Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead. This is for general security of hardware, information, software topics where another tag isn’t presumed. iPhone security should use iPhone or iOS tag.

Filter by
Sorted by
Tagged with
2 votes
0 answers
65 views

Visual Studio Code was blocked from use because it is not from an identified developer

I'm new to Mac and would like to know if this occurrence is normal, I installed the Visual Studio code (exactly version 1.91 from the official site) by downloading the file and then inserting it into ...
Ughetta Agente's user avatar
1 vote
0 answers
67 views

Face ID no longer works after activating Stolen Device Protection

The Face ID feature on my Apple iPhone 12 Pro no longer works after activating Stolen Device Protection. I can't even reset face ID in security settings either. According to Apple website: When ...
Kalamalka Kid's user avatar
0 votes
0 answers
15 views

Allow every new AirPort network password access for my application

I made a CLI wifi that generates a QR-Code of the current wifi to connect with other devices. This CLI uses the next command: security find-generic-password -a "$NETWORK" -D 'AirPort network ...
Ulysse BN's user avatar
  • 107
0 votes
0 answers
19 views

How do bulk update outdated passwords in iCloud Keychain?

In the past, I moved to using Bitwarden, because Chrome stopped natively supporting iCloud Keychain and I needed something that would work on all devices. Now I'm using Arc Browser, which does seem to ...
Evert's user avatar
  • 191
0 votes
0 answers
39 views

How do I "toggle" macOS Sonoma Security/Features OFF/ON so I can use the full functionality of the `security` command?

I'm working on a script to import numerous Certs (Like 50) into System.keychain. macOS Sonoma Security Features are preventing the security command from fully working. Note: Intune MDM Trusted Cert ...
NotASteve's user avatar
0 votes
0 answers
41 views

What steps can I take to track down what is trying to gain sudo access?

I now have a prompt that recurs every 30s wanting me to allow running some unknown sudo script. The prompt is a macos builtin prompt that takes the center of the screen and can lose focus but can't be ...
davidpricedev's user avatar
-4 votes
1 answer
54 views

Does Apple's new Password Manager work with 2FA QR codes? [closed]

Today I use Dashlane's family plan, which suits me well, but it comes with a cost. I read in the announcement that Apple's password manager supports QR codes, which makes me understand that it's ...
Skhaz's user avatar
  • 107
1 vote
1 answer
32 views

Any way to access Startup Security Utility when Internal SSD dead/corrupt?

We have a 2018 MBP business laptop with an SSD that's died. The support company have declared it is dead and recommended recycling it. I'd very much like to get it booting from an external SSH. FYI: ...
Mere Development's user avatar
0 votes
1 answer
41 views

Are some apps always linked to iCloud.com via a SharedWebCredentials Library in its code?

I found that some apps contain a Library named SharedWebCredentials which contains the config json files that seem to always enable linking to iCloud. I am using Sonoma 14.5. These apps include FindMy,...
bing's user avatar
  • 1
2 votes
0 answers
59 views

Why does code-signing identity look revoked when using SSH, but good when using Terminal app?

Problem If I SSH to the mac remotely from another computer, then view valid code-signing identities, I get CSSMERR_TP_CERT_REVOKED, as seen below. # executing remotely in an ssh session % security ...
Christian's user avatar
  • 121
-3 votes
1 answer
73 views

iPhone app side loading? [closed]

I saw on the news recently, that due to a ruling in the European Union, Apple would be forced to allow third party app installation, outside of the official App Store. To sideload on iPhone it seems ...
securityauditor's user avatar
2 votes
1 answer
321 views

Which iPhones can be found when powered off?

I have a question about lost and stolen iPhones. My understanding is, should an iPhone get lost or stolen, the owner can use Find my iPhone to track the location and recover it. Certain iPhones have ...
securityauditor's user avatar
2 votes
2 answers
192 views

MacOS Recovery Mode Risk

(A related question was previously posted in the Asahi Linux forum, I didn't get an answer there; see https://discussion.fedoraproject.org/t/question-and-worries-about-wipe-linux-in-recovery-mode/...
user avatar
0 votes
0 answers
21 views

ATT internet service incompatible with Macbook email

My elderly neighbor is having trouble with email on a new macBook. Internet service is from AT&T in California. ATT apparently farmed out personal email service to Yahoo. So when you receive or ...
Peter vdL's user avatar
  • 169
0 votes
1 answer
65 views

Proper value for com.apple.quarantine on 14.4.1

I’m running into an issue on macOS Sonoma 14.4.1 relating to file quarantine xattr -w com.apple.quarantine true uTorrent\ Web When I write quarantine metadata to a this file, it results in utorrent ...
Anton Tropashko's user avatar
4 votes
1 answer
395 views

Grant permissions from the command line

I want to grant a permission to an application (Cliclick, needs permission to control the computer), but currently only have ssh access to the machine I'd like to do this on. Is there any way to ...
user252164's user avatar
0 votes
3 answers
125 views

