A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
1
vote
1answer
24 views

Should I protect (encrypt) my app's database or is it automatically protected from other apps?

My app asks the user several questions then stores all the answers in a local sqlite database file (e.g. answers.db). No data is transmitted outside the phone but answers are stored to let the user ...
3
votes
1answer
67 views

Why is the System Preferences lock decorative and no longer preventing changes when locked?

If I recall correctly, the little lock icon in System Preferences used to prevent changes without unlocking it and providing username and password. Either my macOS is broken, or this isn't the case ...
2
votes
0answers
18 views

Is it possible to have an encrypted volume mounted at boot time before anyone logs in?

I use /etc/fstab to mount a few external volumes at boot time (using a UUID= line). That makes them available at boot before anyone is logged in and thus they can be used for certain services. This ...
0
votes
0answers
8 views

Secure external WebDAV access to WD MyCloud [closed]

I would like to use a WD MyCloud EX2 Ultra to remotely access data. I don't like to access files in the browser (with works already) or with the WDsync App (since it's using space on my computer). I ...
0
votes
0answers
21 views

How to change the User/group setting for Apache installed with homebrew?

I am running an Apache server daemon on my local Mac with Mojave installed. Apache was installed with homebrew. I want to tighten up security on the server as I occasionally make some sites publicly ...
0
votes
0answers
19 views

iMac Retina codesigning errors in fresh install

I just reinstalled Catalina on an iMac retina and it won’t boot. It freezes near the end of the first boot. The same happens when I try to boot into safe mode. Verbose logging shows code signing ...
0
votes
0answers
24 views

Attention- *Komplete Kontrol MK2-49 S/Logic Pro X-Core processor /Komplete 11 12 [closed]

SecurityI am trying to get my Mac working again like it was before updating the Os to Catilina.I am a producer and professional recording artist with a deadline.I notified Apple that Native ...
0
votes
2answers
106 views

Has my iphone 5 been hacked?

I've recently noticed that my devices battery life and data limit has been draining at a higher rate than normal. Furthermore, upon a little further investigation, it seems a number of photos have ...
1
vote
0answers
34 views

Will my dead iphone still erase if it were to ever get revived even if it were removed from my icloud?

Long story short, iphone 7 died suddenly, apple store confirmed it dead, i suspect logic board problem but in the end i don't know, now my question: I am thinking of selling the dead iphone as a ...
-2
votes
1answer
109 views

Install for a specific, non-admin, user?

In Catalina (maybe earlier) Installer.app has an option Install just for me (or something like that, my translation from a non-English version) but most of the time it is disabled (in fact, I think I ...
2
votes
1answer
42 views

Why are these corporate certificates pre-installed and is it safe to delete/“Never Trust” most/all of them?

I was going through this macOS Security and Privacy Guide repo, step by step, and found some good privacy tips. However, when I arrived at the Certificate Authorities section I got a little confused. ...
3
votes
2answers
54 views

How much data can an app steal from my MacBook if I allow its system-wide execution?

I'm interested in knowing how to monitor and possibly sandbox an app and its relative background processes in MacOS. Is there some internal utility hidden somewhere in the system tools (even CLI), or ...
2
votes
1answer
707 views

Why did I unexpectedly get a notification on my iPhone that says “Use this iPhone to reset your Apple ID password.”?

A notification about resetting my Apple ID password appeared randomly on my iPhone: I'm alarmed that this means somebody is attempting to break into my Apple account. If I follow the notification, ...
-1
votes
0answers
52 views

syspolicyd assessment denied

My server has a bash script that executes twice a day, so far so good, it worked for a looong time. Yesterday I updated the server OS to Catalina and then the script stopped working. I've checked ...
1
vote
0answers
42 views

macOS: Blacklisting applications and processes [duplicate]

I need something like a firewall, but instead of restricting network traffic, I want to be able to restrict scripts, applications, and processes in general from being allowed to run/execute in the ...
0
votes
1answer
41 views

How can I check if iPhone has been manipulated or compromised firmware? [duplicate]

I would like to buy a secondhand or refurbished iPhone 7 or newer. Since I am not watching anything regarding the hacker's scene, I am not up-to-date. Is any newer version of the iPhone hacked? Is it ...
0
votes
1answer
68 views

How do I remove a certificate from Certificate Trust Settings if the profile doesn't exist?

