Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead. This is for general security of hardware, information, software topics where another tag isn’t presumed. iPhone security should use iPhone or iOS tag.

Filter by
Sorted by
Tagged with
1 vote
0 answers
33 views

Setup a Trojan VPN on macOS [closed]

I have this VPN URL with Trojan protocol: trojan://username@subdomain.domainname.com:443 And on Android devices, I just paste it to Igniter client app and it connects, very simple. But I don't know ...
user avatar
1 vote
1 answer
12 views

Can't sign into an iPhone 4 to set it up as a new device - stuck in a loop

When I sign into an iPhone 4 to set it up as a new device, my other Apple devices receive a prompt to allow the sign-in, I click yes, then receive a 6 number code. However, on my iPhone 4, I am still ...
user avatar
  • 217
1 vote
1 answer
65 views

Apply outgoing firewall rules per app selectively (MacOS Big Sur)

Question: Which firewall can selectively apply multiple named domain resolving rules per app? E.g. like the One Periodic's Hands Off firewall Details: I'm looking for an app or combination of apps ...
user avatar
0 votes
0 answers
25 views

Why Might an iPhone Crash and Reboot in Safari?

A few days ago I accidentally clicked an ad in Safari on my iPhone (iOS 15.4.1) which sent the browser through a long chain of redirects, and then the device rebooted. I've heard in the past about ...
user avatar
1 vote
0 answers
20 views

Managing APFS snapshots without purchasing developer certificate

I want to manually create, delete, and restored to snapshots on my APFS volumes (external, for data use, so not limited by SIP). I'm using snaputil, but maintaining APFS snapshots require two ...
user avatar
  • 1,733
0 votes
1 answer
22 views

How do I stop an app from requesting to "control this Mac using accessibility features"

I am currently getting requests: "daemondo" would like to control this computer using accessibility features The problem being, that I have not heard of this app, and I cannot recall ...
user avatar
  • 101
1 vote
0 answers
13 views

How to add a Google account without triggerfing facial recognition or other biometrics?

There are several gmail accounts on an iPhone already but adding a particular account generates an error. All that I seem to get is a generic error message about security. Logging in via a browser on ...
user avatar
1 vote
0 answers
25 views

How do I install Big Sur from a USB without having to change settings in Startup Security Utility

I sold my old Air on eBay and the customer returned it with "fakesoftware" as the username. I ended up keeping both the Mac and the money because this user was a scammer of some sort. Anyway,...
user avatar
0 votes
0 answers
37 views

What is this unknown 10-digit device address? Found on an iPhone [duplicate]

I saw this unknown address under my personal hotspot summary on an iPhone: e:69:a5:97:7:17 Apparently, it has used 9,3 KB of data. Interestingly enough, it only has 10-digits so it cannot be a MAC ...
user avatar
0 votes
0 answers
4 views

Can I integrate location manager and Security Preferences?

I would like to integrate location manager and Apple preferences so that the time to require a password after sleep or screensaver is 1 minute when I am traveling but 4 hours when I am at home. Is ...
user avatar
  • 2,962
2 votes
1 answer
27 views

A few apps constantly asking for location permissions, even though I grant them access every time

TLDR; How to identify and troubleshoot security prompts that repeat on macOS Monterey 12.3.1 on an Intel MBP? Fantastical.app (from the Mac App Store) and TV.app (the apple app) will ask multiple ...
user avatar
  • 151
0 votes
0 answers
15 views

Disable option for USB accessories

I have an iPhone SE. I want to disable USB Accessories so that my phone cannot be connected to via USB after an hour, protecting my security. The problem I have is that the option is enabled, and I ...
user avatar
0 votes
0 answers
15 views

Unable to use Apple Watch to unlock app and your Mac and unable to turn on FileVault

I have a new M1, first for some reason, nothin happen when I press "turn on FileVault" the button is not greyed out but nothing happen. when I try to enable "Use your Appel Watch to ...
user avatar
  • 2,016
0 votes
1 answer
361 views

'libsoda.so' error when enabling Google Chrome's Live Caption feature

Since the most recent version of Google Chrome (100.0.4896.127) on macOS Monterey, trying to use Live Caption (chrome://settings/accessibility) results in an error dialog: "libsoda.so" can't ...
user avatar
  • 4,927
0 votes
0 answers
22 views

iCloud account recovery

A friend of mine received a phishing text message, he followed the link and arrived at a webpage looking like an apple website, he sent his iCloud account information He doesn't remember the details ...
user avatar
0 votes
1 answer
32 views

Add self-signed certificate

I would like to access my Synology NAS via HTTPS, but don't have the money to buy a certificate. I've read that you can generate your own and manually trust it. So after following the step here, I ...
user avatar
  • 1,733
1 vote
1 answer
48 views

Weird pop-up Alert on Monterey "“AdditionalLookupDaemon” will damage your computer."

