Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

0
votes
0answers
7 views

How to debug malware popups in Safari

Around once a day a new tab opens in the background and automatically starts downloading some probably scam software disguised as a "flash player". I tried to fix it doing the things recommended ...
1
vote
0answers
6 views

What is password recoverable in RADIUS server (related to upgrade to macOS 10.14)

I am thinking about migrating from maOS Server to a dedicated opensource RADIUS server. In their Service Migration Guide Apple states the following: "Converting to the open source version allows ...
1
vote
0answers
16 views

Security warning related to frames appears when surfing the internet

I changed my computer password yesterday and now when using the internet I often get a security warning related to frames. I don't know what frame it is referring to since I'm not sure what they are ...
1
vote
0answers
25 views

How can I remove Applications from Security & Privacy?

Is it possible to completely remove Terminal and Chrome from the Privacy tab here?
0
votes
0answers
19 views

What is this Mojave security feature called? (screenshot) [duplicate]

Accessing certain files in Mojave via Terminal triggers the above security warning. What's the name of this particular security feature? And where can we find the technical details on how it works and ...
1
vote
1answer
63 views

Cannot add any apps to Security & Privacy preferences on Mojave

I recently updated my Mac to Mojave. I have several apps (e.g. Dropbox, Backblaze, Stay) that require specific permissions that can be granted via System Preferences > Security & Privacy > ...
0
votes
0answers
39 views

Mojave: new security features? [closed]

Where can I learn more about Mojave's new security features? For example, when an exception is allowed, which files on the disk are modified? And I know crontab can no longer be modified without a ...
0
votes
0answers
18 views

Cannot uncheck “Require password” in System Preferences>Security & Privacy

I've upgraded to Mojave and ever since I can't uncheck "Require password" or change the timing from "immediately" to something else in System Preferences>Security & Privacy. More precisely: it let'...
10
votes
2answers
3k views

Someone in China tried to log into my AppleID account. What should I do?

I am a US citizen who volunteers for a human rights organization and noticed my iCloud account had a login attempt by someone in Nanchang, China I'm not sure if I should fear of my personal safety, ...
6
votes
2answers
2k views

Do the chips in 2018 Macbook Pros have fixes for Spectre and Meltdown?

I know there are software fixes in macOS, but I want to know when the hardware is fixed. I'd like to buy a new Macbook Pro, but only after the hardware is completely fixed. The 2018 Macbook Pros have ...
1
vote
0answers
24 views

Is there a way to validate that an apple update is legitimate?

I have reason to suspect that somebody may have had unauthorized access to my computer. I've just reset my copy of OS X from the recovery partition. Afterwards, I was prompted twice to update my OS ...
1
vote
1answer
118 views

Access to ~/Library/Containers/com.apple.mail/Data/ denied

Since installing Mojave, I can no longer access ~/Library/Containers/com.apple.mail/Data/: pse@Mithos:~$ ll ~/Library/Containers/com.apple.mail/Data/ ls: DataVaults: Operation not permitted I've ...
4
votes
1answer
410 views

Stop password characters from being shown

When I type in a password in iOS 11.4.1, the last entered character is shown only for a split second. For security reasons, I do not want the characters to get echoed. How do I disable this split ...
1
vote
1answer
31 views

“A recovery key has been set” but remains invisible with macOS FileVault

I have just turned on FileFault on macOS High Sierra with option "Allow my iCloud account to unlock my disk." While encryption is running, macOS informs me that "A recovery key has been set". Is it ...
3
votes
2answers
40 views

How can I remove the “downloaded from the internet” security from all files in a directory?

I have a bunch of files I copied from another computer and am unable to use them as I get various security and permission errors. When I compile using Xamarin I get permission denied. When I try to ...
2
votes
2answers
47 views

Get password prompt in the terminal/shell

When I am connecting a Mac through ssh, I don't have any GUI. However, for some of the commands like security find-internet-password, there will be a GUI prompt for the admin's password. How can I ...
0
votes
1answer
14 views

Recover obscured pixels

If I screenshot something on my phone and scribble out the text: Is it possible to get the text back? Are there computer programs that can analyse that jpg to see what’s under the scribble.
0
votes
0answers
15 views

Mac Disk Security Question

I have a laptop whose disk was encrypted during installation, like any standard security measure it requires a password during log in and prevents use of Target disk mode which works fine as long as ...
1
vote
1answer
28 views

Shove installed a launch daemon or agent popup window, what is it?

