Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
0
votes
1answer
13 views

Execute App (Apps Authorization Revoked)

Hello there I am trying to start an app (downloaded from the Internet) though when I double click I get the following pop up message: “Ascabart” can’t be opened. You should move it to the Trash. ...
1
vote
0answers
20 views

Find My [Mac] reported location without WiFi?

I was the owner of a Macbook Pro w/ Touchbar running macOS Mojave last week-end The macbook has been stolen and moved 300 miles away from the point. I got two alerts separated by a few hours, around ...
0
votes
0answers
17 views

Screen Time Passcode: Use Password rather than 4-digit PIN?

iOS uses a a 4-digit passcode to secure Screen Time settings (formerly known as Restrictions). Use Screen Time Passcode Use a passcode to secure Screen Time settings, and to allow for more ...
2
votes
2answers
221 views

Why does iOS 13 not trust my own Root CA?

No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted". I have imported the Root ...
0
votes
1answer
25 views

A simple web page using significant amount of memory, can it be some security issue?

I ran nothing in background, was just viewing stackoverflow questions, and the notifications says it is using significant of memory. When I checked activity monitor it was using 2GB which is absolute ...
0
votes
0answers
15 views

Recovering a Skype password from the Keychain

I lost my computer and Skype was tied to an email account I no longer have access to because I graduated. I recovered the Keychain from a backup and I can see these items, all with kind application ...
2
votes
1answer
65 views

Risks and mitigation when getting a used iPhone

When buying or receiving a used iPhone, what security precautions should I take? I intend to immediately wipe the phone by using iTunes to install a fresh iOS, as a clean install. ➥ What else ...
2
votes
0answers
11 views

Why does my Mac play YouTube videos in open Chrome tabs before it's finished rebooting after installing a security update?

For a while now, I've noticed that if I have a YouTube video active in Chrome when I install a security update, my Mac will start playing that video before about 20 seconds before the login screen ...
6
votes
2answers
890 views

Security risks of disabling “Find my iPhone”?

I need to disable Find My iPhone function for the period of repair at Apple's authorized repair partner (which will last several days). Can it impose any security risks to the on-device data and/or ...
0
votes
1answer
29 views

How to prevent terminal from printing passwords from keychain?

I currently use the command-line utility security in a shell script to access a password from keychain. I am surprised that echoing my password variable works and reveals the password in my terminal ...
3
votes
0answers
54 views

Which app is asking for elevated permissions by “Apple wants to make changes”?

I have an associate who is getting elevated permissions pop-ups on their Mac with the message “Apple wants to make changes”. I suspect this may not be a legitimate request. How do I determine which ...
1
vote
2answers
91 views

Is iOS 12 still supported?

Now that iOS 13 is out, and iPhone 5S and iPhone 6 won't be getting it - does this mean that the phones are no longer supported? Should these devices be considered past their end-of-life? I know that ...
8
votes
1answer
4k views

Has my MacBook been hacked?

The logo on the back of my MacBook was glowing when it was in sleep mode. This happened a couple of times when I was out of my room for about 15 mins, the apple logo which wasn’t glowing initially ...
0
votes
0answers
21 views

Custom Root CA installed by MDM is not trusted

I'm trying to deploy a Custom Root CA to some iPads using SimpleMDM. This is quite easy to do, any when I go into the profile on the iPad, I can see the Certificate in the profile. However, when I ...
1
vote
0answers
48 views

Jailbroken iOS Emulator Available?

Are there any jailbroken iPhone (iOS) emulators available for security research? I would like to research and experiment with iOS security; however, I don't have jailbroken iPhones with different ...
5
votes
1answer
69 views

How do I check the country of origin for apps in the iOS App Store?

How do I check country of origin for apps in the iOS App Store? My experience is that looking for the listed developer isn't always accurate and the App Store doesn't appear to show country of origin. ...
0
votes
0answers
12 views

Why is trustd quarantined?

Little Snitch wouldn't allow me to give trustd a free pass, so apparently that happens when it has xattr com.apple.quarantine according to this https://forums.obdev.at/viewtopic.php?t=10931. So, why ...
2
votes
0answers
37 views

Can a firm with encryption keys decrypt iCloud keychain data of Chinese users?

