Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
0
votes
1answer
66 views

Two-way firewall (outbound/inbound protection) in macOS

Does macOS have a two-way firewall (outbound/inbound protection) present?
3
votes
2answers
57 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
1
vote
1answer
75 views

Weird Password/iCloud stuff going on - baffled. “This is impossible.”

I've had some weird stuff going on in the last few days. On Wednesday, I was listening to a Podcast on my iPhone. This one is rated "E" for explicit. I was about 5 minutes from the end, when I ...
0
votes
0answers
21 views

alternatives to keychain for storing keys on shared/managed device

I need to work on a shared/managed apple device (same user), but need to frequently use ssh, git or gnupg. I would like to prevent my keys to be stored on the device keychain besides probably being ...
5
votes
1answer
144 views

Is it safe to install a deprecated Java version?

I have an old version of Photoshop that requires an outdated Java runtime. "More info" takes me to this Apple support page where you can download the older JRE. Seems reasonable enough, but I am ...
0
votes
2answers
85 views

My ex is a computer “expert”. Is he using administrative privileges to remotely control/limit use of my computer?

My Ex knows a lot about computers - I know nothing about the hardware and infrastructure... I bought my own personal MacBookAir for my private use only. I'm not able to change some settings or be the ...
-1
votes
1answer
179 views

What's the oldest MacBook Pro that has the Meltdown/Spectre patches?

I currently have a 2014 MacBook Pro, but it needs to go in for service and, rather than renting one for a week, I was thinking of buying a cheap backup (maybe from 2011 or 2012). What is the oldest ...
0
votes
0answers
200 views

How to disable CoreAnalytics (system diagnostics mechanism) used by forensics investigators

From I Know What You Did Last Month: A New Artifact of Execution on macOS 10.13 Analysts that perform macOS forensics have had few, if any, artifacts of program execution to rely on during ...
5
votes
1answer
2k views

How to revoke permission given in System Prefs > Security & Privacy > 'Allow'

I recently installed a particular application that required me to go to System Preferences > Security and Privacy > General, and then give it permission by clicking the Allow that had shown up ...
13
votes
1answer
7k views

What and how does macOS Mojave implement to restrict applications access to personal data?

As well as many of the other features talked about during macOS Mojave's release like dark mode and the addition of new apps like Home, another key feature of macOS Mojave seems to be it's heightened ...
4
votes
1answer
321 views

Secure iPhone data whilst getting repaired

I've got to give my iPhone to a 3rd party repair shop to get a smashed screen replaced. The official Apple store is too far away, and the wait time is too long. My iPhone is running the latest iOS 11....
4
votes
1answer
75 views

Any way to tell apart macOS versions by the login screen or lock screen?

Is there any way to tell apart macOS versions by quick or close inspection of the login screen or lock screen? Knowing this would speed up macOS identification if (for example, only High Sierra shows ...
2
votes
2answers
571 views

Current Known Vulnerabilities

I have been tasked with something at work. We are an all Mac shop and I have been asked to provide a list of all "current" known vulnerabilities for Mac OSX. So in other words, if my mac is running ...
1
vote
0answers
48 views

MacOS Secure Boot compatible with PrivilegedHelperTools

2018 versions of iMacPro and MacBookPro have a new feature called Secure Boot. I'm reading reports of other apps & utilities that are potentially broken because of it, so I was wondering if ...
3
votes
1answer
456 views

how to check integrity of recovery partition?

I recently reinstalled Yosemite from the computer's recovery image. I'd like to be able to check the integrity of that image (i.e. shasum /Applications/Install*OS*.app/Contents/SharedSupport/{Base,...
1
vote
0answers
161 views

How can I get the value of the “Require password X after sleep or screensaver begins” from Terminal, on High Sierra?

My company is tracking various security settings of our users. For most of them we're able to use a simple terminal command, but for the Require password after sleep" setting I couldn't find anything....
4
votes
1answer
3k views

How does APFS encryption work?

