Questions tagged [security]

If your question pertains to a specific protocol, e.g., ssh or ssl (https), please use that tag instead.

Filter by
Sorted by
Tagged with
367
votes
7answers
266k views

How do I recompile Bash to avoid Shellshock (the remote exploit CVE-2014-6271 and CVE-2014-7169)?

Given that Bash 3.2 (the version shipped by OS X) is vulnerable to the remote execution exploit known as "Shell Shock" (CVE-2014-6271 and CVE-2014-7169) how do I rebuild Bash and secure my system ...
179
votes
26answers
57k views

Is there a quick way to lock my Mac?

On Windows you can hit the keys Windows+L to lock your computer if you step away. I don't want to have to remember if sleep currently asks for a password, if there is a time out where my screen isn't ...
125
votes
4answers
217k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
111
votes
6answers
137k views

How can I keep my Mac awake AND locked?

I want to leave my Mac awake overnight so it syncs 4GB of data from Dropbox. I need to prevent the machine from going to sleep because that pauses the Dropbox sync I've been using Caffeine to keep ...
103
votes
6answers
104k views

VirtualBox 5.1.28 fails to install on MacOS 10.13 due to KEXT security

I have tried to install VirtualBox 5.1.28 to macOS high sierra but it fails every time with the following screen: After some looking around I found this thread and I did indeed see that it was ...
79
votes
8answers
23k views

How can I prove to an airline that the iPad mini they found is the one I left on the plane, without giving them the passcode?

I left an iPad mini on an Icelandair flight. They just sent me this message: "We have an item matching your description. Can you please send us details about the item, preferably passcode, to ...
72
votes
7answers
2.5m views

Is there any way to view saved wifi passwords on the iPhone?

I've previously connected to a wifi network on my iPhone but I've no way of finding out the password. So is there any way to view saved wifi passwords on the iPhone?
70
votes
5answers
20k views

A tech from MacKeeper wishes access to my computer for licensing and activation. Is this a scam?

I paid for a version of MacKeeper which may be a mistake. Their tech wants me to allow them to access my computer as in have access to my desktop files, etc. They say it is to fully license and ...
63
votes
3answers
736k views

Is the message “You must change your passcode within 60 minutes” valid / non-malware?

A few minutes ago, after unlocking my phone (iPhone 4, iOS 7.0.1) I got a dialog over the home screen: Passcode Requirement You must change your passcode within 60 minutes and it offered to ...
60
votes
9answers
203k views

How can I open a .pkg file manually?

Some applications come in .pkg files, and ask for you administrator password, even if all they do is copy the binary to /Applications. I like to have my applications in ~/Applications, and I do not ...
58
votes
5answers
29k views

Are Macs vulnerable to the Bash shellshock bug?

Red Hat recently announced a major security-related bug in the Bash shell. Some are calling it the "shellshock" bug. Since OS X is built off of Unix, is it vulnerable to attacks that exploit this bug? ...
50
votes
11answers
4k views

Is it generally advisable to get anti-virus software for Mac OS X?

Is it worth to buy an anti-virus software for Mac OS X? I heard both opinions like "it's not possible to get a virus on Mac OS X" and "Mac OS X is also vulnerable against virus... " Which is true? ...
42
votes
5answers
18k views

How to tell why macOS thinks that a certificate is revoked?

I cannot access Wikipedia on both my Macs. macOS says that the intermediate certificate used to sign Wikipedia’s certificate (GlobalSign Organization Validation CA - SHA256 - G2) has been revoked. I ...
41
votes
3answers
8k views

Has the WiFi KRACK vulnerability been patched for iOS?

There is a new vulnerability in WPA2 called KRACK (short for Key Reinstallation Attack), as described in The Guardian article: 'All WiFi networks' are vulnerable to hacking, security expert ...
40
votes
6answers
9k views

How do I disable or remove the root account created as a side effect from this High Sierra security bug?

This article describes a bug where entering root when prompted for an unlock allows any user to unlock system preferences. It warns that: There’s no need to do this yourself to verify it. Doing so ...
40
votes
4answers
35k views

A software update is required to connect to your iOS device / iPhone

On my mac I've recently updated to the latest macOS version 10.13.5 and have installed Xcode 10 (beta 1). For my iPhone X there is an update available to 11.4 but i didn't install that yet. Now there ...
39
votes
7answers
22k views

HFS+ case-sensitive or case-insensitive — which type to use for the primary drive partition?

