Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

0
votes
0answers
43 views

Has Apple implemented some automatic form of “fix permissions”?

I've put things in /Users/Shared that I want my wife and I to have full access to, no matter which of us creates/reads/edits. I've tried to ensure this by setting group to rwx. Now, we're both in ...
2
votes
1answer
15 views

How to create installable app with setuid bit set owned by root

I have inherited a codebase that needs updating, but I don't have the build scripts that created the final pkg file. The code needs to access a connected USB device (treated as a drive) to read and ...
1
vote
0answers
20 views

MacBook Pro restores last user session after shutdown because of low battery

I had only one account on my MBP. I created a new account on it for my son and he has his own password. I was logged-in with an open session on my account. I closed the lid and left it there, ...
0
votes
1answer
47 views

Is it safe to charge my iPhone using my lightning cable and someone else’s adapter at the Airport?

The airport has USB ports that say they are for charging and I don’t know how to tell if this situation is safe. Is it safe to charge my iPhone by using USB connections that are behind a wall plate ...
0
votes
1answer
12 views

Unable to open a UDP port with nc

On ubuntu, I can open a UDP port: nc -lu 5555 Then in another terminal window, send a message: echo "hello" | nc -u localhost 5555 The message is received at the listener side, as expected. ...
3
votes
1answer
37 views

iPhone: Game app able to access Photos without permission

I have downloaded a game from the App Store onto my iPhone. My understanding is that apps need to ask for, and be granted or denied, permission to access iCloud, Photo gallery etc. But in this game, ...
1
vote
1answer
49 views

How are iOS apps protected from theft by other developers? [closed]

An app can contain proprietary resources like a Core ML model that a developer spent a lot of time developing. According to this answer, the app itself is not encrypted when it is downloaded to a ...
0
votes
0answers
30 views

Protecting my files/folders

I need any software / solution to protect some files/folders which means these files/folders should not be copyable or movable to another device any idea ? Update ,, I have a software codes &&...
4
votes
1answer
34 views

How to block a developer certificate

I accidentally installed Mac Cleanup Pro when I was going to upgrade Flash for a web site. I've used 'Little Snitch' to block the sites it connects to. The malware is all signed by a Developer ID '...
3
votes
1answer
126 views

possible malware called FISE in Accessibility (Privacy & Security)

I checked my Mac's security and privacy and noticed this entry FISE. When I click Show in Finder nothing happens. I've googled around and found no mention of it at all outside of spammy sites. Before ...
0
votes
0answers
16 views

Security issue on blocked screen in High Sierra?

I can see my powerpoint presentation (opened in fullscreen) on locked screen on my iMac! (mac os 10.13.6) worse than that I can see it when I'm playing video, see photos in Photo app or open launchpad....
0
votes
0answers
17 views

How does the iTunes “Restore” erase method on MacOS compare to “Erase All Content and Settings” within iOS from a security view?

The “Erase all content and settings” option in Settings obliterates all the keys in Effaceable Storage, rendering all user data on the device cryptographically inaccessible. Therefore, it’s an ...
0
votes
0answers
44 views

Tradeoffs of disabling SIP (System Integrity Protection) in order to install Sierra on Mac Pro (Early 2009)

Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software. Unfortunately this Mac Pro model is not ...
1
vote
1answer
40 views

Open System Preferences/Privacy/Full Disk Access with url

I can open System Preferences/Privacy/Automation on Mojave with the URL x-apple.systempreferences:com.apple.preference.security?Privacy_Automation What is the equivalent to open Full Disk Access? ...
1
vote
2answers
63 views

What files are included in the /System/Library/LaunchAgents and /System/Library/LaunchDaemons

I bought a used MacBook recently and want to know if it has anything nonstandard like mdm, etc. I have many items invthese folders, such as com.apple.mdmclient.plist, com.apple.managedclient.plist, ...
0
votes
0answers
25 views

