Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
1
vote
1answer
942 views

I don't have administrator account anymore - macOS 10.13.4 [duplicate]

I tried the answers on the similar previous question but nothing worked. Obviously Apple removed the critical file .AppleSetupDone in the last Security Update. Is there anybody who could help getting ...
6
votes
2answers
2k views

Where does Apple App Store download security updates to?

My problem is that my internet speed to Apple's server is very slow, and I have 6 devices running macOS so I like to download security updates or system updates only once for all 6 of my devices. I ...
4
votes
0answers
638 views

Is there a way to disable Safari CSP (Content Security Policy) check?

Seems like Safari has a very strong restriction on Content Security Policy (CSP). For example, on GitHub, most of the userscripts and extensions don't work because of it. I get errors such as this ...
1
vote
1answer
1k views

Allow m3u files to be edited in TextEdit, saved, and used without a “is damaged and can't be opened” message

I am using OS X El Capitan. I edit the .m3u files that are playlists with TextEdit. After editing and trying to play the playlist files I receive the "is damaged and can't be opened" message. I can ...
1
vote
0answers
3k views

osx require password after sleep greyed out [duplicate]

I don't have the option to change the delay on "require password xx after sleep or screen saver begins. For security, I would like to change it to "immediately" instead of 5 seconds. I obviously ...
1
vote
0answers
47 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
1answer
53 views

Would it be safe to use Ubuntu on an unsupported Mac?

I run OS X El Capitan on a Unibody MBP 13-inch mid-2009 and support for El Capitan is likely going to run out in fall, so as El Capitan is the last OSX update supported for my MBP, I will stop using ...
1
vote
1answer
40 views

Protect data while laptop is at repair shop

I've got to give my computer (mid 2012 MBP, 15", running OSX 10.10) to a repair shop (not Apple store, but Apple authorised) for them to replace the battery. My concern is that someone at the repair ...
0
votes
0answers
28 views

Where can I get a small form factor security cables similar to the one that Apple Stores use for their iPhone?

I notice that iPhone antitheft cables that attach on the back side all take up a huge space on the back of the phone. Are there small form factor ones? Is there a way to get the Apple Store sized ...
3
votes
1answer
5k views

What security preferences are blocking McAfee?

I changed some of my Macbook's security settings today. I also updated to the latest version of High Sierra (10.13.4) shortly before changing my security settings. Shortly thereafter, I got the ...
3
votes
1answer
152 views

Does the iPhone X use facial recognition hardware?

Does the iPhone X use Facial Recognition hardware not found in previous models? Or is the algorithm executed on the CPU?
4
votes
1answer
2k views

Safari stopped auto-filling saved password data, any 'fix'?

Yet another marvellous new 'feature' - Safari 11.1 now will not auto-fill any login data unless you specifically click the first field, select the login drop menu, select the login.... Is there any ...
0
votes
1answer
605 views

Are Apple Remote Desktop connections encrypted?

Is the data transmitted between two machines during an Apple Remote Desktop session encrypted? E.g. the login password, the actual screenshare, the text typed etc.?
8
votes
3answers
3k views

How does macOS identify the signing status of an app downloaded from the Internet?

I downloaded an app from the Internet using Safari. Upon executing it, macOS notifies that the app is from an unidentified developer. How is macOS able to determine this information? Where is the ...
2
votes
1answer
491 views

How can I prevent my Apple ID account from being recovered using a trusted phone number?

In the Security section of my Apple ID account page (https://appleid.apple.com/account/manage), I have a “Trusted phone number”. The help text says: Trusted phone numbers are used [...] to recover ...
3
votes
2answers
127 views

Windows to Mac database connection intermittently available after Windows Security prompt

I am trying to connect from a Windows 10 computer to a Firebird database server (port 3050) running on a Mac. This has been working fine until recently. I now only get intermittent access in a ...
1
vote
2answers
3k views

Did someone copy files from my Mac?

I was away from my MacBook Air (Yosemite) briefly and suspected that someone had copied files from my Mac. Here is what I can see from the system.log under console /var/log. Could some experts ...
1
vote
1answer
594 views

Is there a way to filter MAC addresses on an iPhone hotspot?

