Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead. This is for general security of hardware, information, software topics where another tag isn’t presumed. iPhone security should use iPhone or iOS tag.

Filter by
Sorted by
Tagged with
1 vote
2 answers
13 views

How do security keys interact with other methods for 2FA and account recovery?

If security keys are enabled for an Apple ID, are all other forms of two factor authentication and account recovery disabled? The question is prompted this statement: "If you lose all of your ...
0 votes
0 answers
56 views

System Settings > Privacy & Security > "Allow accessories to connect" section is not visible

I am running Mac Studio (Apple Silicon) on MacOS Ventura 13.2, which is the latest version as of writing. For some reason, on this particular computer, System Settings > Privacy & Security > ...
  • 8,688
0 votes
0 answers
12 views

How to limit `set-key-partition-list` to one certificate

TLDR: How can I find make security set-key-partition-list run against a single entry, rather than everything in the keystore? I was facing issues with a cipher mismatch with an dotnet/aspnet app and ...
2 votes
1 answer
27 views

iPad Security During Repair - how did it magically become unlocked?

WiFi iPad has a secure PIN set, Fingerprint, and Auto-lock. Doesn't have face recognition enabled. The charging port broke, and the iPad was used until it was out of battery and wouldn't turn on. The ...
user avatar
0 votes
0 answers
13 views

Automated configuration of USB new device prompt?

MacOS Ventura on Apple Silicon will prompt before allowing a USB device to do more than charge. Has anyone found the name of the setting key which you can use tools like defaults to read or write that ...
1 vote
1 answer
37 views

"Security Settings prevented XYZ Software from Loading" windows has not option to close

I am trying to install a software for a graphical tablet called Wacom. On restarting my laptop after installing its device drivers, I see a warning on my desktop saying "Security Settings ...
  • 11
1 vote
0 answers
9 views

Can smartcard/Yubikey auth be triggered for all authentication, not just admin?

I've been working through the various settings & MDM profiles needed to allow & enforce smartcard behaviors in macOS Ventura. I'm seeing a behavior, though, that I'd rather change - ...
1 vote
0 answers
25 views

How to identify macOS system version installed (if any) on non-startup disk(s) when running High Sierra (or older)?

When running macOS High Sierra (10.13), non-startup disks formatted with newer macOS versions (10.15 or above- Catalina, Monterey, Ventura) installed on them mount as a separate "Data" ...
  • 11
1 vote
0 answers
44 views

Why does RemoteManagementAgent keep starting?

Background: I have witnessed the cursor move on its own on several brief occasions over the past several weeks. I've been reassuring myself that it's just some static discharge going through the ...
  • 264
3 votes
1 answer
102 views

Unable to delete identity in Keychain

A certificate that we use for Wi-Fi in the office has expired, and it does not renew for some reason. I tried to delete it from the Keychain Access I get the following error: I guess that's the ...
0 votes
1 answer
37 views

Security running DOSBox on MacOS?

General security question. Are there security concerns running DOSBox natively on MacOS? I'm not sure if Apps are run inside some user jail that prevents the app from modifying user data outside the ...
  • 239
9 votes
1 answer
5k views

Why does Asahi Linux require disabling security features to be installed?

When I install a second instance of MacOS (say I am experimenting with a beta or something), I just create a new APFS partition and install MacOS in that partition. The MacBook bootloader seems to ...
1 vote
0 answers
13 views

Shortcut to take photo on opening text message without user interaction

I can create a shortcut on my Iphone 13 to take a photo when the text message app is opened but despite telling the shortcut not to ask before running it still comes up with a flag box telling me to ...
  • 11
1 vote
0 answers
55 views

Make password policy permanent

Mac keeps resetting my password policy leading to an annoying password reset... See the question How to force the Mac to not expire passwords? on how to change the password policy. This is however not ...
  • 215
2 votes
1 answer
41 views

What is the authoritative source of "Passwords" in iCloud / Where exactly does the authoritative database live?

I have iCloud "keychain" enabled on both my Mac and my iPhone. However, iPhone "Passwords" did not match my stored passwords in Safari, despite using Keychain cloud sync. I have ...
1 vote
0 answers
59 views

Remove known password from DMG file

I have a few .dmg files of which I know the password. I am easily able to mount them and view the contents. Is there any way to remove the password from the files? From what I see hdiutil chpass is ...
  • 11
2 votes
2 answers
296 views

Are the answers to Apple ID security questions 100% useless to a hacker once 2FA has been set up?

