Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

EvoCam (video camera software) did not capture audio for 2 weeks on Mac running Mavericks—way to find it?

I know it's a longshot. I have an old Mac Mini running Mavericks running EvoCam 4.2.6 (old software no longer available). The Mac Mini is connected via WiFi to an Amcrest camera. The Mac Mini is not ...
6
votes
2answers
1k views

Securely deleting data in iOS

My understanding is that resetting an iOS device by using Erase all Content and Settings is considered secure deleting, as the key for the encryption is obliterated and no data can be recovered. Just ...
1
vote
0answers
18 views

Is the Truststore/Keychain writable for the Chrome process?

While browsing a TLS-protected website in Chrome (89.0.4389.114), the button on the left side of the address bar opens a dropdown menu. Pressing on "Certificate" opens a (system-) dialog ...
1
vote
1answer
33 views

What i need to do to backup and secure my mobile data before sending it to repair

I have iPhone 11 and its screen was broken, so I will send it to an authorized reseller for Apple. but before doing so I will remove all the data I have these data include; photos, videos, apps (mail ...
1
vote
0answers
25 views

Authenticating access for multiple keychain items

I am currently trying to access the WiFi credentials in the macOS keychain that are stored under the type "AirPort network password". I can access each PSK directly with security find-...
2
votes
1answer
36 views

When and how does FileVault decrypt a SSD on a T2 Machine

Based on what the T2 chip, on user log in, decrypts a SSD with FileVault enabled? Bypassing the user password will result in a possible decryption of the SSD? As several years ago there where tools ...
0
votes
1answer
46 views

System Preferences - 'Allow the apps below to control your computer'. What is the extent of 'control'?

Question MacOS Catalina - System Preferences -> Security & Privacy -> Privacy -> Accessibility What does granting 'control (of) your computer' include? The following question from 2013 ...
4
votes
1answer
97 views

How to disable SMS for two factor authentication?

Apple will use SMS as a fallback for two factor auth, if an authorized device is not available. Given that SMS security is a dumpster fire, this seems unwise, and I'd like to disable the feature. ...
0
votes
1answer
40 views

Is there an iOS 13 patch to fix the WebKit exploit fixed in 14.4.2?

https://www.forbes.com/sites/davidphelan/2021/03/26/apple-releases-ios-1442-unexpected-update-with-urgent-security-fix/ Background information: iOS 14.4.2 fixes a bad WebKit flaw that's being actively ...
0
votes
0answers
12 views

How to fix sandboxing on macOS PDF Services?

A casualty of Big Sur's increased security is PDF Services, which now are sandboxed and can't write files anywhere. (PDF Services are scripts or other executables that take PDF files from the print ...
0
votes
0answers
26 views

Enable full disk access for an application without a .app extension

I'm trying to mess around with the circuit design application "Digital" but it doesn't seem to be able to read data from folders. I tried giving it access in system preferences, but it doesn'...
4
votes
2answers
397 views

What does it mean to give apps access to Documents folder on Mac?

A lot of apps seem to request access to the Documents folder. Does giving them access mean they can both read/write anything in this folder? Isn't this very dangerous and doesn't that mean we really ...
1
vote
1answer
22 views

Can iOS app bypass/skip the device passcode window if it knows the passcode

To perform some important actions on iOS it's required to enter the device passcode, for example adding a VPN profile or installing custom settings config (new feature in iOS 14). I wonder, is it ...
3
votes
1answer
538 views

Verify code signature of a package installer

On macOS when you open an app downloaded from the internet Gatekeeper automatically verifies the code signature and in case of any problem warns you and blocks the app. As far as I understand that ...
2
votes
0answers
41 views

iCloud Keychain encryption

I have a question about the strength of the iCloud Keychain encryption key. I know that when I enable iCloud Keychain sync on my device, Apple encrypts my local keychain and stores it on their servers....
2
votes
0answers
49 views

Mac Firmware password suddenly appeared after moving drive

/tldr - Moved original Apple SSD to new logic board. No firmware password before, now suddenly there is - even on original board (after clean install). Sharing experience and insight from others - not ...
0
votes
0answers
46 views

Erase device history on a Mac

I've seen multiple software tools for erasing any history of external devices on Windows -- USBDeview, and USB Oblivion, in particular. In other words, after using this software, there is no way to ...
4
votes
2answers
99 views