If a hacker succeeds in using my Apple ID to log his device into my iCloud account, can he spy on my devices well enough to hack into my web accounts? [closed]

I ask, assuming the latest versions of iOS and MacOS. Can he capture keystrokes created on my devices? Can he access my Google, Yahoo, etc website accounts if I'm logged into those sites, assuming he ...
NotAnAccountant's user avatar
1 vote
0 answers
35 views

How could you add a site to HSTS list on MacOS

Say you have a bank site that you want safari to go to always by https rather than http. How could you pin that site to https if you are too lazy to type https:// prefix manually? Alternative/shorter ...
Anton Tropashko's user avatar
0 votes
1 answer
47 views

`wants to make changes` dialog

Occasionally an app pops up a dialog like the one pictured. Some questions regarding it. Is it true that an app that I launch has the same permissions as me? So why does it ask me for my credentials?...
Earnest Frankly's user avatar
1 vote
1 answer
115 views

Can I prevent turning wifi off or entering airplane mode on an unlocked iPhone?

My concern is robbery with a thief grabbing my unlocked iPhone and running away with my device out of my control. The first thing the thief should do is to put the phone in airplane mode to prevent ...
Duck's user avatar
  • 2,494
3 votes
3 answers
150 views

Should ordinary web users somehow implement end-to-end protection of their DNS requests? [closed]

I've read that, when browsers send website requests, the DNS lookup part of the request is not encrypted, and is therefore a security vulnerability. Also, I'm aware that routers have DNS settings, ...
NotAnAccountant's user avatar
0 votes
0 answers
68 views

Can't add a certificate to iCloud keychain

I generated a certificate with developer.apple.com for publishing my app in Apple App Store and downloaded .cer file. Doubly clicked on .cer file, selected "System" at the bottom-right ...
Dmitriano's user avatar
  • 133
1 vote
1 answer
36 views

How to remove scam sites from the actual LIST on Notifications?

Here's a typical scam site where I must have accidentally clicked yes on the notifications scam panel: It's easy to click "off", but how do you literally remove the items from that list?
Fattie's user avatar
  • 206
0 votes
1 answer
32 views

Change login timeout period?

When a user fails to enter a password they receive an increasingly long delay between login attempts. By default it seems this retry failure increases to rather unergonomic values, for example you can ...
Mikhail's user avatar
  • 111
7 votes
2 answers
1k views

Is there a valid reason why Canon's webcam plugin asks to scan my external drives?

Two days ago, I installed Canon's software to use my DSLR as a webcam, using the link I found on this page. The installer required me to override MacOS' security settings. I did so, thinking that it ...
KooDooMoo's user avatar
  • 173
0 votes
0 answers
18 views

Process are still alive after closing session

I have installed a fresh new MacBook. There are no third party applications. I have created 2 users: user1 and user2. I can switch from user1 to user2 sessions. I have closed user1 session. I have ...
Bob5421's user avatar
  • 141
0 votes
0 answers
14 views

pmset: Error 0xe00002db cancelling all scheduled events [duplicate]

I get the following behavior on my mac. > sudo pmset schedule cancelall pmset: Error 0xe00002db cancelling all scheduled events > sudo pmset schedule cancel wake '04/13/2024 09:27:02' pmset: ...
gregory_house's user avatar
0 votes
1 answer
28 views

Work email under iPhone’s settings> messages > send and receive

Why is my work address included as an account under my personal phone under settings>messages> send and receive? Does this mean my employer can see my personal text messages? How did work email ...
user7875084's user avatar
5 votes
2 answers
2k views

Is it possible to send a sms text to someone’s iPhone and make it appear that they replied to a number that they did not reply to?

I received a text from a number in my iMessages and then synced with iCloud and therefore showed up on my iPhone that I do not recognize. The strange thing is that there is no conversation thread. The ...
user11317802's user avatar
0 votes
1 answer
41 views

How to choose a password storage strategy between windows spreadsheet and an iPhone?

Consider someone with an iPhone. Passwords are saved in a spreadsheet that is only on a Windows computer. Chrome is installed on the iPhone but mainly Safari us used. The solution mainly needs to be ...
Justin Goldberg's user avatar
2 votes
1 answer
47 views

Is there a system log for the XProtectService daemon actions?

I need to check the app name that provoked the launch of a XProtectService window "Verifying "[appname]"". Imposible to see live, because the window pops up and disappears almost ...
nostromo's user avatar
  • 197
4 votes
1 answer
515 views

How can we shorten the delay when resetting the Apple ID password?

My daughter forgot her Apple ID password. We started the process of resetting from her iPad (her only apple device). They sent a code to her e-mail, and another one to my telephone (trusted phone ...
Luís Guilherme's user avatar
1 vote
1 answer
527 views

Is macOS vulnerable to the XZ-vulnerability? [duplicate]

The current state of knowledge seems to suggest that macOS was so far not vulnerable to the recent XZ attack - but I find this hard to establish. Is macOS really save even if vulnerable liblzma ...
fgysin's user avatar
  • 213
13 votes
3 answers
6k views

With the recent security issue with xz, what should we do before using Homebrew again?

