Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
2
votes
0answers
132 views

Encrypted disk in Windows 10, unreadable by macOS

I encrypted by external HDD with exFAT format using VeraCrypt on a windows machine. When I plug in the encrypted disk into MacBook (running macOS Mojave), I get the error "the disk you inserted was ...
1
vote
2answers
403 views

Why can other users see my files in MY user folder?

This is a screenshot of my private folders/files inside my user folder, but seen from a different user on my MacBook. Several folders are basically openly accessable for everybody, even when created ...
1
vote
1answer
38 views

Wifi much slower after security software download

I recently downloaded a vpn and security software (Avast security and windscribe vpn), but my wifi dropped significantly from about 150 mb/s to ~50 mb/s, sometimes much slower. Even after I deleted ...
4
votes
3answers
146 views

When and by who was a password changed

I have created a specific account on my Mac (called skype) to use with risky software, Skype. This account is a standard account. Since I didn't want to use this account very often, I saved its ...
4
votes
1answer
328 views

Will data be lost in resetting macOS admin password?

My GF recently started working with a Mac and while I'm a IT tech with Linux and Windows knowledge, I'm very much a noob with Macs. The problem is she's working on a Mac that another user (the guy ...
3
votes
1answer
127 views

Can I lock iCloud System Preference pane?

Here is the scenario. Say I have a Mac that I have to leave in a semi publicly accessible location and which I need to be awake at all times (i.e. it has to be accessible and not asleep/locked). I ...
5
votes
2answers
521 views

The account does not exist in bugreport.apple.com

I am about to file a bug, but I can not login... When I open the url https://bugreport.apple.com, It asks me to login. OK, I tried my three different AppleIDs, and all of them give me the same error ...
0
votes
1answer
127 views

Prevent admin/Jamf Pro from accessing/deleting 2nd partition

The company I work for wants to install Jamf Pro on my "work" Macbook. I want to create a 2nd partition on my Macintosh HD (with its own Mac OS version) for personal use. If Jamf Pro is installed on ...
1
vote
1answer
323 views

External drive APFS encryption secure?

I just erased a newly purchased external USB disk using the Disk Utility program and set it to use the file system APFS Encrypted. I entered a strong password and the whole process took about a minute,...
4
votes
2answers
98 views

Is it safe to still use an iPhone 4?

I've received an iPhone 4 for free and I would like to use it. Last iOS version available is iOS 7.1.2 released on June 30, 2014 which is now unsupported. My questions are: Is there some known ...
5
votes
0answers
826 views

How can I troubleshoot Security & Privacy issues with Mojave?

Mojave has expanded macOS's sandboxing rules for files and devices. When an application needs to use the camera or microphone, the user is supposed to get a prompt the first time to authorize it. ...
3
votes
2answers
2k views

Shady password required for Update Apple ID Settings

My iPhone (under iOS 12.1) informs me that I should "Update Apple ID Settings" for otherwise "Some account services will not be available until [I] sign in again." When I launch Settings > Update ...
1
vote
1answer
136 views

Disable ECDSA SSH Host keys

I would like to disable ECDSA SSH host keys. I deleted the existing keys: $ sudo rm -f /etc/ssh/ssh_host_ecdsa_key* I uncomment ECDSA in /etc/ssh/sshd_config $ grep -i ecdsa /etc/ssh/sshd_config #...
1
vote
0answers
75 views

OS X Find my iPhone logs

How to check "Find my iPhone" start/stop logs? Thanks. The service was strangely disabled. I already checked some logs through the system Console App.
1
vote
0answers
15 views

Mac Pro 2012 Memory failure after security update

I'm running Sierra on a Mac Pro 5,1. I've got 48GB (6x 8GB) of RAM and after updating to the last security update I've got a RAM conflict, I've swapped some modules position and I could get just 32GB ...
0
votes
1answer
20 views

Can't update boot security on new Macbook Pro

I am trying to boot from an external device and it is asking for an administrator password. The machine is new and didn't have a password so I created an admin password and it still won't allow me to ...
0
votes
1answer
99 views

Can I rename the “Pictures” folder without “Full Disk Access”?

