Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
1
vote
1answer
13 views

Company Device Management on Separate User?

I am doing an event with a company that wants to give me a corporate email. They want to set it up using a device management profile on my personal mac. Is there a way to protect and keep my personal ...
6
votes
3answers
1k views

What can other administrators access on my machine?

I've been given a new MacBook Pro at work, and it has an administrator account which I assume the IT department has the credentials to. I have been created a local account which is also an ...
1
vote
1answer
41 views

How does macOS process protection work – Cliff Notes style?

Looking at Apple dev forums and not having programmed in C since college, I'm a bit out of my depth trying to understand the fundamentals of the components of MacOS' protection model employed over the ...
2
votes
0answers
66 views

How can you force Applications that open Safari by default to honor the selected non-Safari default browser?

For example, when I use a specific VPN application, the authentication path opens the Safari browser, which cannot work with Yubikey. Is there a way to convince the application to use a different ...
0
votes
0answers
45 views

How to detect and maybe eliminate Malware from 'Flash Player'?

I read about that some websites do claim you have old Adobe Flash Player installed. I am not sure whether or not I got such notifications legitimately or not. I know I have downloaded some Flash ...
0
votes
1answer
61 views

How can a script detect if it has access to some Security & Privacy parameters?

I've created a script which uninstalls an application I've created. However, as you may know, in macOS Mojave the system requests the user's permission to allow said script to control System Events. ...
8
votes
1answer
126 views

How do I disable this red warning appearing in every new conversation in iMessage?

Every time I get a text-message from a new number, I get this big, red message: WARNING: Apple will never ask you to open Terminal or execute a command on your Mac, click a link, visit a website, ...
0
votes
0answers
73 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
1
vote
0answers
177 views

Running a command with access to “System Events.app” granted

I am updating applications installed via Homebrew from command line. iTerm2 requires access to "System Events.app" to be correctly updated, which ends up in a process that is not fully automated and ...
0
votes
1answer
53 views

Private / Public Key

Provisioning profiles are available in ~/Library/MobileDevice/Provisioning\ Profiles. But, when creating a Certificate Signing Request, where are the public and private key stored on Mac OS? Meaning,...
0
votes
1answer
22 views

Force Strong Password Generation

Is there any way to prompt iOS to generate a password when it doesn't detect a New Password/Change Password field?
0
votes
0answers
34 views

Does 'Preview' block links pointing to executables?

Does the Preview application which comes native with macOS have a blacklist, which prevents the launch of common executable types (similarly to adobe reader which prevents .exe .js etc. files to be ...
0
votes
1answer
118 views

View login history in Macbook app store app

When I opened the app store app on Macbook Pro, it asked me to login in a pop-up box. The strange thing here was: The user ID field was disabled to edit and it had a pre-filled email address which is ...
6
votes
2answers
95 views

How to tell the difference between a legitimate Apple request for my password, and an app phishing attempt?

If an app pops up a modal that looks just like the Apple password request modal, how can I tell the difference? https://krausefx.com/blog/ios-privacy-stealpassword-easily-get-the-users-apple-id-...
0
votes
1answer
228 views

Should I change my password if I see an iOS popup that someone tried to login from an unrecognized city?

An iOS a popup just occurred that says someone tried to login from a city I do not recognize. In the past, I have changed my password when this has happened - but despite using a unique, multi-...
1
vote
1answer
161 views

Cannot SSH into Cisco switch or pfSense router from Mac Mini (macOS High Sierra 10.13.6)

Errors message in Terminal are (switch 1st, router 2nd): MacMini:/ MacAdmin$ ssh NetAdmin@192.168.3.2 #Switch Unable to negotiate with 192.168.3.2 port 22: no matching key exchange method ...
0
votes
0answers
12 views

When waking from sleep, login input acts as if delete key is stuck; can't log in

I've had this symptom only twice, both in the last week: I wake my MacbookPro11,4 (mid 2015) from sleep, and I can't type my password to log in because every input keystroke is immediately deleted. ...
1
vote
2answers
492 views

How do I create an app-specific password for iCloud?