I am using an iPhone 7 as a Personal Hotspot. Every now and then, the line at the top of the screen which says how many connections there are goes up. I don't know if someone else is accessing the ...
1
vote
1answer
382 views

pf.conf to block *only* a specific IP address when VPN is not connected

I'm trying to configure a packet filter firewall to block access to a small range of IP addresses when a VPN is not connected. My rules should allow https/http traffic apart from this small, specific ...
1
vote
1answer
127 views

Malware and Viruses on Mac [closed]

In most of the places, the Mac computers are protected against the malware and viruses, but not all of them. This means that even Mac computers may be infected with these dangerous things. How can we ...
2
votes
2answers
463 views

How to remove security notifications about unapproved software after upgrading to macos High Sierra?

Upgrading to High Sierra is really painful. I cannot do brew upgrade, I am getting thousands of security notifications - see the attached file. There are some recipes in Internet but they are not ...
1
vote
2answers
442 views

Apple and iCloud encryption keys

A friend of mine was arguing that Apple’s staunch pro-privacy and pro-security branding is disingenuous since they hold iCloud encryption keys. To what extent is this true or an oversimplification?
4
votes
1answer
91 views

Do iPhones use active scanning to find Wi-Fi networks when Ask to Join Networks is off?

I'm looking into security holes in my daily life, and I ran across an article that says that most devices broadcast their MAC address continuously. I'm wondering if that applies to iPhones (and other ...
1
vote
1answer
238 views

Securely allow SSH from Parallels to Host MacOS w/o risking Network threats?

I want to enable SSH on OSX from only my Parallels VM. My fear is that by opening SSH I'm putting my host OS at risk for remote exploitation. How can I configure MacOS to only allow connections ...
2
votes
1answer
2k views

Is there a way to configure password auto-generation in Safari?

Is there a way to change the auto-generated passwords Safari generates? Sometimes, websites don't allow long passwords, and sometimes they don't accept the dash symbol as a valid symbol, and in those ...
0
votes
1answer
40 views

How do I put an HTML page to be displayed when opening a website from hosts file?

Hosts file is blocking access to some websites. How do i put custom HTML instead of default message "This site can’t be reached"?
0
votes
1answer
1k views

How to change configure system.log file in macOS?

This is my first time to using a Mac, some macOS settings need to edit due to Security Audit. We are using macOS 10.9 to 10.12 version in 10 of iMac, we’ve had an problem is how to keep long time ...
2
votes
1answer
515 views

How does apple verify my list of trusted devices and browsers?

When I logged in to icloud for the first time on my windows pc, my iphone made a loud notification sound and a message saying that another device has just attempted to log in to my icloud account ...
1
vote
1answer
123 views

Somebody with chinese username (hacker?) writes files into folder “users”, what's going on?

I'm the single user of my personal MacBook (macOS High Sierra 10.13.3 (17D102)), using it only inside my single apartment, not inside a network, not connected to anything beside my router, and a user ...
2
votes
1answer
2k views

How can I tell if a Wi-Fi hotspot is WPA or WPA2?

I want to print out a QR code for a Wi-Fi hotspot, so other people can easily connect to it with their iPhones and such, and the QR-code-maker has me choose between "WPA" and "WPA2". How do I find ...
2
votes
1answer
500 views

Is encrypting then deleting the same as securely erasing?

So, recent versions of macOS no longer offer the option to Empty Trash Securely. From what I am reading here and here it seems the general consensus is that it is now best to encrypt files and then ...
1
vote
1answer
1k views

How is the /AppleInternal directory hidden from users on macOS? [closed]

If you didn't know macOS has a well hidden directory called "/AppleInternal" that is pretty secretive. It's not possible to ls or rm it and I've never seen it referenced before with anything other ...
0
votes
1answer
118 views

Copying data in recovery mode - is this a security flaw?

My Mac crashed, operating system error, tried reinstalling OS, no luck.... anyway I need to do a fresh install so I am copying my data off the machine using command line and recovery mode. My ...
2
votes
1answer
275 views

Does Apple push updates that require a restart within a set timeframe?