I recently upgraded my 2013 MBP to High Sierra. This changed my unencrypted file system to encrypted APFS. Does Apple provide any information about how APFS encryption works? Does the account ...
3
votes
2answers
798 views

Whole disk encryption. How can the kernel be encrypted?

A standard pitfall of disk encryption on Linux is needing /boot unencrypted. Specifically the bootloader and initrd. Encrypting the entire disk means putting those somewhere else, e.g. on a USB stick. ...
4
votes
0answers
522 views

Is there a way to fix, or disable, secure input?

After a MacOS update last week, Secure Input has started blocking advanced keyboard shortcuts in Alfred, BetterTouchTool, and even my Logitech mouse options. I have repeatedly tried to quit the ...
0
votes
1answer
270 views

How to Disable USB 3.0 and USB 2.0 while keeping USB 1.0/1.1 on Mac Mini?

Is it possible to disable both USB 3.0 and USB 2.0 support, while keeping USB 1.0/1.1 support, on my 2012 Mac Mini, under OS X 10.13 High Sierra? Perhaps by removing certain kernel drivers while ...
2
votes
1answer
74 views

Is the used vulnerability closed after a jailbreak?

If a vulnerability is used to jailbreak an iPhone or iPad, is that vulnerability typically closed/fixed as part of the jailbreak (itself, or a recommended next step) ? In other words: if a new ...
0
votes
0answers
97 views

Zoom.us Installer bypassing security

Has anyone else experienced this with any app install, or with the Zoom.us installer specifically? Normally, when you start an installer for an application in a Mac, it will go through the steps of ...
1
vote
3answers
8k views

Can an iPad get hacked from outside?

Can someone get into my iPad, access my camera and turn on the webcam and record without my knowledge? I got an email that said they did.
0
votes
1answer
1k views

App to lock my iPhone for some time [closed]

I already asked a similar question sometime ago (though that was focused on free apps) and the answers were negative, but I've done some research and it seems there could be a way. Basically, I’m ...
2
votes
1answer
32 views

How to disable user account creation?

What is the process (if any) for disabling other users ability to create local accounts on a macOS device (including local administrators)? An alternative would be also to disable local administrators ...
0
votes
1answer
24 views

keychain security in a managed device (AD)

When using a managed device (Active directory) behind, what security measures are recommended to take in order to secure sensitive data like stored passwords, directories or the keychain itself? The ...
5
votes
1answer
76 views

How do I identify adware when browsing Apple's App Store?

I'm new to iOS and setting up a new iPhone. Can someone please explain how to avoid adware when choosing apps in the App Store? I will not install adware on my devices, and I'm happy to pay for apps ...
0
votes
0answers
42 views

Think my Dad may have just downloaded the Apple Security Malware

My dad doesn't use a Virus checker (doesnt disable Java either and isn't running the latest OSX) and just appears to have fallen for the Apple Security malware popup (looked and sounded something like ...
2
votes
1answer
125 views

2 Factor auth on multiple devices

I've setup 2 Factor auth on all my apple devices (iMac, MacBook Air, iPhone, iPad Pro) but it doesn't work how I would expect and isn't like other services like Digital Ocean, CloudFlare etc. For ...
3
votes
1answer
126 views

How do system services modify protected directories with system integrity protection

I am running macOS High Sierra. I was wondering how system services (e.g. Time Machine with the protected backup directories) could modify the directories that root cannot access. I was trying to ...
0
votes
1answer
484 views

System Keychain Certs Import fail with UNIX[Operation not permitted]

I'm trying to add certs to my System keychain, which failed in the Keychain Access utility with a ERROR 10001 -- an unhelpful error message -- so I tried to run it in the terminal: $sudo security ...
-2
votes
1answer
27 views

I did not make this purcase [closed]

I received an email yesterday that said APP Store Receipt. Diamond Mobile Legends Price $100 (5000 Diamonds) I did not make this purchase. Please cancel this or contact me for next step.
6
votes
4answers
3k views

How to identify extensions blocked by Gatekeeper

In macOS High Sierra, System Prefs > Security, it says "Some system software was blocked from loading. I see a list there of three developers, and I don't recognize all of them. I'm guessing these ...
1
vote
1answer
43 views

Is Safari allowing extensions to be installed by stray clicks in a web page?