What reasons are there for choosing the case-insensitive version of HFS+ when formatting the primary drive partition? Would case-sensitive not always be the best choice?
36
votes
2answers
285k views

How can I get admin access to a Mac without knowing the current password?

My Father died last year and I inherited his Mac Mini. My wife has retired and we are trying to set up the mini for her use but the changes we want to make require admin access and we do not have the ...
35
votes
3answers
17k views

How to securely erase an SSD drive?

I'm pretty new to SSD technology, so I don't know how it compares to hard drives when it comes to securely erasing the drive. Is it enough to run Disk Utility and erase the drive with the option "...
34
votes
5answers
3k views

Is my Mac infected with the Flashback trojan?

I own a 2011 model of MacBook Pro with a Core i7 processor and Snow Leopard. I have found out there is a trojan horse which now controls 600,000 Macs. How can I find out if my MacBook is being ...
33
votes
3answers
3k views

How do you prepare or secure your Mac for the possibility of being stolen?

I'm using the great applicaton Prey which hopefully never has to get used, but just in case, I want to be prepared. So basically I have a request for password after sleep/screensaver enabled, but ...
33
votes
6answers
47k views

IOS 10 warning: Using a hidden network can expose personally identifiable information

I am aware that 'hiding' a wifi network/SSID does not make the network MORE secure, but Apple's warning on IOS 10: Using a hidden network can expose personally identifiable information seems to ...
31
votes
5answers
48k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
31
votes
1answer
1k views

Where does OS X keep the FileVault password during reboots in an upgrade?

For security concerns, I wonder how it would be possible for an OS X upgrade (e.g. from Mavericks to El Capitan), to reboot my Mac multiple times without asking me for my FileVault 2 password? I ...
28
votes
6answers
109k views

iOS Untrusted Developer error when testing app

I am trying to make my own iOS applications by using Xcode 7 and iOS 9.0. I have successfully been able to install the app on my own iPod by following Xcode 7 develop for iOS without developer account ...
28
votes
6answers
121k views

Which free alternatives to Little Snitch can I use to block internet traffic per applications?

Little Snitch can block internet traffic of a particular app. Can I do something similar without (paying) Little Snitch, either by using free alternatives or configuring the OS X firewall directly?
27
votes
1answer
126k views

Should I block incoming connections from “netbiosd”?

My (application) firewall settings are configured to block incoming connections from netbiosd. I don't recall setting this myself, and wonder what the consequences are. What are the consequences of ...
26
votes
12answers
70k views

Is there a way to password protect individual apps?

Is it possible to password protect a specific Mac application? For example, I am interested in protecting Mail because even if you cannot retrieve new emails, you still can read all the already ...
25
votes
7answers
5k views

Unable to completely uninstall Zoom meeting app

I am unable to completely uninstall the Zoom meeting app from my Mac running macOS Mojave. I once installed the Zoom meeting app. Then I deleted it from Applications directory. Now, every-time I open ...
23
votes
4answers
9k views

Intel management engine - is macOS vulnerable?

Based on, for example, the Wired reporting, this is major bad news. Intel® Management Engine Critical Firmware Update (Intel SA-00086) - www.intel.com https://www.intel.com/content/www/us/en/support/...
22
votes
7answers
2k views

How to limit my Mac's exposure to malware?

With OS X malware increasingly in the news (see the Flashback Trojan issue), is there anything that I should do to increase the security of my Mac and reduce my exposure to malware? What I'm doing ...
22
votes
4answers
30k views

How can I get the exact URLs/requests that a program is trying to connect to?

I currently use Little Snitch to control network traffic on my Macbook Pro, and see what my apps are connecting to. Unfortunately, Little Snitch only shows you the hostname that an app is connecting ...
22
votes
4answers
14k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
21
votes
5answers
40k views

Is data transmitted over 3G secure?

