Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
4
votes
1answer
90 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
0
votes
0answers
38 views

Starting VPN Connection without Keychain Password Prompt

My IKEv2 VPN client certificates are stored in Keychain. When I initiate a VPN connection, I'm immediately prompted for my Macbook administrator account password before access to the Client ...
2
votes
0answers
50 views

Was my Macbook Pro remotely accessed?

I'm running Mojave on a Macbook Pro. A while ago, my screen started randomly scrolling down by itself while I was using Safari, and the problem persisted for a few seconds. The scrolling seemed almost ...
3
votes
2answers
2k views

Shady password required for Update Apple ID Settings

My iPhone (under iOS 12.1) informs me that I should "Update Apple ID Settings" for otherwise "Some account services will not be available until [I] sign in again." When I launch Settings > Update ...
2
votes
1answer
35 views

“No administrator was found” in Startup Security Utility

My friend got a new MacBook Pro from office, later on he resigned and in a hurry erased the "Macintosh HD", now we are trying to install Mojave using Bootable USB but it won't allow because "External ...
25
votes
7answers
4k views

Unable to completely uninstall Zoom meeting app

I am unable to completely uninstall the Zoom meeting app from my Mac running macOS Mojave. I once installed the Zoom meeting app. Then I deleted it from Applications directory. Now, every-time I open ...
4
votes
1answer
64 views

Why would port 19421 be open on an iPhone?

Following up on the Zoom vulnerability, I decided to run nmap and scan my local network for devices with port 19421 open. One of the devices turned out to be my iPhone! What service would use that ...
0
votes
0answers
45 views

Is it okay to send in external HD encrypted with FileVault for replacement? [closed]

I have a Seagate external HD that I just bought 2 months ago. Yesterday, it crashed and I cannot access it at all. I'm sure it's hardware related because I can hear a clicking sound coming from the HD....
0
votes
0answers
22 views

iPhone suddenly unauthorized to use iCloud

My iPhone has been saying that I need to verify it on another device to use iCloud. I opened my MacBook and it's asking me to approve the iPhone. Has my device been pawned? What's going on here?
0
votes
1answer
21 views

Is Apple's Mail.app more secure over using webmail? [closed]

I have heard that webmail services (even the one with E2EE) are prone to JavaScript based attacks, while native apps like Mail.app in macOS are secure against such attacks. Is this true? Is it better ...
8
votes
1answer
2k views

Why is the Turkish Government in my computer?

Perusing Keychain Access, I see that "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" is listed as a trusted root certificate authority. Per this 2013 article, I understand that: my ...
0
votes
1answer
15 views

Move Secure Notes items from Keychain of one Mac to another?

I have a keychain created, to hold a bunch of Secure Notes items. These are not in the default keychain files created by Apple. In previous versions of macOS, I was able simply drag the keychain file ...
1
vote
1answer
27 views

Automation Item

in Mojave > System Preferences > Security & Privacy > Privacy > Automation an Installer requires access to System Events. How to find out to which app this belongs and eventually (if wants to ...
111
votes
6answers
137k views

How can I keep my Mac awake AND locked?

I want to leave my Mac awake overnight so it syncs 4GB of data from Dropbox. I need to prevent the machine from going to sleep because that pauses the Dropbox sync I've been using Caffeine to keep ...
0
votes
0answers
34 views

How did hackers get in?

There has been some fraudulent access to my machine. I can see in browser history that they’ve tried to buy gift cards, tried to access PayPal, amazon, etc. I’ve turned off networking to the machine,...
1
vote
2answers
5k views

Why am I unable to change the password on my Mac?

I recently purchased my Macbook Air from school and they said that they have disconnected it from their server. But when I try to change the password for the admin account it shows me the following ...
0
votes
0answers
38 views

Disabling Gatekeeper is unfruitful : still get the prevention

I found out googling around that while the option to manually allow apps from anywhere to be opened directly was removed : https://www.techjunkie.com/gatekeeper-macos-sierra/ you could still use a ...
0
votes
0answers
22 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
0answers
45 views

Has Apple implemented some automatic form of “fix permissions”?