Safari 12.1.x problem with using certificates

I have an application which is using Crypto Token Kit and I have certificates which I should be able to use on web pages. The application is working for Safari version 12.0.3 and Google Chrome. For ...
1
vote
1answer
47 views

Regain control of an Apple Account

I have an older Apple account i haven't used for a few years, I know the email (And have access to the email address) its linked to and i know the password. However when i go to the apple account ...
0
votes
0answers
49 views

Sysadminctl - sudo vs no sudo/interactive vs non-interactive

I have a Mac with Mojave installed on an APFS partition. I run sysadminctl to change the Secure Token status for some users. Based on the information I found on the web it wasn't clear to me how I ...
5
votes
1answer
553 views

How should I react to an email saying my Apple password has changed?

Few weeks back I had a email from Apple telling me that my account was being tried to logon to from location they don’t recognise “China”. And they have locked down my account. Today I got email “Your ...
-1
votes
2answers
96 views

If you give your iPhone + Passcode to someone, what harmful things could they do to your data/privacy/security?

Assume you give your iPhone (iOS 12.2) + passcode to someone (e.g. teacher, law enforcement, airport security, etc.) for several hours, and then they give you your iPhone back. Assume the person is ...
1
vote
0answers
26 views

Admin can't select user to reset password

This relates to a 2011 Macbook Pro running El Capitan. I'm set up as the admin and my child has a standard account with parental controls enabled. My child forgot their password and I'm trying to ...
1
vote
0answers
16 views

Programmatically grant new versions of my application access to camera and microphone

I have remote machines running my software. I have full control with MDM. I run a video conference application and need access to the camera and microphone. Every time I push a new version of the ...
0
votes
0answers
65 views

How can I measure the performance impact of disabling hyper-threading?

Apple has released this webpage and seems like a lot of computer are at risk. https://support.apple.com/en-gb/HT210108 How does disabling hyper-threading affect hardware and software performance of ...
3
votes
1answer
66 views

How to recover Mac Startup Security Utility?

To boot up with external disk, I launched into a startup security utility. The standard startup security utility shows the menus like above. But my startup security utility only shows the Firmware ...
1
vote
1answer
71 views

I heard about the new ZombieLoad vulnerability. How do I protect my Mac?

I don't want my data to be vulnerable to the new MDS issues discovered on Intel processors. What can I do? Is my credit card information safe?
5
votes
2answers
88 views

Stopping certain data from ever leaving your Mac?

Is there any way to stop certain data (e.g., a particular string) in unencrypted, clear, plain text from ever leaving my Mac by any network protocol (including my home network) but not affecting ...
3
votes
0answers
40 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
2
votes
0answers
112 views

Create User via Terminal with Bash in macOS Mojave

In general, you can create a user via Terminal in macOS using Apple's documented method. However, macOS Mojave introduced various security mechanisms that cause scripts to fail when changing user ...
0
votes
1answer
44 views

Stop Safari asking for my password when autofilling my password

When using Safari, it will attempt to autofill passwords and credit card numbers for me. However sometimes (more than once per login) it will ask me for me computer login password. Previously it ...
3
votes
3answers
132 views

How can I lock files with specific passwords on mac, ideally through terminal?

I want to lock my /etc/hosts file so that you need a password in order to write. I know you can encrypt files with Disk Utility, but in this case the file needs to be read by the computer and the path/...
2
votes
0answers
28 views

macOS: Restricted admin account

Is it possible to create an admin account which will allow you to install programs, but not to force install programs that are not verified? In other words, an account that can do anything accept ...
1
vote
0answers
51 views

Access Safari history in `~/Library/` bypassing SIP [duplicate]

I have a Python script which reads the Safari browser history by opening ~/Library/Safari/History.db and parsing the SQLite database. Unfortunately, on some Macs, the System Integrity Protection ...
2
votes
0answers
37 views

How can I securely erase an iPod Classic?