Can malware skip the administrator password popup if it already knows the password on macOS

I have two accounts on my Mac: standard and administrator. I always use the standard account and when I need to perform an action that requires the administrator rights I enter my admin credentials ...
0
votes
0answers
24 views

settings permissions on a big sur python desktop application

I'm porting a Python/PySide2 desktop app to run on a Big Sur machine. It's built into a .app by py2app. All that goes fin and the app itself runs. However, when run by the target user from the desktop ...
1
vote
0answers
25 views

Does screen sharing via Firefox allow another website to control your Mac, or just your browser?

Recently I was requested to share my screen to take an online exam. The security implications of this concerned me. Firefox says: https://support.mozilla.org/en-US/kb/screenshare-safety This to me ...
1
vote
1answer
46 views

Error Message Says FileZilla Will Damage My Computer

After updating to Catalina, when I start FileZilla, I get the error message "filezilla will damage your computer. you should move it to the bin”. I had installed FileZilla from the App Store, and ...
0
votes
1answer
34 views

Big Sur 11.2.2: Operation not permitted although Iterm and Terminal have Full disk access

On Big Sur 11.2.2, Iterm and terminal are both granted "Full disk access" in system preferences > security & privacy > privacy I tried to install a third party app using sudo wget ...
0
votes
0answers
15 views

Enable confirmation window when a folder is moved or deleted

On Mojave I would like to enable a confirmation window every time a user tries to drag a folder to a new location or delete a folder in Finder. Any kind of confirmation window in Finder. I also need ...
0
votes
1answer
47 views

New file on my Macbook Pro with odd custom permissions. Have I been hacked?

So today I was looking for something on my MacBook Pro and saw folder called library with the custom permissions. It seems like it has to permissions, systems (read, write) and everyone no access. I ...
2
votes
1answer
36 views

My Zoom screen is no longer sharing on my Mac

As host, I used to be able to share my screen, documents and presentation, but now I cannot. On my end, I see the share screen with "empty" files to share. On the attendees end, they see a ...
0
votes
1answer
45 views

Karabiner-Elements cannot open new Terminal window unless Terminal already in focus

I am on Catalina 10.15.7 and use Karabiner-Elements 13.3. When I use the rule shown below for opening Terminal nothing happens unless Terminal is in focus (you can see Terminal on the menu bar). Seems ...
1
vote
1answer
46 views

What are the risks of adding `/usr/libexec` to `$PATH`?

I want easy access to PlistBuddy, which I wasn't even sure still shipped with macOS (Big Sur 11.3 here). I found it in /usr/libexec, a directory I don't know well, but which contains a large number of ...
1
vote
1answer
38 views

How to always allow any app to do anything / disable Security & Privacy authorization dialogues

Currently on macOS Catalina. I work in sound design and audio development. I use several Automator-scripts and other workflow applications to control various stuff, and for every new project or when I ...
1
vote
1answer
150 views

Can iOS apps read your clipboard, and can it be stopped?

An article says that iOS apps have been caught reading data from user's clipboards: researchers found the following iOS apps were reading users’ clipboard data every time the app was opened with no ...
1
vote
1answer
52 views

Does VSCode have Full Disk Access via Terminal?

I can use the terminal in VSCode and the terminal has Full Disk Access, so does VSCode have Full Disk Access? Can VSCode and extensions run terminal commands?
2
votes
1answer
67 views

Terminal app can access folders that it isn't allowed

In the security and privacy pane I didn't allow the terminal app to access anything. I didn't allow full disk access either. However, it can show the contents of Desktop by doing cd Desktop, ls. Why?
1
vote
0answers
44 views

Which files can VSCode read?