Sometimes when I go to visit my parents, they ask me to fix their Macbook because something is wrong with Safari. The find that there is an extension installed and that it has set the home page in the ...
7
votes
3answers
838 views

How do I use a U2F token when adding a Google account to my Macbook Pro

I'm enrolled in Google's Advanced Protection Program, which means I can only authenticate with a physical FIDO U2F token on every sign-in. Trouble is, that when I try using my Google account, I see "...
40
votes
4answers
35k views

A software update is required to connect to your iOS device / iPhone

On my mac I've recently updated to the latest macOS version 10.13.5 and have installed Xcode 10 (beta 1). For my iPhone X there is an update available to 11.4 but i didn't install that yet. Now there ...
1
vote
0answers
133 views

Touch ID when “Sublime Text wants to make changes” [duplicate]

I figured out how to use Touch ID for some changes. But when I edit /etc/hosts with my Sublime Text, I still get this window: How can I use Touch ID for messages like this? 😀
1
vote
1answer
313 views

iPassword backup through unsecured network

I am using the iPassword app on iPhone to store some less and medium important passwords to websites and emails. I have made probably a silly mistake. I was in the hotel and was using an unsecured ...
1
vote
0answers
755 views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
3
votes
2answers
208 views

Why would Preview “want to use” my (unused) login Keychain just to execute hotkeys?

I've asked the related question in security SE: Why does not updating a MacOS keychain password cause applications to become troublesome? and the answer there explains that keychain is used by various ...
7
votes
2answers
13k views

Is winebottler safe to install?

I've been missing Notepad++ since changing from Windows to macOS and there's an article that says if I use WineBottler (that's the only thing I miss), it should run. WineBottler packages Windows-...
0
votes
1answer
752 views

How do I use 'security set-keychain-settings' to prevent locking?

The command line tool security set-keychain-settings provides options for locking when the system sleeps (-l) and locking after a timeout (-u) but does not seem to provide any options for reversing ...
6
votes
1answer
1k views

How do I prevent “Local Items” Keychain from locking?

My "Local Items" keychain keeps locking and I can't figure out how to prevent it from doing so. As near as I can tell it locks when my Mac sleeps (which I want) and also after a very short timeout (...
2
votes
0answers
176 views

Best brute-force prevention for Mac OS X 10.13 High Sierra

I am planning to open up port 22 on my router to my iMac so I can login remotely. Login is required and allowed for only the admin user. The password is very secure--over 30 characters long. I'm not ...
0
votes
1answer
65 views

How to find if a USB has been plugged in on a certain date? [duplicate]

Starting from this great script offered by Daniel Azuelos cd /Volumes/suspicious_USB /usr/bin/sudo find . -atime -21 -exec ls -dluT {} \; How is it possible to modify it in order to find if a USB ...
1
vote
0answers
31 views

How to reset an authorization rule?

I was using gdb recently on my Mac and I was annoyed with the incessant popup which always shows up when I try to use gdb: I read on StackOverflow that you can make this popup go away with the ...
1
vote
1answer
42 views

Do Apple's application crash/hang reports contain confidential info.?

When an application hangs, and I force-quit it, my system typically generates a long report, and invites me to send that report to Apple. My question is this: Does this report contain any ...
0
votes
1answer
9k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
70
votes
5answers
20k views

A tech from MacKeeper wishes access to my computer for licensing and activation. Is this a scam?

I paid for a version of MacKeeper which may be a mistake. Their tech wants me to allow them to access my computer as in have access to my desktop files, etc. They say it is to fully license and ...
0
votes
1answer
691 views

Will installing XtraFinder make my system vulnerable? [duplicate]

I am tempted to install XtraFinder on my mac because of all the features it provides but am worried that it may leave my system vulnerable to a security breach. The installation dialog box says the ...