Ars Technica's March 30, 2024 Backdoor found in widely used Linux utility breaks encrypted SSH connections includes the following: Several people, including two Ars readers, reported that the ...
uhoh's user avatar
  • 1,751
1 vote
0 answers
127 views

How can I use launchctl to send a signal to a service?

As you can already see in the text below and screenshot of the terminal, whenever I try to send a signal to a service I have given Not privileged to signal service. and Could not kickstart service &...
Gurhan Polat's user avatar
1 vote
1 answer
52 views

running app as a different user

I want to start app N as user U2 while logged in as user U1. The idea is U2 is less privilidged than U1, thus it would be safer to run suspicious apps. Is it possible? I tried su U2; cd /...
Earnest Frankly's user avatar
1 vote
1 answer
51 views

Face ID authentication

When I use Face ID to sign into a third party application what is being sent to the application server to confirm my login. Apple state, , ** Apps are only notified regarding whether the ...
Richard's user avatar
  • 11
1 vote
2 answers
159 views

Does this `last` output from macOS terminal describe a remote access login to my computer?

My computer was up to some strange things. I used the "last" command to check login activity and this is the result. Not only have I never seen it before this, all of my previous logins were ...
IDoNotUnderstand's user avatar
1 vote
2 answers
399 views

Is macOS `prefPane` app possible containing virus?

So I came across this unusual program, https://doomlaser.com/cursorcerer-hide-your-cursor-at-will/. I'd want to install it, however it's built using a macOS feature called prefPane, which lets you add ...
Joseph's user avatar
  • 113
0 votes
0 answers
35 views

How to switch foreground app / focus while using Terminal with "Secure Keyboard Entry"?

I am running Terminal with "Secure Keyboard Entry" enabled. This is on a MDM / managed computer where I cannot disable this option. It's been documented that the "Secure Keyboard Entry&...
Greg Sadetsky's user avatar
1 vote
1 answer
86 views

App and Terminal Isolation / Sandboxing

Not often I need to do something very unique and specific on my m1 (apple silicon) macbook air. Something like: I'll be interested in video game emulation, and need very specific controller support, ...
ThomasReggi's user avatar
0 votes
0 answers
179 views

How are password protected Numbers files encrypted?

Does anybody know the security details behind password-protected spreadsheets in Numbers? I've checked the documentation on Apple.com, but it's not exactly flush with technical details. From Password-...
fyrekcaz's user avatar
1 vote
2 answers
109 views

Apple Pay Security

When I am walking in the city, I am concerned with what I can do to configure the iPhone so that if it is stolen, it is more difficult or impossible to commit further theft / fraud. I would like to ...
gatorback's user avatar
  • 3,111
1 vote
1 answer
140 views

How-To export all "Keychain Access" passwords into plain text / search for specific (compromised) passwords [duplicate]

How-To export all "Keychain Access" passwords into plain text. I wish to search for specific passwords, because some of my passwords were leaked. I did a web search and found Import and ...
Sybil's user avatar
  • 4,027
4 votes
1 answer
79 views

Disallow clicking on links in email messages in Mail on macOS?

To protect from malicious emails I would like to disable all hyperlinks in received email messages in Apple Mail on macOS. I know to not click on links in mail messages, but I'd like to make it ...
Mark's user avatar
  • 141
0 votes
1 answer
51 views

Using Stolen Device Protection to protect photos

Is there a way to make photos viewable only using biometric access (face or touch ID)? The Hidden photo album and locked Notes are both accessible using a passcode, even with Stolen Device Protection ...
Adam's user avatar
  • 183
2 votes
1 answer
296 views

Creating a disk image from folder vs. Creating a blank disk image

I need to hide a particular folder on my Mac from other people who might want to view or copy them while I'm away from home. There are two ways I'm aware of. The first way is to hide the folder using ...
user avatar
1 vote
0 answers
78 views

What is Launch Control and why does it want to receive keystrokes?

What is Launch Control and why does it want to receive keystrokes? Suddenly this warning popped up: Searching for this message returns zero results. https://www.google.com/search?q="...
d-b's user avatar
  • 3,418
3 votes
1 answer
433 views

How to turn on stolen device protection but do not allow iphone to be unlocked without a passcode

I like stolen device protection in iOS 17.3. I want to turn it on. However, I want to require the passcode to unlock the device. I do not want the device to be able to be unlocked with biometrics (...
Elliotte Rusty Harold's user avatar
2 votes
1 answer
367 views

iPhone XR iOS 17.3 unable to summon “Stolen Device Protection” menu

An iPhone XR is outfitted with iOS 17.3. “Settings > Face ID” returns: I did could not find the security feature and did not turn it on. When I tap my AppleID at the very to of Settings, it does ...
gatorback's user avatar
  • 3,111

1
2 3 4 5
41