If I go to Settings > General > About > Certificate Trust Settings... I see several profiles installed under the "ENABLE FULL TRUST FOR ROOT CERTIFICATES" heading. There is a way to toggle them off, ...
0
votes
1answer
69 views

How can a malicious video get into my FaceTime call?

Apple's recent update (10-Dec-2019) deals with fixing the following security issue: Impact: Processing malicious video via FaceTime may lead to arbitrary code execution If I call somebody via ...
0
votes
0answers
10 views

Security add-trusted-cert with “-r trustAsRoot” returns an error

This question is similar to How to add a self-signed root CA and always trust it from CLI on OSX. I have a cert.pem which I am able to add using the -r trustRoot option of the security add-trusted-...
1
vote
2answers
126 views

Removing randomwhere, malware(leadingsignsearch) from [Security & Privacy] - [Full Disk Access]

I know I should have cautioned when I first download unwarranted stuffs, but things happen. Removing them from /Library/LaunchDaemons or settings of each browsers, anything manually are done. ...
0
votes
0answers
14 views

Website certificate “marked as not trusted” despite being, in fact, marked as trusted

There's a particular website which I use a lot (university-related) and has given me grief with its certificate for years now. I oscillate between periods of indignation and attempts at ...
2
votes
1answer
109 views

How to disable com.apple.quarantine on Catalina

I am constantly downloading files from our servers and they get marked with the com.apple.quarantine attribute. How can I forever (and ever, until the universe collapses) prevent the OS from setting ...
2
votes
1answer
39 views

Will turning on two-factor auth require me to know my security question answers? (because I dont)

Current status, signed in on several devices to iCloud services etc. I was prompted about using two factor auth and thought it a good idea. I also want to change the email address it uses so I used ...
0
votes
0answers
24 views

What is CoreSimulator running and take up so much processing time?

This question might belong in the Information Security space. But since it's specific to macOS, I thought I'd start here. Please comment with your recommendation if you have an opinion about it. I've ...
0
votes
0answers
31 views

Data security while MacBook is on lock screen

I've recently sent my MacBook (running on Catalina) to repair by a licensed Apple service provider. The whole thing was simple (replacing one key cap) and took about 5 minutes or so. But I forgot to ...
0
votes
1answer
74 views

Enabling /bin/bash on Catalina - invisible to System Preferences -> Security & Privacy -> Full Disk Access

I am having trouble enabling /bin/bash on Catalina - Macos 10.15.1 When I try to enable it using "System Preferences -> Security & Privacy -> Full Disk Access", the pop-up finder list doesn't ...
1
vote
2answers
389 views

Catalina ask password to delete user but password is always wrong

I start to think this might be a bug in Catalina. STEPS TO REPRODUCE: I formatted my Mac-mini to factory reset (don't remember if was High Sierra or Mojave) I created a user at first startup. I ...
2
votes
1answer
119 views

iPhone asks to trust computer each time when tethering hotspot is on [duplicate]

When tethering hotspot is on, and I connect with my laptop via USB (in order to tether), I get asked each time to trust the computer which is annoying. Latest iOS 13.2 17B84 ; Mac OS Catalina 10.15....
2
votes
0answers
43 views

My Mac is sending spam emails

I do not think this is mere spoofing, and I do not think it's exactly like Receiving spam from myself Here is a diff of a test email I sent to myself(on the left), and the spam email(on the right). ...
1
vote
3answers
117 views

How to know if an iOS app does not access the internet via Wi-Fi or Cellular?

Is there a clear indicator that an app does not access the internet via Wi-Fi or cellular? For instance in the Settings App there is an entry for every app installed on iOS 13. There you find an app ...
1
vote
2answers
84 views

2FA for multiple Apple IDs on same device?

Apple now requires two-factor authentication on all Apple Developer Program accounts: In an effort to keep your account more secure, two-factor authentication will be required to sign in to your ...
0
votes
1answer
40 views

Why am I getting Universal Clipboard popups when I'm not typing anything?

I was just in the Weather Underground iOS app on my iPhone. I was not inputting text, I had just opened the app so it was showing me weather conditions for my current location. After the app ...
0
votes
1answer
18 views

How to remove a corrupted Trust Settings Record?