If I open a folder using VSCode, it can read the files in that folder. However, can it read the files outside that folder? I can use the terminal inside VSCode and if I run cd .. command, I can ...
0
votes
0answers
17 views

My keychain passwords gone after upgraded to High Sierra

My keychain passwords disappeared after I upgraded to High Sierra. I have 130+ entries made in secure notes of Keychain Access. How do I restore them? In detail: After upgrade to MacOS 10.13 from 10....
0
votes
0answers
33 views

Change certificate trust settings via command line

I trying to find a way to change trust settings for a single certificate installed in Keychain and that's need to be via command line. I found the security command line tool, but I don't know exactly ...
0
votes
1answer
142 views

Macbook won't let me boot from external drive because of there's no administrator in the startup security utility

I have a 2018 Macbook Pro that I recently started updating from Mojave to Big Sur. I received an error message when the installation was finishing up. "An error occurred preparing the software ...
1
vote
1answer
41 views

Use `security` to get my login username and password for use in shell scripts / cron

I'd like to create a cron job that periodically pings an external resource and retrieves some information on my behalf, using my username and password that I logged in to the computer with. I could ...
1
vote
1answer
36 views

How can I find out which kernel extension has been updated?

I received a notification on Big Sur that an extension was updated and this must be authorised in System Preferences. It is 'System software from developer "Apple Inc."'. I find this odd: I ...
0
votes
0answers
24 views

Generating a self-signed code signing certifcate in macOS using only the terminal

I have been wrestling with Unknown Error = -2,14,74,14,007 when generating a self-signed certificate to give gdb the appropriate permissions on macOS and while the solution is available, they require ...
0
votes
0answers
9 views

Can I generate an Apple ID recovery key with Mac OS Mojave?

I have two-factor authentication enabled for my Apple ID. I want to generate a recovery key in case I lose access to my 2FA devices/phone numbers. Apple has a support article https://support.apple....
0
votes
0answers
14 views

iCloud Drive sync breaks when new security update comes out?

I have noticed (it happened a second time now) that when a security update shows up in System Preferences the iCloud Drive doesn't upload anymore (probably download is affected too, but I didn't test)....
4
votes
1answer
57 views

Dismissing Big Sur permission dialogs via keyboard

I know that since Mojave, MacOS has started presenting more dialogs when apps would like to do specific things. However, in Mojave, I was able to control the dialog that appears using the keyboard (...
1
vote
2answers
54 views

Invalid certificate for a specific website

When trying to navigate to a specific website (amazon.com in my case) I always get the "NET::ERR_CERT_COMMON_NAME_INVALID" error in Chrome (and equivalent errors in Safari/other browsers). ...
0
votes
1answer
27 views

Turn off “Approve with Apple Watch” macOS security alerts

Using macOS 11 Big Sur, many items that used to require my user password now annoyingly buzz my wrist. I can still type my password, but now I have to first press "Use Password..." in the ...
0
votes
1answer
39 views

What advantages are there to removing a stolen device from your iCloud account?

Apple's stolen iPhone advice lists the final step - after having erased the device - as: Remove your lost or stolen device from your list of trusted devices. However, it is clear from the "If ...
0
votes
0answers
32 views

When and how can I use client certificate authentication on iOS?

I have installed a x509/pfx certificate under profiles in my iOS settings and configured my webserver (nginx) to require this certificate. With Safari on iOS, I can browse to my main page using the ...
0
votes
1answer
38 views

Are passwords in my keychain readable by enterprises MDM tools?

So, our company is starting to push MDM (VMWare Workstation One) around... I understand they want to be safe... But I'm worried about my safety. Question: Is my keychain still safe after MDM is pushed ...
0
votes
0answers
15 views

What security/encryption is used in an iCloud screen sharing session? [duplicate]

Does anybody have some pointers or information when it comes to the technical and security implementation of Apple's built-in screen sharing feature, the one where you start the Screen Sharing app and ...
0
votes
0answers
31 views

add new item to Automation in Security & Privacy

I am having a problem with exporting from Adobe XD to Zeplin. On Export, Zeplin starts but does not recognize that it needs to import xd document, so it does nothing. Apparently this could be caused ...
0
votes
1answer
41 views

Police-panic mode for Apple Watch?

On iPhone you can immediately lock all sensitive information by pressing the side button five times. On Mac you can hold down the power button. What is the equivalent for Apple Watch? Also, since your ...
1
vote
1answer
82 views

Is it possible to completely reset an iPhone so its software/firmware is guaranteed to be 100% factory fresh? [duplicate]

When purchasing a used iPhone with a completely unknown history (which includes the possibility of multiple previous owners), is it possible to reset it and be sure that all software and firmware on ...

1
2 3 4 5
33