I'm trying to try out BusyCal, but it requires an app-specific password, and provides an outdated link to old information about how to do this. The page refers to an "App Specific Passwords section" ...
0
votes
0answers
15 views

How to withdraw ssl from exceptions

Recently I've tried to open a website. I used TorBrowser. When I opened it I saw a message that is was something wrong with the website's certificate. I clicked "Advanced", and then I clicked ...
1
vote
1answer
35 views

Devices sharing Apple IDs: what credentials can an user with an iPad PIN use?

I have several devices sharing the same Apple ID, one being an iPad (plus 2 iPhones, 2 Macs etc). I want to share my iPad PIN unlock code with others in my flat so they can use Spotify / control the ...
1
vote
2answers
87 views

How bad is Adobe Air

I just purchased some software that requires Adobe Air to run it's (NOT EVEN REMOTELY) "native" Mac app. Alternatively it is supposed to run from the web with Flash. Right after finding out that was ...
3
votes
1answer
347 views

When using Volatility with a memory image, what is the Kernel version?

The Volatility memory forensics framework github website lists these Mac profiles for OS 10.11: Profiles -------- MacElCapitan_10_11_15A284x64 - A Profile for Mac ElCapitan_10.11_15A284 ...
2
votes
0answers
27 views

Can a website change Safari’s default search engine?

My child’s MacBook had it’s default search engine changed to Yahoo. I did not do this, my child did not intentionally do this. So I see two possibilities. My kid downloaded and excecuted an app ...
20
votes
7answers
10k views

Is this an email from Apple or fraud?

Begin forwarded message: From: ID Report <childaviintlteknic59@substemptauthsvcstld.com> Date: February 15, 2019 at 9:20:10 AM EST To: [Bla bla bla <my email address>] Subject: [TBA] Your ...
-2
votes
2answers
109 views

Can somebody explain these entries in my sudoers file?

What is going on in my sudoers file? I have no idea who the FULLTIMERS = millert, mikef, dowdy are or what these IP addresses Host_Alias CUNETS = 128.138.0.0/255.255.0.0 Host_Alias CSNETS = 128....
1
vote
1answer
320 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
79
votes
8answers
23k views

How can I prove to an airline that the iPad mini they found is the one I left on the plane, without giving them the passcode?

I left an iPad mini on an Icelandair flight. They just sent me this message: "We have an item matching your description. Can you please send us details about the item, preferably passcode, to ...
3
votes
1answer
90 views

Make old snow Leopard MacBook safer

I have an old MacBook running Snow Leopard 10.6.8. Specs are 2.4 GHz Intel Core Duo, 2GB RAM. I bought it for my gf (now wife) around 2008 and we have not used it in the last couple of years. The OS ...
1
vote
0answers
46 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
0
votes
0answers
88 views

Apps won't add to Security & Privacy Mac

I recently carried all my apps over to a newly installed SSD. When I go to open Bettersnaptool or popclip (apps that need to have control of the computer) I'm told to allow them to but when I do ...
1
vote
0answers
189 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
0
votes
0answers
28 views

How and why is the osascript command loading a QuickTime component?

I'm trying to figure out what the osascript command is doing under the hood. Whenever I run it, it tries to load a QuickTime component which throws security errors with Mojave installed. See this ...
0
votes
1answer
148 views

QuickTime component causing errors when running osascript command

If I run a simple osascript from the command line: osascript -e 'tell app "Safari" to activate' I get hundreds of this error: 2019-01-19 13:07:31.224 osascript[3908:9313907] Error loading /Library/...
2
votes
2answers
115 views

Is my Apple Id under attack, and how do I fix it?