I have an iPod Classic 120GB model A1238 (Everymac.com) that I'd like to ebay. I discovered how to perform a restore both with and without a Mac. However, afterward my name still appears in the ...
0
votes
0answers
56 views

iCloud keeps prompting for password after password reset, unable to log out

I am helping a relative with her Mac computer. I am trying to update the iCloud password, and I believe I have done so successfully. I was able to confirm the password change and the login attempt ...
4
votes
1answer
191 views

How will Apple's Notarization impact programs written in Python?

Apple has announced that all programs in the next release of its operating system must be notarized. Beginning in macOS 10.14.5, all new or updated kernel extensions and all software from ...
1
vote
1answer
13 views

Company Device Management on Separate User?

I am doing an event with a company that wants to give me a corporate email. They want to set it up using a device management profile on my personal mac. Is there a way to protect and keep my personal ...
6
votes
3answers
1k views

What can other administrators access on my machine?

I've been given a new MacBook Pro at work, and it has an administrator account which I assume the IT department has the credentials to. I have been created a local account which is also an ...
1
vote
1answer
41 views

How does macOS process protection work – Cliff Notes style?

Looking at Apple dev forums and not having programmed in C since college, I'm a bit out of my depth trying to understand the fundamentals of the components of MacOS' protection model employed over the ...
2
votes
0answers
64 views

How can you force Applications that open Safari by default to honor the selected non-Safari default browser?

For example, when I use a specific VPN application, the authentication path opens the Safari browser, which cannot work with Yubikey. Is there a way to convince the application to use a different ...
0
votes
0answers
42 views

How to detect and maybe eliminate Malware from 'Flash Player'?

I read about that some websites do claim you have old Adobe Flash Player installed. I am not sure whether or not I got such notifications legitimately or not. I know I have downloaded some Flash ...
0
votes
1answer
55 views

How can a script detect if it has access to some Security & Privacy parameters?

I've created a script which uninstalls an application I've created. However, as you may know, in macOS Mojave the system requests the user's permission to allow said script to control System Events. ...
8
votes
1answer
123 views

How do I disable this red warning appearing in every new conversation in iMessage?

Every time I get a text-message from a new number, I get this big, red message: WARNING: Apple will never ask you to open Terminal or execute a command on your Mac, click a link, visit a website, ...
0
votes
0answers
23 views

Enforce 2 security settings on Mojave

I would like to enforce the "require password immediately after sleep or screen saver begins" option via terminal on macOS Mojave. However, I am having trouble with finding the time setting with ...
0
votes
0answers
61 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
1
vote
0answers
151 views

Running a command with access to “System Events.app” granted

I am updating applications installed via Homebrew from command line. iTerm2 requires access to "System Events.app" to be correctly updated, which ends up in a process that is not fully automated and ...
0
votes
1answer
40 views

Private / Public Key

Provisioning profiles are available in ~/Library/MobileDevice/Provisioning\ Profiles. But, when creating a Certificate Signing Request, where are the public and private key stored on Mac OS? Meaning,...
0
votes
1answer
21 views

Force Strong Password Generation

Is there any way to prompt iOS to generate a password when it doesn't detect a New Password/Change Password field?
0
votes
0answers
34 views

Does 'Preview' block links pointing to executables?

Does the Preview application which comes native with macOS have a blacklist, which prevents the launch of common executable types (similarly to adobe reader which prevents .exe .js etc. files to be ...
0
votes
1answer
89 views

View login history in Macbook app store app

When I opened the app store app on Macbook Pro, it asked me to login in a pop-up box. The strange thing here was: The user ID field was disabled to edit and it had a pre-filled email address which is ...
6
votes
2answers
95 views

How to tell the difference between a legitimate Apple request for my password, and an app phishing attempt?

If an app pops up a modal that looks just like the Apple password request modal, how can I tell the difference? https://krausefx.com/blog/ios-privacy-stealpassword-easily-get-the-users-apple-id-...