If my security answers were compromised, do I need to worry about those answers being "in the wild" now that I have 2FA set up? (Because now I can't change them). If you can support your ...
0 votes
1 answer
48 views

"known data" in secure erase

The second level of "secure erase" in disk utility is said to write two passes of random and then "one pass of known data." There's nothing on my disk worth hiding, but I'm ...
  • 3,870
1 vote
1 answer
32 views

Remove password policy on a personal machine

When I left my previous organization I bought a new Mac, and migrated content from my work machine to my personal machine. The downside is some of the JAMF policies carried over. One of those was the ...
  • 166
0 votes
1 answer
89 views

Malware in Anker charge base for iPhone? The iPhone screen moving on its own, like someone is controlling it remotely?

I have an iPhone XR (fully up-to-date on iOS 16) and an Anker Wireless Charger. Twice now while the phone was sitting on the charging base I have seen the screen come on and begin scrolling down the ...
2 votes
0 answers
41 views

Why is "About trying to modify my system settings"?

I got this popup completely out of nowhere: At the time it happened, I was installing homebrew for the first time, in a zsh terminal window. This doesn't seem relevant but there isn't much more ...
0 votes
3 answers
59 views

What happens to backups I lose my laptop?

I have a 2021 M1 Macbook Pro that is password protected with a weak password (5 characters). I want to create a local backup of my Macbook but I am wondering what will happen if I lose physical access ...
0 votes
0 answers
21 views

Can we use launchd or some other boot-time process to bypass SIP?

Anything that bypasses SIP is obviously a security problem, so I'm guessing the simple answer is "hell, no!" However … Is there any time at the beginning of the boot process when SIP is not ...
  • 3,870
0 votes
0 answers
10 views

Xcode initial certificates

I was recently added to an Apple development account and as a developer, I need to upload an app to the App Store. This is a new account so it has no certificates and the profiles are configured on ...
0 votes
0 answers
9 views

Opera Browser with Presto Engine (before 2013) any chance to get working with this website: Airtable?

Is there any way I can get the browser to work with Airtable website? I am trying to see if Airtable works better in this older browser because the site is quite taxing on chrome browser and Safari or ...
1 vote
0 answers
14 views

Where can I find intermediate CAs for things like Fairplay, MFi, etc.?

Where can I find intermediate CAs for Fairplay, MFi, etc.? They are not listed on Apple's CA repository, nor have I found it in any documentation given for either program. We have this limited ...
  • 109
-1 votes
1 answer
33 views

Can a Fairplay certificate be ECDSA?

All the examples I've seen for Fairplay streaming certificates are 1024 bit RSA, but unless I missed it, it doesn't actually mention that as a restriction in the documentation... I'm approved for it, ...
  • 109
0 votes
1 answer
97 views

ATA Secure Erase of external SSD

I have an external SSD I would like to delete with ATA Secure Erase, I don't want to overwrite it with 0s or random bits. Can I do this with Mac OS (13.0.1) on my MacBook Air M1 / generally on Mac OS? ...
0 votes
0 answers
175 views

Mac's "System Preferences" asked me for iCloud password, Mac password, and my iPad's password — is this normal?

The System Preferences app on my Mac displayed a message saying I needed to provide password to log into my iCloud account, otherwise some services would not work. I complied. Then System Preferences ...
0 votes
1 answer
51 views

Internet connection is disabled after updating the pf.conf file

I am trying to redirect traffic on all ports to my local server by editing the pf.conf file on MacBook. pf.conf file content: # # Default PF configuration file. # # This file contains the main ruleset,...
0 votes
0 answers
32 views

Does the new "enter password to do backup" fix a security hole? [duplicate]

I don't have a device to test on, but I'm half-remembering from long ago that I can hook up a new (or found/stolen?) iPad and be offered the opportunity to do a backup on it. If that is not the case, ...
  • 3,870
1 vote
0 answers
31 views

Trust computer from Apple Watch

My Apple Watch asked me if I trust a Mac. I reluctantly clicked Yes. Now I wonder which Mac did I let it trust. How can I make sure that it is my Mac? Is there a list of trusted devices/computers on ...
  • 369
0 votes
0 answers
24 views

Timemachine multiple passwords

I have several standard user accounts on a Mac OS computer. I have setup a timemachine backup. This backup is protected by a password. So files are encrypted on the external backup drive. Each user ...
  • 99
0 votes
1 answer
30 views

How to create two macOS Installations on one iMac, securely separated from each other by using FileVault?