I was trying to add a trusted cert using security add-trusted-cert -d ..., but somehow the Trust Settings Record became corrupted. I can see this whenever I try to add another trusted cert, or when ...
0
votes
1answer
27 views

Can a casual user of my iPad set it up to have remote access

If someone has access for a few minutes to one's iPad, with permission, including the login password, is there anything they could do that compromises ones's security? Should one change the login ...
2
votes
0answers
87 views

How to fix “Operation not supported” on mac os

I am trying to install the Flutter onto my computer onto an external drive I have followed the instructions on their website to try and install it. https://flutter.dev/docs/get-started/install/macos. ...
0
votes
0answers
12 views

An application to show if Secure Input is enabled?

I'm struggling with Secure Input Mode, since it (quite often) gets left on, because of 1password. I've asked their support and they brushed it off them by saying that 'they didn't experience that'. ...
6
votes
1answer
931 views

Apple ID password compromised - 2FA rescued - What next?

I have a Mac, iPhone and an iPad. I use my Gmail account for the Apple ID and one day, I received a notification on my phone that someone is trying to login with my gmail account. The two factor ...
1
vote
1answer
28 views

Undo refusal of app’s access to mic [duplicate]

I am using Scratch which is based on Adobe Air, I believe. At some point I mistakenly denied access to my microphone on that program (it asked me "May Scratch access your microphone" or something ...
6
votes
1answer
1k views

Steam.app would like to receive keystrokes from any application

I just installed a new version of Steam on macOS Catalina 10.15 (19A602) and got this unexpected request: Keystroke Receiving Steam.app would like to receive keystrokes from any application I ...
0
votes
0answers
16 views

Disable USB ports for standard user accounts

I want to disable my USB ports on my MacBook Pro for standard user accounts. When I plug in a USB device I want the port to become enabled after I type my admin username and password or use Touch ID....
0
votes
1answer
21 views

Reset External HDD password without losing data

I set a password on my external HDD using disk utility. Now I am trying to access my HDD however, I cannot access it even if I am trying to give right password. Is there a way to reset this password ...
5
votes
2answers
421 views

Disable the use of the “com.apple.quarantine” extended attribute on Mojave

I recently got Mojave. Could somebody tell me whether it's possible to disable the use of the "com.apple.quarantine" extended attribute, for all apps that I have now or will ever download in the ...
0
votes
1answer
34 views

How to auto-lock MacBook when inactive (without enabling screensaver)

It is super easy to automatically lock a MacBook after a few minutes of inactivity, but this requires enabling a screensaver. https://www.google.com/search?q=auto+lock+macbook However, this method ...
0
votes
0answers
137 views

macOS Mojave 10.4.6 hashes

When I download macOS Mojave via softwareupdate --fetch-full-installer --full-installer-version 10.14.6 I get build 18G101, whose hashes are not listed here. So, what are the dmg hashes for this ...
2
votes
1answer
248 views

I can't check or uncheck items in Security & Privacy > Accessibility on macOS Catalina

Since I installed macOS Catalina I can no longer check or uncheck some items that appear under Security & Privacy > Accessibility. First I click on padlock button on the lower left side of the ...
0
votes
1answer
78 views

Execute App (Apps Authorization Revoked)

Hello there I am trying to start an app (downloaded from the Internet) on macOS Mojave 10.14.5 though when I double click I get the following pop up message: “Ascabart” can’t be opened. You should ...
1
vote
0answers
48 views

Find My [Mac] reported location without WiFi?

I was the owner of a Macbook Pro w/ Touchbar running macOS Mojave last week-end The macbook has been stolen and moved 300 miles away from the point. I got two alerts separated by a few hours, around ...
1
vote
0answers
103 views

Screen Time Passcode: Use Password rather than 4-digit PIN?

iOS uses a a 4-digit passcode to secure Screen Time settings (formerly known as Restrictions). Use Screen Time Passcode Use a passcode to secure Screen Time settings, and to allow for more ...
4
votes
2answers
4k views

Why does iOS 13 not trust my own Root CA?

No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted". I have imported the Root ...
0
votes
1answer
48 views

A simple web page using significant amount of memory, can it be some security issue?

I ran nothing in background, was just viewing stackoverflow questions, and the notifications says it is using significant of memory. When I checked activity monitor it was using 2GB which is absolute ...