Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

150 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
1answer
2k views

Does an iOS app have the ability to set iOS Safari cookies?

My specific interest is in the context of the Facebook for iOS app, but it can be asked of an iOS app really. Given all the recent changes to Facebook and the way that Facebook cookies are not ...
5
votes
0answers
808 views

How can I troubleshoot Security & Privacy issues with Mojave?

Mojave has expanded macOS's sandboxing rules for files and devices. When an application needs to use the camera or microphone, the user is supposed to get a prompt the first time to authorize it. ...
5
votes
0answers
638 views

How do I verify a certificate when installing it on iOS?

I am installing a self-created certificate authority SSL cert onto a modern (iOS-9.3.2, iPod6) iOS device. It is self-signed and obtained over an untrusted transport. In normal, e.g. desktop, ...
5
votes
0answers
3k views

“The L2TP-VPN server did not respond” on OS X Yosemite

I have a problem with VPN connection on OS X Yosemite I imported certificates, set them "Always trust" policy and created connection (I set User authentication: Password, Machine authentication: ...
5
votes
0answers
100 views

Block external storage for a user account

I am doing a proposal for new network where the Macs will be networked, OS X Mavericks + server app Is there any solution to disable external storage USB/Thunderbolt/Firewire/CD/ Bluetooth? ...
5
votes
1answer
590 views

Why is Safari asking for local items keychain?

Recently, after opening safari on my macbook air, it began asking for the password to my local items keychain. Immediately this raises a red flag, as this never happened before and seems not entirely ...
5
votes
1answer
2k views

What happens after a stolen Mac was remotely wiped?

A Macbook Air was stolen from us last month and we immediately activated "Find my Mac" and a few minutes later we requested it to be wiped (through iCloud). Today, 1 month later, we received an email ...
4
votes
0answers
522 views

Is there a way to fix, or disable, secure input?

After a MacOS update last week, Secure Input has started blocking advanced keyboard shortcuts in Alfred, BetterTouchTool, and even my Logitech mouse options. I have repeatedly tried to quit the ...
4
votes
0answers
638 views

Is there a way to disable Safari CSP (Content Security Policy) check?

Seems like Safari has a very strong restriction on Content Security Policy (CSP). For example, on GitHub, most of the userscripts and extensions don't work because of it. I get errors such as this ...
4
votes
0answers
495 views

Is there any way to temporarily accept website certificate that isn't trusted in Safari/High Sierra?

Is there any way to temporarily allow Safari to load a site with an untrusted website certificate in Safari/High Sierra? This was possible in Sierra. I marked several roots Untrusted due to their ...
4
votes
0answers
473 views

Does macOS keep a log of all access to the keychain?

I want to see which applications accessed my keychain of my Mac. Do know which apps have access and how often they do. Does macOS keep a log of that somewhere ?
3
votes
0answers
45 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
3
votes
0answers
532 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
3
votes
0answers
335 views

Local Items keychain: How to get rid of it?

How do I make macOS not use iCloud Keychain (or its sync area, Local Items, while iCloud KC is turned off)? Details: For various reasons, I don’t want to use iCloud Keychain. This seems to have ...
3
votes
0answers
26 views

Is there any way to decrease screensaver timeout every time my watch is moved away from the computer or phone?

Using the watch to unlock my Mac is a great feature, but I want the OS to shorten the idle time once the watch goes out of range. This way, if I'm wearing the watch, and I'm not facing the computer (...
3
votes
0answers
335 views

Search iCloud keychain for all accounts that use a specific password

I used one of those services that scans the internet for compromised passwords, and some passwords I recognized came up, and some that I didn't. In any case, I want to search my keychain for all ...
3
votes
0answers
727 views

Difficulty finding Internet passwords on keychain using terminal security command

I am trying retrieve an internet password from the keychain but I always get back: security: SecKeychainSearchCopyNext: The specified item could not be found in the keychain. ...despite the entry ...
3
votes
0answers
82 views

Does the installer give root privileges to applications?

I wish to avoid giving administrative privileges to applications that I do not completely trust. It seems like a reasonable design to me that if I install an application using a pkg file (or something ...
3
votes
0answers
913 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
3
votes
0answers
425 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
3
votes
0answers
256 views

Is there a PGP/GPG Plugin for TextWrangler?

Is there a PGP/GPG plugin for TextWrangler? If so, what is it called and how do I go about downloading and installing it?
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
54 views

Was my Macbook Pro remotely accessed?

I'm running Mojave on a Macbook Pro. A while ago, my screen started randomly scrolling down by itself while I was using Safari, and the problem persisted for a few seconds. The scrolling seemed almost ...
2
votes
1answer
16 views

How to create installable app with setuid bit set owned by root

I have inherited a codebase that needs updating, but I don't have the build scripts that created the final pkg file. The code needs to access a connected USB device (treated as a drive) to read and ...
2
votes
0answers
164 views

Create User via Terminal with Bash in macOS Mojave

In general, you can create a user via Terminal in macOS using Apple's documented method. However, macOS Mojave introduced various security mechanisms that cause scripts to fail when changing user ...
2
votes
0answers
30 views

macOS: Restricted admin account

Is it possible to create an admin account which will allow you to install programs, but not to force install programs that are not verified? In other words, an account that can do anything accept ...
2
votes
0answers
42 views

How can I securely erase an iPod Classic?

