,, I have a software codes &&...
4
votes
1answer
41 views

How to block a developer certificate

I accidentally installed Mac Cleanup Pro when I was going to upgrade Flash for a web site. I've used 'Little Snitch' to block the sites it connects to. The malware is all signed by a Developer ID '...
3
votes
1answer
168 views

possible malware called FISE in Accessibility (Privacy & Security)

I checked my Mac's security and privacy and noticed this entry FISE. When I click Show in Finder nothing happens. I've googled around and found no mention of it at all outside of spammy sites. Before ...
0
votes
0answers
17 views

Security issue on blocked screen in High Sierra?

I can see my powerpoint presentation (opened in fullscreen) on locked screen on my iMac! (mac os 10.13.6) worse than that I can see it when I'm playing video, see photos in Photo app or open launchpad....
0
votes
0answers
20 views

How does the iTunes “Restore” erase method on MacOS compare to “Erase All Content and Settings” within iOS from a security view?

The “Erase all content and settings” option in Settings obliterates all the keys in Effaceable Storage, rendering all user data on the device cryptographically inaccessible. Therefore, it’s an ...
0
votes
0answers
49 views

Tradeoffs of disabling SIP (System Integrity Protection) in order to install Sierra on Mac Pro (Early 2009)

Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software. Unfortunately this Mac Pro model is not ...
1
vote
1answer
46 views

Open System Preferences/Privacy/Full Disk Access with url

I can open System Preferences/Privacy/Automation on Mojave with the URL x-apple.systempreferences:com.apple.preference.security?Privacy_Automation What is the equivalent to open Full Disk Access? ...
1
vote
2answers
76 views

What files are included in the /System/Library/LaunchAgents and /System/Library/LaunchDaemons

I bought a used MacBook recently and want to know if it has anything nonstandard like mdm, etc. I have many items invthese folders, such as com.apple.mdmclient.plist, com.apple.managedclient.plist, ...
0
votes
0answers
30 views

Safari 12.1.x problem with using certificates

I have an application which is using Crypto Token Kit and I have certificates which I should be able to use on web pages. The application is working for Safari version 12.0.3 and Google Chrome. For ...
1
vote
1answer
51 views

Regain control of an Apple Account

I have an older Apple account i haven't used for a few years, I know the email (And have access to the email address) its linked to and i know the password. However when i go to the apple account ...
0
votes
0answers
85 views

Sysadminctl - sudo vs no sudo/interactive vs non-interactive

I have a Mac with Mojave installed on an APFS partition. I run sysadminctl to change the Secure Token status for some users. Based on the information I found on the web it wasn't clear to me how I ...
5
votes
1answer
557 views

How should I react to an email saying my Apple password has changed?

Few weeks back I had a email from Apple telling me that my account was being tried to logon to from location they don’t recognise “China”. And they have locked down my account. Today I got email “Your ...
-1
votes
2answers
99 views

If you give your iPhone + Passcode to someone, what harmful things could they do to your data/privacy/security?

Assume you give your iPhone (iOS 12.2) + passcode to someone (e.g. teacher, law enforcement, airport security, etc.) for several hours, and then they give you your iPhone back. Assume the person is ...
1
vote
0answers
27 views

Admin can't select user to reset password

This relates to a 2011 Macbook Pro running El Capitan. I'm set up as the admin and my child has a standard account with parental controls enabled. My child forgot their password and I'm trying to ...
1
vote
0answers
17 views

Programmatically grant new versions of my application access to camera and microphone

I have remote machines running my software. I have full control with MDM. I run a video conference application and need access to the camera and microphone. Every time I push a new version of the ...
0
votes
0answers
73 views

How can I measure the performance impact of disabling hyper-threading?

Apple has released this webpage and seems like a lot of computer are at risk. https://support.apple.com/en-gb/HT210108 How does disabling hyper-threading affect hardware and software performance of ...
3
votes
1answer
129 views

How to recover Mac Startup Security Utility?

To boot up with external disk, I launched into a startup security utility. The standard startup security utility shows the menus like above. But my startup security utility only shows the Firmware ...
1
vote
1answer
74 views

I heard about the new ZombieLoad vulnerability. How do I protect my Mac?

I don't want my data to be vulnerable to the new MDS issues discovered on Intel processors. What can I do? Is my credit card information safe?
5
votes
2answers
89 views

Stopping certain data from ever leaving your Mac?

Is there any way to stop certain data (e.g., a particular string) in unencrypted, clear, plain text from ever leaving my Mac by any network protocol (including my home network) but not affecting ...
3
votes
0answers
45 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
2
votes
0answers
174 views

Create User via Terminal with Bash in macOS Mojave

In general, you can create a user via Terminal in macOS using Apple's documented method. However, macOS Mojave introduced various security mechanisms that cause scripts to fail when changing user ...
0
votes
1answer
63 views

Stop Safari asking for my password when autofilling my password

When using Safari, it will attempt to autofill passwords and credit card numbers for me. However sometimes (more than once per login) it will ask me for me computer login password. Previously it ...
3
votes
3answers
137 views

How can I lock files with specific passwords on mac, ideally through terminal?

I want to lock my /etc/hosts file so that you need a password in order to write. I know you can encrypt files with Disk Utility, but in this case the file needs to be read by the computer and the path/...
2
votes
0answers
30 views

macOS: Restricted admin account

Is it possible to create an admin account which will allow you to install programs, but not to force install programs that are not verified? In other words, an account that can do anything accept ...
25
votes
7answers
5k views

Unable to completely uninstall Zoom meeting app

I am unable to completely uninstall the Zoom meeting app from my Mac running macOS Mojave. I once installed the Zoom meeting app. Then I deleted it from Applications directory. Now, every-time I open ...
1
vote
0answers
51 views

Access Safari history in `~/Library/` bypassing SIP [duplicate]

I have a Python script which reads the Safari browser history by opening ~/Library/Safari/History.db and parsing the SQLite database. Unfortunately, on some Macs, the System Integrity Protection ...
2
votes
0answers
45 views

How can I securely erase an iPod Classic?

I have an iPod Classic 120GB model A1238 (Everymac.com) that I'd like to ebay. I discovered how to perform a restore both with and without a Mac. However, afterward my name still appears in the ...