I've put things in /Users/Shared that I want my wife and I to have full access to, no matter which of us creates/reads/edits. I've tried to ensure this by setting group to rwx. Now, we're both in ...
5
votes
3answers
3k views

MacBook Air/Pro: run script upon lid close?

How can one configure MacOS (10.8 or higher) to automatically and immediately call a user-designated script (probably a bash script) upon the user closing the display lid of a MacBook Air or Pro? ...
2
votes
1answer
16 views

How to create installable app with setuid bit set owned by root

I have inherited a codebase that needs updating, but I don't have the build scripts that created the final pkg file. The code needs to access a connected USB device (treated as a drive) to read and ...
1
vote
0answers
26 views

MacBook Pro restores last user session after shutdown because of low battery

I had only one account on my MBP. I created a new account on it for my son and he has his own password. I was logged-in with an open session on my account. I closed the lid and left it there, ...
4
votes
1answer
90 views

Do iPhones use active scanning to find Wi-Fi networks when Ask to Join Networks is off?

I'm looking into security holes in my daily life, and I ran across an article that says that most devices broadcast their MAC address continuously. I'm wondering if that applies to iPhones (and other ...
3
votes
1answer
38 views

iPhone: Game app able to access Photos without permission

I have downloaded a game from the App Store onto my iPhone. My understanding is that apps need to ask for, and be granted or denied, permission to access iCloud, Photo gallery etc. But in this game, ...
8
votes
7answers
30k views

Will my Google Authenticator codes work if I restore my iPhone from a backup?

The latest iOS update (11.1.1) bricked my iPhone, and it appears that I will need to reset the phone to factory settings and then restore from my (iTunes) backup. I have a fairly recent backup ...
0
votes
1answer
52 views

Is it safe to charge my iPhone using my lightning cable and someone else’s adapter at the Airport?

The airport has USB ports that say they are for charging and I don’t know how to tell if this situation is safe. Is it safe to charge my iPhone by using USB connections that are behind a wall plate ...
0
votes
1answer
16 views

Unable to open a UDP port with nc

On ubuntu, I can open a UDP port: nc -lu 5555 Then in another terminal window, send a message: echo "hello" | nc -u localhost 5555 The message is received at the listener side, as expected. ...
1
vote
1answer
51 views

How are iOS apps protected from theft by other developers? [closed]

An app can contain proprietary resources like a Core ML model that a developer spent a lot of time developing. According to this answer, the app itself is not encrypted when it is downloaded to a ...
6
votes
1answer
247 views

Password-prompt diologue box

Sometimes, when one is installing a programme, a dialogue box will appear asking for an administrator password to allow the installer to ‘make changes’. That seems fine, but wouldn’t it be easy for an ...
0
votes
0answers
30 views

Protecting my files/folders

I need any software / solution to protect some files/folders which means these files/folders should not be copyable or movable to another device any idea ? Update ,, I have a software codes &&...
2
votes
5answers
9k views

How can I make my Mac accept a user password of 8 characters?

I just unboxed my new MacBook Pro, running Yosemite 10.10.5. When I went through the setup procedure, it didn't ask me what password to use for my account, and just set it to that of my AppleID. (I ...
3
votes
1answer
152 views

possible malware called FISE in Accessibility (Privacy & Security)

I checked my Mac's security and privacy and noticed this entry FISE. When I click Show in Finder nothing happens. I've googled around and found no mention of it at all outside of spammy sites. Before ...
9
votes
4answers
3k views

How can the average user easily validate the integrity of their Mac's firmware?

How can the average user easily validate the integrity of their Mac's firmware? Before you downvote this question or lecture me on how I am paranoid and no one should ever need to do that, please ...
4
votes
1answer
40 views

How to block a developer certificate

I accidentally installed Mac Cleanup Pro when I was going to upgrade Flash for a web site. I've used 'Little Snitch' to block the sites it connects to. The malware is all signed by a Developer ID '...
-1
votes
2answers
99 views

If you give your iPhone + Passcode to someone, what harmful things could they do to your data/privacy/security?