Please check the following screenshot: Today, I suddenly have this popup window warning. I have no idea what it is. Basically I have three questions. (1) Is this BlockBlock app warning? I have no ...
-2
votes
2answers
125 views

How to get notified for malware from the Mac AppStore?

Apple has distributed malware through its AppStore, again. Just one example: The Price of Free Software: Trend Micro’s apps exfiltrate your browser history and Mac App Store apps are stealing user ...
1
vote
1answer
37 views

How can I reconfigure my PF.conf to be more secure

I want to make my computer more secure and a part of it I want to do with reconfiguring my PF firewall. How can I reconfigure my PF.conf to be more secure? I made a github repo where I posted my ...
0
votes
0answers
27 views

How can I block all ports with PF except port 80 and 443?

How can I block/close (or drop all the packets coming from) all ports with PF except TCP port 80 and TCP 443? So I only want to make use of port 80 and 443 via TCP. I tried this, but I receive an ...
0
votes
0answers
9 views

What's the closest that OS X can get to Qubes-style VM compartmentalization?

Been reading about Qubes lately, an OS that provides security by compartmentalizing OS components to VMs, so that you can, for instance, spin up a local VM without internet access, or without access ...
0
votes
2answers
68 views

Firewall on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n

The firewall is on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n. How is that possible? jen:~ jen$ sudo pfctl -t blockedips -T show Password: No ALTQ support in kernel ALTQ ...
1
vote
3answers
616 views

How do I prevented the hackers (secret intel) manipulating my terminal again [closed]

How do I prevented the hackers manipulating my terminal again so that my terminal works correct again? Here in the Netherlands we perform cybertest at the company where we work and the attacks are ...
6
votes
4answers
2k views

Is it normal to have same user logged in twice but from another TTY?

I don't know if this is something that is in macOS, but in Linux I normally see only one user if I run the who and w command. Is it normal to have same user logged in twice but from another TTY? I ...
0
votes
1answer
32 views

Two-way firewall (outbound/inbound protection) in macOS

Does macOS have a two-way firewall (outbound/inbound protection) present?
3
votes
2answers
43 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
1
vote
1answer
50 views

Weird Password/iCloud stuff going on - baffled. “This is impossible.”

I've had some weird stuff going on in the last few days. On Wednesday, I was listening to a Podcast on my iPhone. This one is rated "E" for explicit. I was about 5 minutes from the end, when I ...
0
votes
0answers
13 views

alternatives to keychain for storing keys on shared/managed device

I need to work on a shared/managed apple device (same user), but need to frequently use ssh, git or gnupg. I would like to prevent my keys to be stored on the device keychain besides probably being ...
5
votes
1answer
51 views

Is it safe to install a deprecated Java version?

I have an old version of Photoshop that requires an outdated Java runtime. "More info" takes me to this Apple support page where you can download the older JRE. Seems reasonable enough, but I am ...
0
votes
2answers
68 views

My ex is a computer “expert”. Is he using administrative privileges to remotely control/limit use of my computer?

My Ex knows a lot about computers - I know nothing about the hardware and infrastructure... I bought my own personal MacBookAir for my private use only. I'm not able to change some settings or be the ...
-1
votes
1answer
86 views

What's the oldest MacBook Pro that has the Meltdown/Spectre patches?

I currently have a 2014 MacBook Pro, but it needs to go in for service and, rather than renting one for a week, I was thinking of buying a cheap backup (maybe from 2011 or 2012). What is the oldest ...
0
votes
0answers
52 views

How to disable CoreAnalytics (system diagnostics mechanism) used by forensics investigators

From I Know What You Did Last Month: A New Artifact of Execution on macOS 10.13 Analysts that perform macOS forensics have had few, if any, artifacts of program execution to rely on during ...
4
votes
1answer
179 views

How to revoke permission given in System Prefs > Security & Privacy > 'Allow'

I recently installed a particular application that required me to go to System Preferences > Security and Privacy > General, and then give it permission by clicking the Allow that had shown up ...
8
votes
1answer
1k views

What and how does macOS Mojave implement to restrict applications access to personal data?

