Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
1
vote
1answer
2k views

How are passwords stored by Apple TV?

Apple TV stores a number of passwords (or some kind of credentials) needed to access services like Vimeo and YouTube, as well as the Apple IDs needed to access the iTunes Store (and the now defunct ...
3
votes
1answer
658 views

Has iOS Always had Secure Boot?

In Apple's recent iOS Security paper here http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf They speak about the Secure Boot Chain, my question is has iPhones/iPods/iPads always had ...
1
vote
1answer
412 views

What steps I should take for data security and prevent misuse of my lost iPhone?

I lost my iPhone 4 and mistakenly wiped it using "Find my iPhone" from https://www.icloud.com/. Can i even track it? It was locked by password. Now I think it's sure that I can't track my phone. I ...
8
votes
2answers
3k views

Should I use the same Apple ID for iCloud and iTunes?

Should I use the same Apple ID for iCloud and the iTunes store? My immediate assumption was "sure, of course, keep it simple", but today I read the following recommendation: One potential problem ...
6
votes
2answers
9k views

Does Remote Wipe securely wipe the contents of the drive?

With all the ruckus surrounding the Mat Honan debacle, I'm curious: When you remotely wipe a Mac, is it a secure wipe or does it just lock down the machine with a code? From the Wired article: ...
9
votes
2answers
601 views

How does Apple's Power Nap interact with File Vault?

If a machine is periodically waking up to check for updates with Power Nap, does this also mean the disk encryption keys are always in RAM? If so, this makes a DMA attack against a "sleeping" Mac ...
1
vote
1answer
2k views

Where are Safari 6.0 passwords saved?

Prior to version 6.0 Safari had no features for managing passwords distinct from the system wide support provided by Keychain: but Safari 6.0 adds a new tab in its Preferences dialog for saving and ...
1
vote
4answers
301 views

Why is Mountain Lion more security conscious?

Whenever I open an application not downloaded from the App store (or a trusted vendor) I get a warning. The warning reminds me a bit of the awful window popup that comes up every time you want to ...
0
votes
1answer
101 views

Apple Developer certificates for signing mail?

If every registered Apple developer have a certificate for signing their apps. Is that certificate also good for signing mails? And by this, I also mean if their certificate is backed up by a root ...
11
votes
1answer
4k views

With a firmware password set on a Retina MacBook Pro, what are recovery options?

I am considering setting a firmware password on my Retina MacBook Pro for security reasons. If I do this and later lose the password (or other such extenuating circumstances), how can the data be ...
7
votes
1answer
3k views

Does iCloud use client-side encryption?

I would like to know if iCloud uses client-side encryption i.e. all data is encrypted on client side and even Apple can't decrypt the data and read it. Is this true for iCloud?
2
votes
1answer
65 views

Which Apps on my Mac need security updates?

I have a lot of software installed from sources other than the Apple Store. Is there a service to check which app have security updates ready to be downloaded? Opening each one on Fridays for a ...
40
votes
2answers
377k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
2
votes
1answer
3k views

OS X 10.7 Lion: Reset master password to FileVault 2

I need to reset or delete my master password to FileVault 2. This is the password found under System Preferences > Users & Groups > Service gear > Change Master Password. It's a backup in case a ...
4
votes
3answers
474 views

iPhone passcode security

I was looking at a companies that to do repairs to iPhones to decide if I wanted to DIY or just pay someone to do it, and noticed one company that listed a service named "Remove Passcode". This was ...
19
votes
3answers
10k views

How can I verify a Lion FileVault recovery key?

I have a volume that is encrypted with OS X Lion's full-disk FileVault. When I enabled FileVault I was given a recovery key, which I wrote down. I'd like to verify that the recovery key that I wrote ...
1
vote
1answer
85 views

Are there any security vulnerabilities that would allow an attacker to change the admin password?

A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured ...
2
votes
3answers
656 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this all ...
6
votes
1answer
727 views

Is it possible that some hacker is logged in to my computer?

When I type w at the terminal I see myself logged in two times. What are console and s000? Is it possible that one of these neos is actually somebody else?
4
votes
1answer
3k views

Suspicious NTPD Connection

I use Little Snitch on Mac OS X 10.6.8 and noticed a connection that seemed suspicious to me. The snitch reported ntpd trying to connect to: "$host 94.23.243.53 53.243.23.94.in-addr.arpa domain ...
77
votes
7answers
2.6m views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
0
votes
2answers
50 views

Which version of iOS is the May 12 security paper referring to?

Apple has published a paper on security controls in iOS, which specific version is this referring to?
15
votes
1answer
2k views

Should I make my primary user an Administrator or not?

For a long time, I have had two accounts on my Mac : an administrator account that I normally don't use, and a "normal user" that I use for day-to-day work. I did this because it should be more secure ...
5
votes
5answers
82k views

How do I examine my iPad for malware?

Lately I occasionally get redirected to other websites when I load some news websites. It could be a banner redirect I guess, but I suspect something more sinister. The iPad is NOT jailbroken and ...
4
votes
2answers
3k views

TPM chip on iPhone

Do Apple devices ship with a TPM chip? My Mac doesn't have a TPM chip, but does an iPhone have of a TPM chip or how do I determine if the iPhone has a TPM chip or not? On my Mac, I use this command to ...
23
votes
4answers
15k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
12
votes
2answers
26k views

My MacBook was stolen: can the thief access my files without my account password?