I just upgraded my mac from High Sierra to Monterey. And there are a lot of warning popups after the first launch. I try to solve them one by one, but I have no idea about this: (“...
user avatar
1 vote
1 answer
56 views

Has the move to /opt/homebrew/ on Apple Silicon improved Homebrew security?

I would like to use homebrew on my new M1 mac, but I am concerned about some of the potential security vulnerabilities associated with /usr/local/. Basically this: https://applehelpwriter.com/2018/03/...
user avatar
  • 11
1 vote
1 answer
30 views

Enable system extension without UI access

I'm trying to set up a program on a CI with a system extension without access to the UI. The main problem is the server is wiped between runs, so I can't configure this program beforehand. I tried ...
user avatar
0 votes
1 answer
31 views

Gave Apple SSD disk password after selling. Is my security compromised?

I follow steps 4, 7 and 8 (I think...) here for a Macbook Pro 13 Late 2013 in order to sell it. I would like to know if my security is compromise for not doing steps 5, 6 and possibly 8. Asking since ...
user avatar
  • 1
0 votes
0 answers
136 views

AdGuard services were not started correctly

I am using macOS Monterey version 12.3. Safari Version 15.4. In this answer (https://apple.stackexchange.com/a/398362/209103) I am adviced to use Adguard to block ads in Safari. When I try to enable ...
user avatar
  • 75
1 vote
0 answers
16 views

macOS Mojave: Text file that I downloaded from my personal Google Drive triggers App Security Check?

I have a large (a few GB) text file that I downloaded from my personal Google Drive. It's a text file, although it wasn't labeled with a ".txt". When I try to open it in a text editor, I get ...
user avatar
0 votes
0 answers
17 views

Does iOS support PIV smart cards natively?

As of iOS 13, iOS seems to support CryptoTokenKit, which, on Macs, can already be used to support PIV smartcards (via USB CCID readers) for login and generic public key authentication. Is there ...
user avatar
  • 509
3 votes
1 answer
83 views

Is it a security hole to get Safari Apple ID Two-Factor Authentication codes on the same Mac?

If I am not misinformed, the idea of two-factor authentication is that if an attacker somehow gets my Apple ID and password, they have an additional hurdle to overcome. But it seems to me that this is ...
user avatar
  • 3,355
2 votes
1 answer
41 views

Is Allowing Full Disk Access to Safari Dangerous?

I have created a front-end tool for work using only HTML, CSS and Js. I'm trying to have my coworkers simply open the html file in their own browsers, but the browser gives an error that requires ...
user avatar
  • 23
2 votes
1 answer
39 views

Is there a secure way to block ads in Safari?

Is there a secure method to block ads within Safari? In order to block ads, most ad blockers require that they can see and change your encrypted traffic. This means that they would be able to see ...
user avatar
  • 173
1 vote
1 answer
7k views

Important Carrier Message "Unlock iPhone to view message"

Yesterday I made an update to the latest iOS version. Now I have to unlock the phone to enter the passcode for Mobile ID (2FA authentication). Before the update, I could enter the Mobile ID passcode ...
user avatar
  • 3,325
0 votes
0 answers
89 views

Kerberos SSO Extension vs Nomad KERBEROS ticket granting method

We manage our network access control via Kerberos authentication. I configured Kerberos SSO Extension via Airwatch and pushed the profile on my MacBook. The issue is that our firewalls don't see it: ...
user avatar
  • 1
0 votes
0 answers
41 views

There is an unknown developer's iPhone Distribution certificate in my keychain. Where does it come from?

I'm an iOS developer, and today I noticed that in my project's build settings, Xcode suggests a Code Signing Identity that I have never seen before. Turns out there is an iPhone Distribution ...
user avatar
  • 141
1 vote
1 answer
379 views

Mac protected from easy burn stuff

This is not fun or anything like that. Imagine. You're constantly using your Mac to watch Netflix or similar while eating popcorn or whatever. The crumbs would be able to if they got into the ...
user avatar
  • 506
0 votes
1 answer
86 views

'Not allowed to load local resource' security on WebKit?

I just bought a 2021 software version of this famous tax program, but I'm unable to use it because the "submit" buttons do not work. Upon close inspection (inspect element), I see the ...
user avatar
  • 101
0 votes
1 answer
34 views

Did Macs have an AV built-in and enabled by default in early 2014?

In early 2014, would a new MacBook Air be shipped with some sort of Apple anti-virus software? And if so, would it be running by default and "block threats" on its own in some intelligent ...
user avatar
3 votes
2 answers
1k views

XProtect - Apple claims they do signature based antivirus but how do we know?