Just got this notification on my MacBook Pro running OS 10.12.6. It reads: macOS updates have been installed. This computer will restart in 60 minutes. Please save anything you are working on ...
1
vote
1answer
409 views

Security implications of Lock Screen vs. Sleep vs. Log Out vs. Shut Down for physical access

I have a MacBook Pro with full disk encryption. I'd like to secure my information from someone who steals my computer or has physical access to it while it's unattended. Are any of these methods more ...
1
vote
1answer
2k views

Can an 'incorrect password lockout' be set?

I administer seven Macs running a range of OS X 10.10 to macOS 10.13. The machine I use to administer them is running OS X 10.10. All of the users are Standard accounts, with one Admin account which ...
2
votes
1answer
98 views

Is there a log-in log on macOS?

I'm suspecting a roommate somehow got my password, and I want to confirm this hypothesis. Is there a log that keeps track of successful and failed log-ins? PS: I tried using the wake reasons log, but ...
2
votes
1answer
191 views

iPhone application for TOTP that uses Secure Enclave to store secrets?

Is there an iPhone application for TOTP that uses the Secure Enclave to store the keys? Some popular TOTP applications for iPhone are FreeOTP, Authy and Google Authenticator, but it is not clear if ...
4
votes
1answer
673 views

Transfer FreeOTP secrets to new device using iOS 11 Automatic Setup

The FreeOTP application is typically used as a second factor in two-factor authentication. By design, it does not synchronize the secrets over iCloud or allow exporting them. The only way to get ...
1
vote
1answer
301 views

Server.app and importing a Let's Encrypt Certificate

I have generated a Let's Encrypt certificate for the subdomain I use for the profile manager website. I have exported the certificate and imported it into the Server app. I got the following ...
2
votes
2answers
1k views

What are the physical anti-theft protection for MacBook Pro (2015 Retina)

Since the slot for Kensington cables has been removed from the MacBook Pro Retina: what are the possibility to physically protect a MacBook Pro (2015 and 15 inch model) against thieves? The goal is ...
2
votes
1answer
533 views

Can't prevent Preview from permitting copying content with Adobe Acrobat document security

I create educational products and sell at an online marketplace. I buy clipart and use this. I create using Pages on my Mac, I then press Print, PDF, open in Preview, grab the thumbnail and combine ...
1
vote
1answer
86 views

How does iOS app Badoo tracks second registrations?

I've got a message from support that I cannot use the service anymore, and if I register a new profile they will automatically track it and block it. As I read from Uber's case it's forbidden by Apple ...
2
votes
1answer
282 views

Changing password of admin account from inside the root (superadmin) account

I forgot the password of my admin account on my MacBook, although I still remember the password of the root account. Is there a way to change the password of an admin account from within the root ...
1
vote
1answer
340 views

How to unlock Mac password?

I got a MacBook Pro (macOS 12.10.1) from my friend who I can't contact anymore, and here's the deal. It has only one administrator account with a login password (Which I don't know) It has FileVault ...
3
votes
1answer
100 views

Management of security questions in AppleID authentication

I have my AppleID, password and access to the email account registered to the ID. But I don't have the answers to the security questions. I have not used the account since it was set up in 2014 and I'...
3
votes
2answers
6k views

Is resetting iPhone to factory settings sufficiently secure to subsequently sell the phone?

I have an iPhone 6 I want to sell. I just reset all the settings and removed all the data using the iPhone 6 option in the general settings. The phone now says "Hello" as a new phone would. I don't ...
1
vote
1answer
52 views

Account password in keychain

Is it safe to store password from macOS account inside of any keychain? I think that if someone can access my keychain, then this someone can access anything on my macOS. Therefore it's safe to store ...
0
votes
1answer
50 views

Can one app read data from clipboard copied in another app

Let's say I'm working in application A and copy some sensitive data to clipboard. Can application B which is opened at the moment catch the information I've copied? Does OS X protect from such ...
0
votes
1answer
255 views

Add password to keychain from command line without showing them

According to https://www.netmeister.org/blog/keychain-passwords.html Secondly, we are necessarily leaking the newly generated password into the process table as the shell expands the backticks (...