Assume you give your iPhone (iOS 12.2) + passcode to someone (e.g. teacher, law enforcement, airport security, etc.) for several hours, and then they give you your iPhone back. Assume the person is ...
5
votes
2answers
518 views

The account does not exist in bugreport.apple.com

I am about to file a bug, but I can not login... When I open the url https://bugreport.apple.com, It asks me to login. OK, I tried my three different AppleIDs, and all of them give me the same error ...
3
votes
3answers
135 views

How can I lock files with specific passwords on mac, ideally through terminal?

I want to lock my /etc/hosts file so that you need a password in order to write. I know you can encrypt files with Disk Utility, but in this case the file needs to be read by the computer and the path/...
7
votes
2answers
6k views

Can I use a security key such as YubiKey to sign into Google on Safari?

I have a YubiKey from Yubico which I would like to use in order to secure my online accounts. When trying it with Google, it tells me that Safari does not support it, I have to use Chrome instead. Is ...
0
votes
0answers
17 views

Security issue on blocked screen in High Sierra?

I can see my powerpoint presentation (opened in fullscreen) on locked screen on my iMac! (mac os 10.13.6) worse than that I can see it when I'm playing video, see photos in Photo app or open launchpad....
0
votes
0answers
48 views

Tradeoffs of disabling SIP (System Integrity Protection) in order to install Sierra on Mac Pro (Early 2009)

Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software. Unfortunately this Mac Pro model is not ...
0
votes
0answers
19 views

How does the iTunes “Restore” erase method on MacOS compare to “Erase All Content and Settings” within iOS from a security view?

The “Erase all content and settings” option in Settings obliterates all the keys in Effaceable Storage, rendering all user data on the device cryptographically inaccessible. Therefore, it’s an ...
1
vote
1answer
43 views

Open System Preferences/Privacy/Full Disk Access with url

I can open System Preferences/Privacy/Automation on Mojave with the URL x-apple.systempreferences:com.apple.preference.security?Privacy_Automation What is the equivalent to open Full Disk Access? ...
1
vote
2answers
73 views

What files are included in the /System/Library/LaunchAgents and /System/Library/LaunchDaemons

I bought a used MacBook recently and want to know if it has anything nonstandard like mdm, etc. I have many items invthese folders, such as com.apple.mdmclient.plist, com.apple.managedclient.plist, ...
0
votes
0answers
27 views

Safari 12.1.x problem with using certificates

I have an application which is using Crypto Token Kit and I have certificates which I should be able to use on web pages. The application is working for Safari version 12.0.3 and Google Chrome. For ...
1
vote
1answer
51 views

Regain control of an Apple Account

I have an older Apple account i haven't used for a few years, I know the email (And have access to the email address) its linked to and i know the password. However when i go to the apple account ...
5
votes
1answer
557 views

How should I react to an email saying my Apple password has changed?

Few weeks back I had a email from Apple telling me that my account was being tried to logon to from location they don’t recognise “China”. And they have locked down my account. Today I got email “Your ...
0
votes
0answers
76 views

Sysadminctl - sudo vs no sudo/interactive vs non-interactive

I have a Mac with Mojave installed on an APFS partition. I run sysadminctl to change the Secure Token status for some users. Based on the information I found on the web it wasn't clear to me how I ...
1
vote
2answers
319 views

How do I create an app-specific password for iCloud?

I'm trying to try out BusyCal, but it requires an app-specific password, and provides an outdated link to old information about how to do this. The page refers to an "App Specific Passwords section" ...
2
votes
3answers
695 views

How can I remove Applications from Security & Privacy?

Is it possible to completely remove Terminal and Chrome from the Privacy tab here?
1
vote
0answers
27 views

Admin can't select user to reset password

This relates to a 2011 Macbook Pro running El Capitan. I'm set up as the admin and my child has a standard account with parental controls enabled. My child forgot their password and I'm trying to ...