Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

2
votes
0answers
16 views

Can a website change Safari’s default search engine?

My child’s MacBook had it’s default search engine changed to Yahoo. I did not do this, my child did not intentionally do this. So I see two possibilities. My kid downloaded and excecuted an app ...
19
votes
7answers
9k views

Is this an email from Apple or fraud?

Begin forwarded message: From: ID Report <childaviintlteknic59@substemptauthsvcstld.com> Date: February 15, 2019 at 9:20:10 AM EST To: [Bla bla bla <my email address>] Subject: [TBA] Your ...
-2
votes
2answers
69 views

Can somebody explain these entries in my sudoers file?

What is going on in my sudoers file? I have no idea who the FULLTIMERS = millert, mikef, dowdy are or what these IP addresses Host_Alias CUNETS = 128.138.0.0/255.255.0.0 Host_Alias CSNETS = 128....
1
vote
1answer
67 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
0
votes
0answers
30 views

How can I find out more about a suspicious SSID?

I have no Asian neighbors, but I keep seeing an SSID with an Asian name. The signal strength is strong, (maxed), so it tells me it's a device that is nearby. The SSID also includes a couple of linked ...
80
votes
9answers
23k views

How can I prove to an airline that the iPad mini they found is the one I left on the plane, without giving them the passcode?

I left an iPad mini on an Icelandair flight. They just sent me this message: "We have an item matching your description. Can you please send us details about the item, preferably passcode, to ...
3
votes
1answer
73 views

Make old snow Leopard MacBook safer

I have an old MacBook running Snow Leopard 10.6.8. Specs are 2.4 GHz Intel Core Duo, 2GB RAM. I bought it for my gf (now wife) around 2008 and we have not used it in the last couple of years. The OS ...
1
vote
0answers
31 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
0
votes
0answers
19 views

Apps won't add to Security & Privacy Mac

I recently carried all my apps over to a newly installed SSD. When I go to open Bettersnaptool or popclip (apps that need to have control of the computer) I'm told to allow them to but when I do ...
0
votes
0answers
38 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
0
votes
0answers
16 views

How and why is the osascript command loading a QuickTime component?

I'm trying to figure out what the osascript command is doing under the hood. Whenever I run it, it tries to load a QuickTime component which throws security errors with Mojave installed. See this ...
0
votes
1answer
37 views

QuickTime component causing errors when running osascript command

If I run a simple osascript from the command line: osascript -e 'tell app "Safari" to activate' I get hundreds of this error: 2019-01-19 13:07:31.224 osascript[3908:9313907] Error loading /Library/...
2
votes
2answers
54 views

Is my Apple Id under attack, and how do I fix it?

So I got an e-mail from Apple which says: You recently requested a password reset for your Apple ID. To complete the process, click the link below. Reset now > If you didn’t make this change or ...
1
vote
0answers
22 views

How do I keep my SSH private key passphrase away from OSX?

I recently created an SSH public/private keypair on my Mac OSX Yosemite system and for this use-case, I wanted to encrypt the private key with a passphrase. However, the first time I attempted to use ...
0
votes
1answer
47 views

iPhone thief phished iCloud password. Can they decrypt iPhone contents?

Long story short, a close friend had their iPhone stolen a few months ago. Just yesterday they got a text saying their phone was found with a link claiming to show the phone's location. Unfortunately, ...
1
vote
0answers
16 views

Restricted AD users can still log on?

Active Directory user accounts have a property that allows admins to restrict them to specific machines. I.E. the user can only log onto a select list of Windows machines. Why am I mentioning this ...
0
votes
0answers
18 views

App specific HIGHTAIL EXPRESS “accept incoming network connections”

If denying the request to accept incoming network connections does not seem to hinder an app, how would one go about finding out why the app asked to allow incoming network connections in the first ...
0
votes
1answer
14 views

MBP Retina, 13-inch, Late 2012, with MacOS 10.13.5

What's Web Sharing and why incoming connection to it are blocked and mark as severe security risk by Norton?
0
votes
0answers
5 views

Desktop and open applications visible for 0.5-3 seconds before login prompt MacOS Mojave

Since updating to MacOS Mojave, whenever I touch my keyboard or move my mouse to wakeup the computer from display sleep, I can see all the open windows as if I was logged in- but without any control ...
0
votes
2answers
47 views

Does System Integrity Protection have any effects on OS's besides Mac OS?