Apple has already given all data of Chinese iCloud users to Guizhou on the Cloud Big Data Industrial Development Co., Ltd., (GCBD), as well as their encryption keys, which means it can decrypt these ...
0
votes
0answers
26 views

Updating username AND password for a keychain via the security command in terminal?

I'm asking if there's a way to use the security command in terminal to update both the username and password. I can change the password via: security add-generic-password -a <account> ... -U -...
3
votes
0answers
55 views

macOS Content Caching serving lots of data to unknown clients

TL;DR: Hidden/unknown client has downloaded 300GB of data from my macOS Content Caching (from origin, not cache). Traffic didn't come from my devices according to my testing. This stopped after I ...
0
votes
1answer
33 views

Difference between an https proxy and a VPN [closed]

as far as I know, both proxy and VPN forwards traffic under their IP-Adresses and not yours. Also, a vpn is more secure than a proxy, because in a vpn the connection is end-to-end secured. Using a ...
1
vote
1answer
88 views

Are these results of arp and ifconfig normal?

After finding my virus's on my Android phone I'm attempting to secure everything. I believe my Mac is infected at the recovery partition and reinstalling does no good. I need help going through some ...
3
votes
2answers
51 views

How to see certificate for intermediate CA in Keychain?

When I check details of a certificate I only see information about the certificate itself. Is there any way to see the issuer’s certificate? In my case it’s an intermediate CA. The certificate that I ...
1
vote
1answer
54 views

Why do I have to unlock an iPad to charge it?

When I plug in the "iPad (6th generation) Wi-Fi + Cellular" to the MacBook, it always says "unlock this iPad to use accessories." What it doesn't say is that it also won't charge until I do so. Took ...
1
vote
0answers
21 views

Can I upload photos from my camera roll, if an app only prompts me to use the camera directly?

Scenario: I want to use an app, which prompts me to take a photo of some documents so they will be uploaded. However, instead I want to select an existing photo from my camera roll, which is not ...
1
vote
2answers
52 views

After installing software, I need to allow it to load in Security & Privacy. How do I do it with a script?

So I'm working on deploying a piece of software for our organization. I deployed it with JAMF and it seems to work just like expected (exactly like if I installed it manually). The thing is, that ...
3
votes
1answer
41 views

If i install Cisco any connect inside my iPhone, can our system admin access my iPhone without my knowledge

I work for a company, and i need to access some internal sites inside my iPhone. so i got the instruction from our network team to install Cisco any-connect to my iPhone and connect to our network. ...
2
votes
0answers
46 views

Disable USB C on MacBook Pro 2018

Is there a way to disable USB C ports on my MacBook Pro 2018 for anything except charging ?
1
vote
1answer
14 views

Time Machine and File Storage on 1 External Drive Security

If I partition an external drive to use one partition for file storage and another for time machine, will the partition for time machine be as safe from malware as if it were on a separate drive? As ...
0
votes
1answer
39 views

Give assistive access to a single applescript

I have this script: #!/usr/bin/env osascript activate application "SystemUIServer" tell application "System Events" tell process "SystemUIServer" to keystroke "q" using {command down, control down} ...
3
votes
1answer
163 views

Work computer shows “This connection is not private” warning on almost all sites

My workplace allows me to use a Mac, but doesn't have much experience with them; their support is minimal if well intentioned, and generally as much harm as help. This includes installing antivirus ...
1
vote
1answer
40 views

Lock macOS with a password from bash

Is there a way to lock macOS so that waking it up requires the user’s password? (Even If normally the password won’t be requested if it is waked up in, say, 1 hour)
2
votes
1answer
802 views

iOS13 Beta / iOS13 requirements TLS Certificate

this post is about this link iOS 13 requirements TLS Server Certificate and two questions that bother me currently. First of, can anyone tell me, if a SHA2 signature is required only for my server ...
2
votes
1answer
45 views

How to make a dump of my iPhone so as to make forensics

I would like to be able to run a forensic analysis on my iPhone from a disk dump copy made on my Mac or any kind of Unix as I would from any external disk with a dd command. (For those who are ...
1
vote
0answers
52 views

How to Configure EndPoint Security VPN in order to route some traffic to it?