When data is transferred from my iPhone via 3G, is it encrypted, or is it relatively simple for a hacker to read the data that's transferred to AT&T's cell tower? What about after it reaches the ...
21
votes
5answers
158k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
21
votes
3answers
3k views

How do I get the password hint for an encrypted disk?

I created an encrypted disk on a USB drive the other day, and added a password hint. I don't remember what the password is. (I have a scheme for mapping hints to passwords, so when there's a hint ...
20
votes
7answers
10k views

Is this an email from Apple or fraud?

Begin forwarded message: From: ID Report <childaviintlteknic59@substemptauthsvcstld.com> Date: February 15, 2019 at 9:20:10 AM EST To: [Bla bla bla <my email address>] Subject: [TBA] Your ...
20
votes
3answers
5k views

Is it safe to let apps use Touch ID on an iOS device?

There are some apps that allow logging in via Touch ID (for instance banking apps). I know that it is relatively secure to use this feature as long as no-one has illicit access to my fingerprints, ...
20
votes
2answers
2k views

Forcing `open` command to open unsigned app?

I've got my Security preferences set to allow apps downloaded from "Mac App Store and identified developers." When I try to open an unsigned app: open xyz.app I see the following: Usually, I right-...
19
votes
1answer
27k views

Can someone who registered my iPhone read all my text messages?

My ex-husband registered my iPhone and I have found out he has been using iCloud to check up on my every move (the iPhone he got me is connected to his iCloud account). Will he have been able to read ...
19
votes
2answers
3k views

What potential dangers arise from a mass iOS UDID leak?

Can anyone enlighten us with what a hacker could use one (or a list of) UDID for? The leak reported September 4 of 1 million UDID's by AntiSec makes me worry. But should I? What is the worst case ...
18
votes
3answers
42k views

How to get the “securely erase” function of Disk Utility on El Capitan & Sierra

Up to Yosemite I regularly used Disk Utility with Erase > Security Options... > writes a single pass of zeros over the entire disk... as a simple method to fully check that a disk is fully safe before ...
18
votes
3answers
36k views

Why is a secure erase 'not necessary' for SSD's?

I'm about to trade in a 2010 MacBook Pro with an SSD. However, I'm unable to do a Secure Erase from the recovery disk (as I used to do with mechanical hard drives before selling or giving away a ...
18
votes
2answers
22k views

Where does Apple's predictive keyboard get its “contextual” content from?

So I was playing around with the iOS 8, when I notice that upon typing "new" anywhere, the predictive keyboard suggests the term "NewTerm". I recall using this word in a tweet, so I brushed it off. ...
18
votes
1answer
4k views

macOS High Sierra 10.13 briefly flashes screen content last seen before locking the screen when awaken

On macOS High Sierra 10.13.2, when I manually lock the screen (shift+ctrl+power) and later press any key to turn it on, the screen content which was shown at the time I locked the screen is briefly ...
17
votes
3answers
9k views

How can I verify a Lion FileVault recovery key?

I have a volume that is encrypted with OS X Lion's full-disk FileVault. When I enabled FileVault I was given a recovery key, which I wrote down. I'd like to verify that the recovery key that I wrote ...
17
votes
3answers
19k views

Can Gatekeeper be disabled via terminal in OS X 10.8 Mountain Lion?

How can you disable Gatekeeper via Terminal Commands in OS X 10.8 Mountain Lion? I am looking to replicate the Security & Privacy preference pane selection to allow applications downloaded from ...
17
votes
6answers
10k views

What point is there in using an everyday non-admin account on OS X?

This piece of advice is old but is coming back into fashion. I have seen it a lot recently, on a number of Mac websites or forums. "Your ‘everyday’ user account should not be an admin account. It ...
17
votes
3answers
13k views

How secure are iCloud backups?

Are iCloud backups encrypted, both when transmitted and stored? Is it possible for someone at Apple to access any backup made to the data enter? I have heard that when apps have been pulled from the ...
17
votes
4answers
15k views

Is there a tool I can use to securely wipe data from iPhone, iPad, or iPod Touch?

Is there a tool or application that will securely wipe an iPhone, iPod Touch, or iPad (i.e. any iOS device?) I'm not interested in a complete wipe that would brick the device. Rather, I'd want to ...