If I understand correctly, SIP is a security feature that protects certain folders on Mac OS from modification, even by root users. I don't know how it works on a low level though, and I was ...
0
votes
1answer
31 views

Any potential issues logging into an ARD session with a dedicated ARD user?

One of the reservations I've had with ARD is that it allows anyone on the same network as you to access your computer, as long as: ARD is enabled (this can be confirmed by scanning with the ARD ...
0
votes
1answer
45 views

what happens if an Apple ID is never authenticated?

Allan says that something smells rotten about the account, that something, somewhere, must be compromised. Is that an absolute? That, in order to create an Apple ID, that the e-mail must be ...
1
vote
1answer
145 views

How to contact Apple if somebody has created an AppleID using an email address of mine.

Before you downvote this question consider that I'm not the first to run into Apple's odd recursive authentication loop. Frustrated Apple User sums it up as: So Apple could do nothing and this guy ...
-1
votes
1answer
100 views

How to unlock an Apple ID through e-mail?

My apple-id was just registered and used on icloud -- but not by myself. Perhaps a Christmas present erroneously associated with my e-mail, or maybe not. Could be malicious. Either way I want to ...
1
vote
1answer
23 views

Does iOS keyboard “allow full access” setting allow use of data from default keyboard?

Does the allow full access setting allow third party apps access to what's been written previously using the default keyboard? Or can they only access data that is written using the the third party ...
2
votes
2answers
31 views

How specific/secure/selective is Touch ID?

My new Macbook Pro has Touch ID, and I've trained it on one of my fingers so I can use it to unlock my machine, which is quite fun. I've been wondering, though, how secure it is really. To be clear, ...
4
votes
1answer
74 views

Are security questions no longer required for Apple ID account security?

I lost security questions/answers for my old Apple ID, so I can't do many things. Therefore, I registered a new Apple ID account by going to System Preferences → iCloud. I enabled two-factor ...
2
votes
1answer
42 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
2
votes
0answers
64 views

Encrypted disk in Windows 10, unreadable by macOS

I encrypted by external HDD with exFAT format using VeraCrypt on a windows machine. When I plug in the encrypted disk into MacBook (running macOS Mojave), I get the error "the disk you inserted was ...
1
vote
2answers
50 views

Why can other users see my files in MY user folder?

This is a screenshot of my private folders/files inside my user folder, but seen from a different user on my MacBook. Several folders are basically openly accessable for everybody, even when created ...
1
vote
1answer
36 views

Wifi much slower after security software download

I recently downloaded a vpn and security software (Avast security and windscribe vpn), but my wifi dropped significantly from about 150 mb/s to ~50 mb/s, sometimes much slower. Even after I deleted ...
5
votes
3answers
111 views

When and by who was a password changed

I have created a specific account on my Mac (called skype) to use with risky software, Skype. This account is a standard account. Since I didn't want to use this account very often, I saved its ...
5
votes
1answer
315 views

Will data be lost in resetting macOS admin password?

My GF recently started working with a Mac and while I'm a IT tech with Linux and Windows knowledge, I'm very much a noob with Macs. The problem is she's working on a Mac that another user (the guy ...
3
votes
1answer
77 views

Can I lock iCloud System Preference pane?