I have an iPod Classic 120GB model A1238 (Everymac.com) that I'd like to ebay. I discovered how to perform a restore both with and without a Mac. However, afterward my name still appears in the ...
2
votes
0answers
66 views

How can you force Applications that open Safari by default to honor the selected non-Safari default browser?

For example, when I use a specific VPN application, the authentication path opens the Safari browser, which cannot work with Yubikey. Is there a way to convince the application to use a different ...
2
votes
0answers
27 views

Can a website change Safari’s default search engine?

My child’s MacBook had it’s default search engine changed to Yahoo. I did not do this, my child did not intentionally do this. So I see two possibilities. My kid downloaded and excecuted an app ...
2
votes
0answers
128 views

Encrypted disk in Windows 10, unreadable by macOS

I encrypted by external HDD with exFAT format using VeraCrypt on a windows machine. When I plug in the encrypted disk into MacBook (running macOS Mojave), I get the error "the disk you inserted was ...
2
votes
0answers
176 views

Best brute-force prevention for Mac OS X 10.13 High Sierra

I am planning to open up port 22 on my router to my iMac so I can login remotely. Login is required and allowed for only the admin user. The password is very secure--over 30 characters long. I'm not ...
2
votes
0answers
75 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...
2
votes
0answers
32 views

How can I share a folder on MacOS, and not allow an attacker to brute force my accounts?

I want to share a folder between my MacBook Pros while connected to home wifi, and not risk security while traveling with the laptop. I'm particularly concerned about a brute force attack that can be ...
2
votes
0answers
486 views

Command line reading of screen lock timeout preferences

I'm writing a script to check for security compliance on a number of computers and wanted to verify that the user has set the computer to require a password immediately after sleep or screensaver. ...
2
votes
0answers
50 views

Everything synced by iCloud

I want to know each and every core files my Mac sync with iCloud even the hidden files which one normally can't edit. I want to know what are other things iCloud sync except the items that are ...
2
votes
0answers
517 views

How to prevent separate Google iPhone apps from auto sign-in (sandbox?)

I signed into the Google Mail app with my Google account. I saw that Google Maps app automatically signed me in. I never gave Google Maps my account credentials. How can I prevent this? Are apps not ...
2
votes
0answers
598 views

How to find if someone logged into my iPhone

I suspect that someone has logged on my iPhone (physical access, with my code) Is there a report of all connections with the hours that can be found on the iPhone so I can confirm my suspicions? If ...
2
votes
0answers
734 views

“securityd: keychain reference in server mode” in console

I am experiencing a strange issue when starting Adobe Creative Cloud 2017.3 applications (Photoshop, Illustrator,...). The applications hang the system completely for a minute or two (50% System-level ...
2
votes
0answers
42 views

Under what conditions are image files downloaded by chrome tagged with the quarantine attribute?

Seems that if I download a jpeg with Chrome or Firebox it has the quarantine bit set. Does this mean that OSX has detected something off kilter in this file? Under what conditions can this be ...
2
votes
0answers
102 views

Mac Mail Server 10.9.5 keeps getting password couldn't be set error

I am trying to change an mailbox password but each time attempt to I cannot procceed and I am faced with this error: The password could not be set. In order to set the password of a user with an ...
2
votes
0answers
545 views

Something has taken over Little Snitch?

Due to sad neglect, I own the computer from the exorcist. I finally looked last night and there were 80 sshd connections from China. I blocked all traffic to/from sshd, and now that sshd is linked ...
2
votes
0answers
73 views

Vulnerability and patch management on macOS - what works?

I am trying to design a plan for patching Mac endpoints at my company. Are there any readily available tools which I could leverage for continuous security patch/update management for 3rd party apps ...
2
votes
0answers
33 views

Require password when quitting application

I am setting up computers to run at a visitor centre, to be used by the public. I have been able to work out how to use Google Chrome in kiosk mode, but not a way for people to not be able to easily ...
2
votes
0answers
210 views

CVE-2016-4631 and Older Devices

tldr; How far back does the TIFF exploit affect iOS and OS X legacy versions? I've found conflicting information regarding how far back the recently reported image exploit can affect both iOS and OS ...
2
votes
0answers
507 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
2
votes
0answers
533 views

SSH keybased authentication using smartcard

I originally posted this on Information Security but am hoping to attract an answer here since this is OSX specific. So I'm fairly new to more secure forms of key management, I've been used to ...
2
votes
0answers
81 views

Authenticity of password prompts

This article on osxdaily.com discusses an issue in Mavericks and Yosemite where the user is prompted for passwords "at random times". In the article, the following is claimed. [The scenario where ...
2
votes
0answers
40 views

Mitigating exposure to DYLD_ exploit in Yosemite

In all current versions of 10.10 (up to and including 10.10.4), there is a rather nasty security hole which allows any process to create files owned by root anywhere on the file system. One example ...
2
votes
0answers
273 views

Find My iPhone login records

Is there a log of the times we enter iCloud? Like the timestamp of when we login to our iCloud to use Find My iPhone?
2
votes
0answers
1k views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...