Our application needs write access to the user's Home directory, specifically to Pictures, Movies, Music, etc., so it can redirect them to our cloud support. But, on Mojave, renaming Pictures (to some ...
1
vote
0answers
39 views

Exclude admin user from global password policy

I have added a global password policy which enforces password rotation for every 90 days. But there are two types of accounts: User Accounts - Enable Password rotation for 90 days Admin Accounts - No ...
0
votes
0answers
229 views

Mojave 10.14.1 software update bypassing password

I have my setting to 'Automatic login' disabled. The 10.14.1 software update, ended up in the desktop, without going through the locked password screen. Since this is the first update through the ...
0
votes
2answers
361 views

Are Macs vulnerable to the recent SSD encryption vulnerability?

It was recently discovered that the hardware encryption of many SSDs is completely broken and cannot be trusted at all. Can this affect Macs? Does MacOS trust the hardware encryption of the SSD ...
1
vote
0answers
38 views

Can I avoid phishing messages using sender ID to fool me?

I've just received a phishing message on my iPhone that uses a fake sender ID of "Qantas". The message appears alongside legitimate messages coming from Qantas. The scam is described by Qantas on ...
0
votes
1answer
38 views

Unfamiliar prompt when inserting new prepaid SIM card into iPhone in China

While visiting Shenzhen, China yesterday as a tourist I acquired a prepaid +86 SIM card from China Unicom. Everything seemed to work out fine, but I am wondering about one observation: When the sales ...
1
vote
1answer
803 views

In VPN setup, what is difference between IKEv2, L2TP and IPSec?

When manually configuring VPN, the type can be set to either "IKEv2", "IPSec" or "L2TP". However, as I understand it "L2TP" use "IPSec" for encryption and "IKEv1" for authentication, so it find the ...
1
vote
0answers
115 views

Updating to security update 2008-002 10.13.6 gives error 602

I get an error 602 when I try to run this update. I have had this in the past and resolved it by turning off automatic proxy configuration but that does not help in this case. Running it in safe mode ...
2
votes
2answers
1k views

“SIMBLAgent.app“ wants access to control

I updated to Mojave yesterday and since then I get so many windows prompting up with the message “SIMBLAgent.app“ wants access to control... and I can get rid of all those windows comming. Someone ...
5
votes
1answer
81 views

What is this security feature called?

What is this "System software from developers" security feature called and where can I find the technical details for how it works with applications (like AVG)? I believe this is a kernel extension, ...
1
vote
1answer
795 views

localhost redirecting to https after Mojave upgrade [duplicate]

After the recent upgrade to macOS Mojave Safari started redirecting from http://localhost to https://localhost. The problem persists only in Safari, in Chrome everything is the same as before. Now I'm ...
2
votes
1answer
240 views

Use security to get a list of Keys in Keychain based on type?

I'm successfully using security to fetch keys from my Keychain via their label, e.g.: security find-generic-password -l "PDF Encryption" However, I'm trying to build a UI that offers me a CHOICE of ...
4
votes
1answer
392 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
3
votes
1answer
73 views

How to check which process took a desktop screenshot on macOS?

I heard a shutter sound when pressing the ▼ (down arrow) key on (lock screen) login page. I heard it again 10min after login, when using the same key again. And then heard it no more, even when ...
1
vote
1answer
297 views

How to debug malware popups in Safari

Around once a day a new tab opens in the background and automatically starts downloading some probably scam software disguised as a "flash player". I tried to fix it doing the things recommended ...
0
votes
0answers
39 views

What is password recoverable in RADIUS server (related to upgrade to macOS 10.14)

I am thinking about migrating from maOS Server to a dedicated opensource RADIUS server. In their Service Migration Guide Apple states the following: "Converting to the open source version allows ...
0
votes
0answers
24 views

Security warning related to frames appears when surfing the internet

I changed my computer password yesterday and now when using the internet I often get a security warning related to frames. I don't know what frame it is referring to since I'm not sure what they are ...
2
votes
3answers
734 views

How can I remove Applications from Security & Privacy?