I'm rather exited to soon receive a new update for my Mac in the form of macOS Mojave. As well as many of the other features talked about during it's release such as Dark Mode and the addition of new ...
5
votes
1answer
261 views

Secure iPhone data whilst getting repaired

I've got to give my iPhone to a 3rd party repair shop to get a smashed screen replaced. The official Apple store is too far away, and the wait time is too long. My iPhone is running the latest iOS 11....
4
votes
1answer
54 views

Any way to tell apart macOS versions by the login screen or lock screen?

Is there any way to tell apart macOS versions by quick or close inspection of the login screen or lock screen? Knowing this would speed up macOS identification if (for example, only High Sierra shows ...
2
votes
2answers
346 views

Current Known Vulnerabilities

I have been tasked with something at work. We are an all Mac shop and I have been asked to provide a list of all "current" known vulnerabilities for Mac OSX. So in other words, if my mac is running ...
1
vote
0answers
23 views

MacOS Secure Boot compatible with PrivilegedHelperTools

2018 versions of iMacPro and MacBookPro have a new feature called Secure Boot. I'm reading reports of other apps & utilities that are potentially broken because of it, so I was wondering if ...
1
vote
1answer
67 views

how to check integrity of recovery partition?

I recently reinstalled Yosemite from the computer's recovery image. I'd like to be able to check the integrity of that image (i.e. shasum /Applications/Install*OS*.app/Contents/SharedSupport/{Base,...
1
vote
0answers
86 views

How can I get the value of the “Require password X after sleep or screensaver begins” from Terminal, on High Sierra?

My company is tracking various security settings of our users. For most of them we're able to use a simple terminal command, but for the Require password after sleep" setting I couldn't find anything....
2
votes
1answer
1k views

How does APFS encryption work?

I recently upgraded my 2013 MBP to High Sierra. This changed my unencrypted file system to encrypted APFS. Does Apple provide any information about how APFS encryption works? Does the account ...
3
votes
2answers
222 views

Whole disk encryption. How can the kernel be encrypted?

A standard pitfall of disk encryption on Linux is needing /boot unencrypted. Specifically the bootloader and initrd. Encrypting the entire disk means putting those somewhere else, e.g. on a USB stick. ...
0
votes
0answers
117 views

Is there a way to fix, or disable, secure input?

After a MacOS update last week, Secure Input has started blocking advanced keyboard shortcuts in Alfred, BetterTouchTool, and even my Logitech mouse options. I have repeatedly tried to quit the ...
0
votes
1answer
43 views

How to Disable USB 3.0 and USB 2.0 while keeping USB 1.0/1.1 on Mac Mini?

Is it possible to disable both USB 3.0 and USB 2.0 support, while keeping USB 1.0/1.1 support, on my 2012 Mac Mini, under OS X 10.13 High Sierra? Perhaps by removing certain kernel drivers while ...
2
votes
1answer
26 views

Is the used vulnerability closed after a jailbreak?

If a vulnerability is used to jailbreak an iPhone or iPad, is that vulnerability typically closed/fixed as part of the jailbreak (itself, or a recommended next step) ? In other words: if a new ...
0
votes
0answers
38 views

Zoom.us Installer bypassing security

Has anyone else experienced this with any app install, or with the Zoom.us installer specifically? Normally, when you start an installer for an application in a Mac, it will go through the steps of ...
0
votes
1answer
185 views

App to lock my iPhone for some time [closed]

I already asked a similar question sometime ago (though that was focused on free apps) and the answers were negative, but I've done some research and it seems there could be a way. Basically, I’m ...
2
votes
1answer
28 views

How to disable user account creation?

What is the process (if any) for disabling other users ability to create local accounts on a macOS device (including local administrators)? An alternative would be also to disable local administrators ...