So I got an e-mail from Apple which says: You recently requested a password reset for your Apple ID. To complete the process, click the link below. Reset now > If you didn’t make this change or ...
1
vote
0answers
38 views

How do I keep my SSH private key passphrase away from OSX?

I recently created an SSH public/private keypair on my Mac OSX Yosemite system and for this use-case, I wanted to encrypt the private key with a passphrase. However, the first time I attempted to use ...
0
votes
1answer
64 views

iPhone thief phished iCloud password. Can they decrypt iPhone contents?

Long story short, a close friend had their iPhone stolen a few months ago. Just yesterday they got a text saying their phone was found with a link claiming to show the phone's location. Unfortunately, ...
1
vote
0answers
26 views

Restricted AD users can still log on?

Active Directory user accounts have a property that allows admins to restrict them to specific machines. I.E. the user can only log onto a select list of Windows machines. Why am I mentioning this ...
0
votes
1answer
15 views

MBP Retina, 13-inch, Late 2012, with MacOS 10.13.5

What's Web Sharing and why incoming connection to it are blocked and mark as severe security risk by Norton?
0
votes
0answers
7 views

Desktop and open applications visible for 0.5-3 seconds before login prompt MacOS Mojave

Since updating to MacOS Mojave, whenever I touch my keyboard or move my mouse to wakeup the computer from display sleep, I can see all the open windows as if I was logged in- but without any control ...
0
votes
2answers
135 views

Does System Integrity Protection have any effects on OS's besides Mac OS?

If I understand correctly, SIP is a security feature that protects certain folders on Mac OS from modification, even by root users. I don't know how it works on a low level though, and I was ...
0
votes
1answer
54 views

Any potential issues logging into an ARD session with a dedicated ARD user?

One of the reservations I've had with ARD is that it allows anyone on the same network as you to access your computer, as long as: ARD is enabled (this can be confirmed by scanning with the ARD ...
0
votes
1answer
60 views

what happens if an Apple ID is never authenticated?

Allan says that something smells rotten about the account, that something, somewhere, must be compromised. Is that an absolute? That, in order to create an Apple ID, that the e-mail must be ...
1
vote
1answer
930 views

How to contact Apple if somebody has created an AppleID using an email address of mine.

Before you downvote this question consider that I'm not the first to run into Apple's odd recursive authentication loop. Frustrated Apple User sums it up as: So Apple could do nothing and this guy ...
-2
votes
1answer
213 views

How to unlock an Apple ID through e-mail?

My apple-id was just registered and used on icloud -- but not by myself. Perhaps a Christmas present erroneously associated with my e-mail, or maybe not. Could be malicious. Either way I want to ...
1
vote
1answer
35 views

Does iOS keyboard “allow full access” setting allow use of data from default keyboard?

Does the allow full access setting allow third party apps access to what's been written previously using the default keyboard? Or can they only access data that is written using the the third party ...
2
votes
2answers
40 views

How specific/secure/selective is Touch ID?

My new Macbook Pro has Touch ID, and I've trained it on one of my fingers so I can use it to unlock my machine, which is quite fun. I've been wondering, though, how secure it is really. To be clear, ...
3
votes
1answer
659 views

Are security questions no longer required for Apple ID account security?

I lost security questions/answers for my old Apple ID, so I can't do many things. Therefore, I registered a new Apple ID account by going to System Preferences → iCloud. I enabled two-factor ...
1
vote
1answer
103 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
2
votes
0answers
130 views

Encrypted disk in Windows 10, unreadable by macOS

I encrypted by external HDD with exFAT format using VeraCrypt on a windows machine. When I plug in the encrypted disk into MacBook (running macOS Mojave), I get the error "the disk you inserted was ...
1
vote
2answers
393 views

Why can other users see my files in MY user folder?

This is a screenshot of my private folders/files inside my user folder, but seen from a different user on my MacBook. Several folders are basically openly accessable for everybody, even when created ...