The requirement in a no-budget project is as follows: an existing iMac, which is used by one developer for most of the time, has to be used by a second developer from time to time; so both developers ...
  • 115
0 votes
1 answer
616 views

What are risks of disabling SIP for OpenCore Legacy Patcher: UNAUTHENTICATED_ROOT?

In order to keep MacOS updated on older Mac, OpenCore Legacy Patcher needs to lift next System Integrity Protections: UNAUTHENTICATED_ROOT UNRESTRICTED_FS UNTRUSTED_KEXTS What do they allow and what ...
0 votes
0 answers
27 views

Change timezone without administrative privileges

We have some new compliance restrictions which require us to remove administrative access from users who do not require it in their day-to-day job. Sometimes one of our QA's is required to change ...
0 votes
0 answers
383 views

Security of OpenCore Legacy Patcher to run new OS X on old Macs

I know that OpenCore Legacy Patcher is open-source, but did anybody trustworthy actually do an independent review of its source if it does not add anything nasty to the patched OS and published his ...
0 votes
0 answers
27 views

Mac OS user processes [duplicate]

I have a Mac OS computer with several user accounts. When a user closes his session, is it possible for him to keep some process running in background ? Or closing session kills every user's processes ...
  • 99
0 votes
0 answers
77 views

Encrypted file image access

I have 3 users on a mac os computer: Administrator user A: Standard Account user B: Standard Account User A should not see User B files. And User B should not see User A files. User A has an ...
  • 99
0 votes
0 answers
64 views

How you can hide a partition on macOS?

i wanted to know how you can hide a partition on macOS, however i read that in macOSX you could open the debugging menu in macOS's disk utility via terminal and it allowed you to hide partitions and i ...
0 votes
0 answers
61 views

What should appear in "Full Disk Access" by default?

I am looking for malware in my computer. I found that "Security & Privacy – Full Disk Access" is allowed for certain objects like "launchd" however I do not know what should be ...
  • 123
1 vote
1 answer
208 views

Developer Mode and reduced security prompt iOS 16

Being an (indie) app developer and building to device on iOS 16 for the first time, I've noticed a new prompt that requires Developer Mode to be turned on with a full restart of device and the notice ...
  • 761
0 votes
0 answers
54 views

iTerm can't steal focus from browser, but state tracks hotkey invocation

It seems that the keybinding is processed by iTerm, as soon as I click away from Brave, the hotkey window's presence is as-expected by odd-even parity of hotkey invocations, but iTerm is no longer ...
  • 221
1 vote
0 answers
54 views

"Expired certificates" issue solved for browsers but not for command line tools

Today a strange phenomenon has started appearing on my Mojave mac. In my browsers I started having trouble connecting to many websites, with a "expired certficate" warning. I solved that by ...
2 votes
1 answer
2k views

Cannot user VPN Pulse after Ventura OS Update

After updating macOS Catalina to macOS Ventura 13.0 (22A380) I cannot user Pulse Secure VPN Client (9.1.13 (11723)) anymore. I am getting following error: Xprotect 13.0 does not comply with policy. ...
  • 241
1 vote
0 answers
162 views

Does anyone know where the list/database of USB/Thunderbolt accessories authorized to connect in macOS Ventura is stored?

In macOS Ventura there is a new feature under "Privacy & Security" that allows you to limit how USB devices are connected, similar to iOS. By default it set to: Allow accessories to ...
-1 votes
1 answer
65 views

Does the "Lockdown Mode" only protect Apple apps? If you mainly use Open Source alternatives, does this feature offer nothing?

I enabled Lockdown Mode today. The advertising sounds very good: What is Lockdown Mode? Lockdown Mode is an optional, extreme protection that’s designed for the very few individuals who, because of ...
  • 3,593
0 votes
1 answer
21 views

How do I re-enable iTerm permissions to use AppleScript app control

I have some AppleScript, to bulk export URLs and titles of tabs from my browser. It used to work, from iTerm (and Terminal, and Script Editor). I keep my terminal as long-running sessions in tmux that ...
  • 221
0 votes
0 answers
21 views

Removing CA cert

Some time ago I installed Anaconda, which appears to have installed a CA cert in my system. I found out it had done so because today some websites started to fail loading. At first I thought it might ...
1 vote
0 answers
46 views

Can My University See Through my VPN on iOS?

So to use the internet at my university, you have to accept a certificate and log in with your username and password. I use a VPN and an iPhone on iOS 16. I haven't had to trust the certificate in a ...

1
2 3 4 5
39