I read this Apple Support page that they use XProtect to scan for known viruses. I cannot find any evidence that XProtect is getting new definitions or scanning anything. Where can I find the logs and ...
user avatar
  • 141
0 votes
1 answer
358 views

Safari accesses Contacts

I’m reading the App Privacy Report of my iPhone. It says that Safari accesses Contacts. I‘ve never explicitly allowed it and I don’t know why Safari does it. I have disabled the use of contact ...
user avatar
  • 1
0 votes
1 answer
166 views

Unknown MAC address under Personal Hotspot usage

Context: Personal hotspot connection from iPhone 12 used on my MacBook Air. Problem: Under Settings - Mobile Data - Personal Hotspot (iPhone), I see 2 data usage components: 1.5 GB - MacBook, and, 20....
user avatar
0 votes
0 answers
87 views

Disable / enable amfid on per-application basis

I want to create and manage snapshots on my Data partition, but because I don't have a developer certificate and apple-granted entitlements (like com.apple.developer.vfs.snapshot), I have to either ...
user avatar
  • 1,733
2 votes
1 answer
95 views

Can I disable the certificate pinning checks on MacOS to relax proxy inspection detection?

I'm behind a proxy and some websites don't work, in particular ones related to MacOS update, app store etc. I imported the proxy certificate to the MacOS keychain. When I go to https://apps.apple.com ...
user avatar
0 votes
0 answers
28 views

iPad displays a notification asking me to unlock it to use USB accessories, while nothing was plugged in

My iPad just displayed a notification “unlock iPad to use USB accessories” or something. Nothing was plugged in. Other details: Bluetooth was on and an Apple Pencil was connected. There was a keyboard ...
user avatar
0 votes
2 answers
132 views

Unblock app Mac labels as unidentified developer with xattr

I recently asked how to unblock a binary from Mac's complaint that it's not identified. See How to unblock binary from use because Mac says it is not from identified developer. The solution of ...
user avatar
  • 147
-1 votes
1 answer
209 views

Eliminating all apple telemetry

Using Lulu, and turning off the "allow apple processes" option, You can see that apple makes hundreds of connections to the internet for a variety of reasons. I did an experiment: I blocked ...
user avatar
2 votes
1 answer
367 views

Prevent non-admin accounts editing DNS records

Is it possible to prevent any non-admin users in MacOS Monterey from being able to change DNS in System Preferences? I know that the user is required to enter admin login details when they attempt it, ...
user avatar
3 votes
1 answer
234 views

Make Safari on macOS reject insecure connections again

Summary: I had opened an insecure website in Safari on macOS, which is now displayed with the "Not Secure" warning in the address field. I would like to “reset“ Safari so that this (and ...
user avatar
  • 356
0 votes
0 answers
319 views

Monterey 12.2 WPA2 Enterprise not connecting

We have having major issues connecting users to our University Wi-Fi network. The devices are MacBook with both Intel & Apple Silicon. Our radius server indicates that a successful connection has ...
user avatar
0 votes
1 answer
179 views

How to unblock binary from use because Mac says it is not from identified developer

I have a binary from work that I'm trying to run. I keep getting an error that “my-binary-amd64” cannot be opened because the developer cannot be verified. I've looked up solutions online and so far I'...
user avatar
  • 147
0 votes
0 answers
25 views

No Show Webpage Option when Opening New Application

I was setting up my Macbook for some coding development, and wanted to install chrome, github desktop, and visual studio code. When I added Chrome to my Applications folder and double clicked, it gave ...
user avatar
  • 13
0 votes
0 answers
202 views

Not authorized to send Apple events to System Events. (-1743)

I can execute my Apple Script when I load/open it from Apple Script Editor. No errors. However, I have added Editor to the menu bar of my Mac (Catalina OS) with my script copied to the User Scripts ...
user avatar
  • 1
2 votes
1 answer
325 views

M1 brute force protection, password complexity

What protection does the M1 SoC have against an attacker attempting to brute force the login password of a macOS user? What password complexity should be enough to stop an attacker from brute forcing ...
user avatar
  • 1,310
0 votes
1 answer
362 views

How to make M1 Macbook (Pro 2021) useless if lost / stolen?

What are risks specifically for an Apple Silicon device? What can I do to make them less critical? If prepared properly, what shoud I do after my Mac is lost / stolen? Here is my homework research so ...
user avatar
  • 1,310
0 votes
0 answers
42 views

On an Apple Silicon or T2 Mac: Can you go back to Full Security after changing to Reduced Security and installing System Extensions?

I just moved from an Intel Mac (Pre T2 era) to an Apple Silicon Mac and I'm confused about how the new security model/boot sequence actually works. Some software wants me to boot into recovery mode ...
user avatar
0 votes
2 answers
120 views

Lawful interception: How-To identify a Private Relay user?

In Germany there is the NetzDG, if you post "hate" or criticize a decision maker harshly, you will be punished. How do you identify a user who (exclusively) uses Private Relay?
user avatar
  • 3,325

1
2 3 4 5
37