I'm using EndPoint Security VPN software in order to connect to VPN. Once it's connected I can not access any webpage, but I can still connect to the Client's environment. How do I configure my mac ...
0
votes
0answers
101 views

Extracting info.plist file from an iOS app binaries

I want to retrieve the privacy permissions declared by an iOS app (it could be any app on App store) in their info.plist file. In order to do this I need to first get the binaries for the app. Is ...
3
votes
3answers
109 views

Can a mac be infected by a microsoft trojan?

My friend owns a Mac with Microsoft Office installed and executed (with macros enabled) a trojan horse, AFAIK a W97M/Downloader variant. By fetching some information from the wild, that trojan usually ...
6
votes
2answers
2k views

iPhone asks 'Trust This Computer' again

(I am on macOS 10.14.6 and iOS 12.4) I am certain that I have trusted my Mac before. Without the latter trust, I can also access the phone in iTunes. I have tried reset "Location and Privacy" on my ...
4
votes
1answer
403 views

How to use Secure DNS on MacOS?

My Problem I am using Google 8.8.8.8 DNS, and would like to use its Secure transports for DNS feature to make sure nobody is messing with the communication channel between Google and my Mac. What ...
1
vote
0answers
50 views

How do I make a MacBook a trusted device so that it can receive Apple ID verification codes?

I have a new MacBook Pro and I want to make it a trusted device so that it can receive Apple ID verification codes. My old MacBook Pro and my iPad are trusted devices but I am unable to make the new ...
0
votes
0answers
18 views

OSX Can't remove microphone permission for one app “There was an error in security & privacy preferences”

I need to remove microphone permission for one app. But when I click to untick I get sent back to System Preferences with a pop up "There was an error in security & privacy preferences". All other ...
3
votes
2answers
118 views

Critical VLC media player security flaw. Remove VLC from my Mac?

My brother rang me at work today to say I needed to remove VLC media player from my Mac because of some critical security flaw in the program that allows others to remotely run code on my computer. ...
0
votes
1answer
339 views

High Sierra 10.13.6 - Security update 2019-003 failing install

My 15" MacBook Pro (Retina, Mid 2012) is running slowly since I attempted but failed to install Security Update 2019-003 High Sierra. After researching the problem, I discovered a number of reports ...
0
votes
1answer
15 views

Can i set “accept incoming connection” option for Apple Remote Desktop (ARD)?

We already use Apple Remote Desktop (ARD) for Admin > User connections for admin / tech support sessions. In this instance we DO NOT require the User to confirm acceptance for the ARD session. We ...
1
vote
1answer
38 views

Selling water damaged MacBook Air 2017: Is it safe to simply remove the SSD?

I water damaged my Macbook Air 2017 and it will no longer turn on. I was thinking of selling the MBA for some money but wanted to make sure that my security is not compromised. If I remove the SSD ...
1
vote
1answer
38 views

If we install “modified games” on our iPhone or iPad, what risks are we exposing ourselves to? [closed]

For example, through TweakBox, AppValley, or even some website, we can install some "mod" or "modified games" (such as a Pacman that never dies, or a game that requires your location but the app can ...
2
votes
0answers
128 views

Was my Macbook Pro remotely accessed?

I'm running Mojave on a Macbook Pro. A while ago, my screen started randomly scrolling down by itself while I was using Safari, and the problem persisted for a few seconds. The scrolling seemed almost ...
0
votes
0answers
88 views

Starting VPN Connection without Keychain Password Prompt

My IKEv2 VPN client certificates are stored in Keychain. When I initiate a VPN connection, I'm immediately prompted for my Macbook administrator account password before access to the Client ...
2
votes
2answers
2k views

“No administrator was found” in Startup Security Utility

My friend got a new MacBook Pro from office, later on he resigned and in a hurry erased the "Macintosh HD", now we are trying to install Mojave using Bootable USB but it won't allow because "External ...
4
votes
1answer
73 views

Why would port 19421 be open on an iPhone?

Following up on the Zoom vulnerability, I decided to run nmap and scan my local network for devices with port 19421 open. One of the devices turned out to be my iPhone! What service would use that ...