My computer is set up to require a login after its been put to sleep and it has a fairly complex password, so I'm not worried about anyone guessing it. The MacBook was stolen, and I'm wondering if ...
2
votes
3answers
2k views

Getting errors when trying to send something using Gmail and Mail 5

I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
1
vote
1answer
142 views

Is this a feasible security measure for my retail iPod Touches?

I'm considering using several iPod Touch devices as mobile computers in a retail setting. If I did do this, I'd have to provide some measure of security for them. I'm thinking of using the retail ...
2
votes
2answers
170 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
4answers
5k views

Can someone read messages on my locked iPhone?

I left my iPhone in a taxi cab. I locked the phone to make sure nobody finds it and makes expensive calls. But does locking the phone prevent someone from seeing the texts I am sending? What if the ...
1
vote
2answers
5k views

How to delete or untrust all root certificates in OSX?

In Keychain Access it looks like you can only untrust/delete certificates one at a time. But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time? ...
-1
votes
1answer
5k views

How do I allow a single IP to access everything on my Mac?

I tried IceFloor, but it's not working to white list all traffic from a single IP to bypass firewalls.
0
votes
1answer
326 views

Installing snort on OS X

I am on the lookout for an IDS/IPS solution for OS X 10.6. I tried compiling snort for 10.6 and I'm having trouble compiling a dependency, DAQ. The error I get is: mv -f .deps/daq_ipfw_la-daq_ipfw....
7
votes
2answers
2k views

Password protect MacBook while keeping iTunes running

So I want to prevent anyone from messing with iTunes, or anything on my MacBook actually. How can I password protect it without losing the sound?
2
votes
1answer
722 views

Forgot password to FileVault. Still got access to the machine

I just realized, that few months ago I converted my disk to FileVault. I am afraid of loosing access to my data. I still have access to the machine: login, password, administrator account. Is there ...
6
votes
2answers
4k views

Checking apps for a “GateKeeper” Developer ID?

Is there any way for a Mac user currently running Snow Leopard or Lion to check, maybe from the Terminal command-line, whether some application downloaded from the net was digitally signed with an ...
0
votes
1answer
896 views

How can I leave my wifi connection connected after logging the user out of the OS?

Lets say the WiF network uses LDAP to authenticate users with a user and password and the users login to the OS using the same LDAP credentials. Is there a way that this WiFi connection can be always ...
7
votes
2answers
3k views

Does activating auto-login compromise secure password storage?

or: Does enabling auto-login in OS X add any additional security risks? How does this auto-login work? I'm not a security expert, but I imagine that such a procedure would require the password to be ...
3
votes
1answer
152 views

Is my system vulnerable to Apple's new password-in-clear-text bug?

With the latest Lion security update, Mac OS X 10.7.3, Apple has accidentally turned on a debug log file outside of the encrypted area that stores the user’s password in clear text. How can I ...
3
votes
0answers
541 views

Turn off desktop screen/keyboard when connecting via VNC? [duplicate]

When I VNC into a remote OS X machine (e.g. my office machine), the remote screen is showing everything I'm doing. It also unlocks the screen so that if I'm not watching that screen, someone can use ...
1
vote
1answer
127 views

Web Start application management?

After the latest update Mac OS X Lion, I think that Apple disabled Java applications by default. When I try to run one, I get the following dialog: If I choose to "Enable" it, how would I disable it ...
10
votes
1answer
16k views

Is the lock screen PIN secure enough when sending in for repair?

The button on my wife's iPhone 4 has become unresponsive and I would like to get it repaired. Like most people, the phone contains important emails, documents and photos which she would not like to ...
2
votes
2answers
9k views

How do I get iTunes to take my security update info?

Recently, when attempting to make a purchase (or free download) on the App Store iTunes was requesting I update my security info. This is not the 3 digit code on my credit card, but the 3 security ...
4
votes
3answers
2k views

scheduled account lock Mac OS X

You can set your Mac OS X account to automatically lock the screen so that the password is required after a certain amount of time of inactivity, but can you do the same thing using a schedule (say at ...
3
votes
2answers
265 views

securityd goes nuts every 4 minutes & 30 seconds

securityd spams my console with the following : 19/04/2012 16:23:17.405 com.apple.securityd: Value of bTransmit: 00000001 repeated 563 times (after disabling the default mps_limit of 500). 4 ...
7
votes
2answers
3k views

Where to find the Mac OS X Lion security configuration guide?

Most Mac OS X releases have very nice security configuration guides, but Lion is not in the list. Is this document available somewhere else on Apple's site, or is there a roughly-equivalent document ...
7
votes
2answers
3k views

How would Find my iPod work on a locked iPod Touch?

In order for an iPod Touch (which has Find My iPod enabled) to let Apple's servers know where it is located (e.g. via Wi-Fi positioning), I believe it needs to transmit the location over Wi-Fi. Let's ...
2
votes
1answer
1k views

Hide/Block System Preference Panes?

I have just discovered that System Preference panes such as Mouse and Keyboard cannot be locked, this is a problem as one user could log in change the strings and then another user would log in and ...
3
votes
2answers
5k views

Adobe Reader Updater legitimate?

I just got the following popup: Is this a legitimate update from Adobe? The reason I'm concerned: The Flashback virus started off as a fake Adobe Flash update. The UI on the application does not ...