Here is the scenario. Say I have a Mac that I have to leave in a semi publicly accessible location and which I need to be awake at all times (i.e. it has to be accessible and not asleep/locked). I ...
5
votes
1answer
393 views

The account does not exist in bugreport.apple.com

I am about to file a bug, but I can not login... When I open the url https://bugreport.apple.com, It asks me to login. OK, I tried my three different AppleIDs, and all of them give me the same error ...
0
votes
1answer
41 views

Prevent admin/Jamf Pro from accessing/deleting 2nd partition

The company I work for wants to install Jamf Pro on my "work" Macbook. I want to create a 2nd partition on my Macintosh HD (with its own Mac OS version) for personal use. If Jamf Pro is installed on ...
0
votes
1answer
129 views

External drive APFS encryption secure?

I just erased a newly purchased external USB disk using the Disk Utility program and set it to use the file system APFS Encrypted. I entered a strong password and the whole process took about a minute,...
4
votes
2answers
50 views

Is it safe to still use an iPhone 4?

I receive an iPhone 4 for free and I would like to use it. Last iOS version available is iOS 7.1.2 released on June 30, 2014 which is now unsupported. My questions are: Is there some known security ...
4
votes
0answers
275 views

How can I troubleshoot Security & Privacy issues with Mojave?

Mojave has expanded macOS's sandboxing rules for files and devices. When an application needs to use the camera or microphone, the user is supposed to get a prompt the first time to authorize it. ...
1
vote
1answer
498 views

Shady password required for Update Apple ID Settings

My iPhone (under iOS 12.1) informs me that I should "Update Apple ID Settings" for otherwise "Some account services will not be available until [I] sign in again." When I launch Settings > Update ...
1
vote
1answer
36 views

Disable ECDSA SSH Host keys

I would like to disable ECDSA SSH host keys. I deleted the existing keys: $ sudo rm -f /etc/ssh/ssh_host_ecdsa_key* I uncomment ECDSA in /etc/ssh/sshd_config $ grep -i ecdsa /etc/ssh/sshd_config #...
1
vote
0answers
44 views

OS X Find my iPhone logs

How to check "Find my iPhone" start/stop logs? Thanks. The service was strangely disabled. I already checked some logs through the system Console App.
1
vote
0answers
13 views

Mac Pro 2012 Memory failure after security update

I'm running Sierra on a Mac Pro 5,1. I've got 48GB (6x 8GB) of RAM and after updating to the last security update I've got a RAM conflict, I've swapped some modules position and I could get just 32GB ...
0
votes
1answer
19 views

Can't update boot security on new Macbook Pro

I am trying to boot from an external device and it is asking for an administrator password. The machine is new and didn't have a password so I created an admin password and it still won't allow me to ...
0
votes
1answer
71 views

Can I rename the “Pictures” folder without “Full Disk Access”?

Our application needs write access to the user's Home directory, specifically to Pictures, Movies, Music, etc., so it can redirect them to our cloud support. But, on Mojave, renaming Pictures (to some ...
1
vote
0answers
30 views

Exclude admin user from global password policy

I have added a global password policy which enforces password rotation for every 90 days. But there are two types of accounts: User Accounts - Enable Password rotation for 90 days Admin Accounts - No ...
0
votes
0answers
190 views

Mojave 10.14.1 software update bypassing password

I have my setting to 'Automatic login' disabled. The 10.14.1 software update, ended up in the desktop, without going through the locked password screen. Since this is the first update through the ...
0
votes
2answers
139 views

Are Macs vulnerable to the recent SSD encryption vulnerability?

It was recently discovered that the hardware encryption of many SSDs is completely broken and cannot be trusted at all. Can this affect Macs? Does MacOS trust the hardware encryption of the SSD ...
1
vote
0answers
33 views

Can I avoid phishing messages using sender ID to fool me?

I've just received a phishing message on my iPhone that uses a fake sender ID of "Qantas". The message appears alongside legitimate messages coming from Qantas. The scam is described by Qantas on ...
0
votes
0answers
57 views

OS X 10.8 ERROR: The certificate of ‘example.com’ is not trusted

I have an older MBP which is still running OS X 10.8. Lately I've been running into SSL issues left and right. Today the Captive Network Assistant couldn't connect to get me connected to a hotel's ...