Is it possible to completely remove Terminal and Chrome from the Privacy tab here?
2
votes
4answers
7k views

Cannot add any apps to Security & Privacy preferences on Mojave

I recently updated my Mac to Mojave. I have several apps (e.g. Dropbox, Backblaze, Stay) that require specific permissions that can be granted via System Preferences > Security & Privacy > ...
12
votes
2answers
21k views

Someone in China tried to log into my AppleID account. What should I do?

I am a US citizen who volunteers for a human rights organization and noticed my iCloud account had a login attempt by someone in Nanchang, China I'm not sure if I should fear of my personal safety, ...
6
votes
2answers
2k views

Do the chips in 2018 Macbook Pros have fixes for Spectre and Meltdown?

I know there are software fixes in macOS, but I want to know when the hardware is fixed. I'd like to buy a new Macbook Pro, but only after the hardware is completely fixed. The 2018 Macbook Pros have ...
1
vote
1answer
35 views

Is there a way to validate that an apple update is legitimate?

I have reason to suspect that somebody may have had unauthorized access to my computer. I've just reset my copy of OS X from the recovery partition. Afterwards, I was prompted twice to update my OS ...
2
votes
1answer
655 views

Access to ~/Library/Containers/com.apple.mail/Data/ denied

Since installing Mojave, I can no longer access ~/Library/Containers/com.apple.mail/Data/: pse@Mithos:~$ ll ~/Library/Containers/com.apple.mail/Data/ ls: DataVaults: Operation not permitted I've ...
2
votes
1answer
965 views

Stop password characters from being shown

When I type in a password in iOS 11.4.1, the last entered character is shown only for a split second. For security reasons, I do not want the characters to get echoed. How do I disable this split ...
0
votes
1answer
832 views

“A recovery key has been set” but remains invisible with macOS FileVault

I have just turned on FileFault on macOS High Sierra with option "Allow my iCloud account to unlock my disk." While encryption is running, macOS informs me that "A recovery key has been set". Is it ...
2
votes
2answers
59 views

How can I remove the “downloaded from the internet” security from all files in a directory?

I have a bunch of files I copied from another computer and am unable to use them as I get various security and permission errors. When I compile using Xamarin I get permission denied. When I try to ...
2
votes
2answers
99 views

Get password prompt in the terminal/shell

When I am connecting a Mac through ssh, I don't have any GUI. However, for some of the commands like security find-internet-password, there will be a GUI prompt for the admin's password. How can I ...
0
votes
1answer
18 views

Recover obscured pixels

If I screenshot something on my phone and scribble out the text: Is it possible to get the text back? Are there computer programs that can analyse that jpg to see what’s under the scribble.
2
votes
1answer
372 views

Shove installed a launch daemon or agent popup window, what is it?

Please check the following screenshot: Today, I suddenly have this popup window warning. I have no idea what it is. Basically I have three questions. (1) Is this BlockBlock app warning? I have no ...
-3
votes
2answers
148 views

How to get notified for malware from the Mac AppStore?

Apple has distributed malware through its AppStore, again. Just one example: The Price of Free Software: Trend Micro’s apps exfiltrate your browser history and Mac App Store apps are stealing user ...
1
vote
1answer
74 views

How can I reconfigure my PF.conf to be more secure

I want to make my computer more secure and a part of it I want to do with reconfiguring my PF firewall. How can I reconfigure my PF.conf to be more secure? I made a github repo where I posted my ...
1
vote
0answers
253 views

How can I block all ports with PF except port 80 and 443?

How can I block/close (or drop all the packets coming from) all ports with PF except TCP port 80 and TCP 443? So I only want to make use of port 80 and 443 via TCP. I tried this, but I receive an ...
0
votes
2answers
345 views

Firewall on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n

The firewall is on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n. How is that possible? jen:~ jen$ sudo pfctl -t blockedips -T show Password: No ALTQ support in kernel ALTQ ...
1
vote
3answers
1k views

How do I prevented the hackers (secret intel) manipulating my terminal again [closed]

How do I prevented the hackers manipulating my terminal again so that my terminal works correct again? Here in the Netherlands we perform cybertest at the company where we work and the attacks are ...