You were not hacked.
Somehow a keyboard shortcut was accidentally triggered.
This is mentioned in 200_success’s answer, but I am posting my own answer to add more specific details and references.
There is a default/built-in keyboard shortcut called: “Open man Page in Terminal” that is triggered by highlighting text and hitting this combination of keys: ⇧ (...
Apple will typically remove the firmware password as a repair service when you can provide proof of original purchase.
Alternatively, you would want the previous owner to send an MDM command or divulge the passcode which they used to lock the device boot order. Your best bet may be to seek a legal remedy if you have a right to ...
What is confidential is relative - something might be confidential information for you, and for others it might not be. It is therefore entirely subjective.
So yes, in that sense, a panic log could contain confidential information.
However, if you by "panic log" mean a simple kernel panic message, then no - most ordinary users would not find that ...
To answer the middle question: installer programs often have a menu item called something like ‘Files’ or ‘List Files’; selecting that brings up a window listing the full pathnames of all files that the installer will write. So if the installer provides that, it will help you to decide whether to install the app.
I found the solution to this however random. I did a few things though I can't remember in what chronological order. For one, I corrupted my Windows partition on Bootcamp by running a script off of Github which claimed to offer a better alternative to the third-party driver: Trackpad++. I nearly had to reinstall Windows but I did the obvious thing, given it ...
Login items are per user. As for other user-level settings there is no admin password required to change them. It is a bit sneaky from Steam to add an entry there without informing/asking the user though.
For a lot more ways (including some really sneaky ones) to start applications automatically see https://theevilbit.github.io/beyond/.
The permissions granted in the "Security & Privacy" preference pane are not related to code signing per se. These are runtime permissions that user can grant or revoke, and the app would still continue to be able to run (your app should react to the corresponding errors of the APIs related to these permissions, of course).
Usually, you only ...
So found the problem
I installed the certs using
security add-trusted-cert -d -r trustAsRoot -k $HOME/Library/Keychains/login.keychain-db path/to/certs/ca.pem
-d flag in the above command was adding the certs to admin cert store. Which isn't detected in the security dump-trust-settings command.
Removing the -d flag fixed the problem while ...
After some research, I learned that macOS has a utility called bioutil that may do what you want.
To disable TouchID after 24 hours, you can run this one-line command:
sudo bioutil -ws -o 86400 # require a password after 24 hours
To disable TouchID manually for the night, you can run a command to disable TouchID for unlock, and another to re-enable it. In ...