7

I've been working with AppleCare on this issue for about 2-3 months now. The Apple engineers have confirmed to me that they can replicate the trust dialog box issue when the iPhone's Personal Hotspot is enabled, and connected to a Mac using Apple's official USB-A to Lighting cable. I believe that they replicated this using the same operating system as the ...


4

In short, you erase it if - & only if - the data on it would be more costly to lose than the price of a new iDevice. Some businesses consider their data to be worth far more to a 'spy' than the device itself. If you're a 'regular guy' your best bet would probably be to leave it locked & registered actively with FindMy, just in case it ever shows up ...


4

Is there anything which can make this process safer? Yes. The user. 90% of hacking is social engineering. It's not what people think it is; some bleary eyed geek sitting in a dark basement surrounded by high caffeine content energy drinks and a seeming endless supply of Hot Pockets tapping out cryptic code on a keyboard as they somehow overcome whatever ...


3

RAM is volatile, meaning it loses its data when powered off. The same for the other components, and they don't really 'store' data, and it's likely to be in a form that doesn't lend itself to useful 'human' level data. If you're wiping or replacing the storage device with a new/clean volume, then that won't contain any info associated with your AppleID. ...


3

A recommended course of action would be to backup your data onto a different (external) drive, wipe your Mac clean and start over. This could be the most sure-shot way to ensure that your computer is free of any/all malicious apps/permissions/plug-ins. When backing up the data, make sure you backup all the crucial data and don't miss anything. Files can be ...


3

The general principle used by FileVault is the same as for any encryption scheme which allows more than one password to access the data (such as LUKS, which is commonly used in Linux environments). To summarise: A key called the MEK (media encryption key) is used to encrypt and decrypt the data. A key called the KEK (key encryption key) is used to generate ...


2

The other post, stating that it is impossible to know what this device is, is incorrect. The line you indicate "USBMSC Identifier (non-unique): 000000000820 0x5ac 0x8406 0x820, 3" actually tells you exactly what kind of device it is: The number 0x5ac is a Vendor ID that tells you that the device was made by Apple Inc. The number 0x8406 is a Product ID ...


2

The dialog box tells you how to solve the problem. This setting can be changed in the firewall pane of the Security & Privacy Settings There are excellent guides provided by Apple that can walk you through the process Change Firewall preferences on Mac Use a firewall to prevent unwanted connections on Mac But basically, what you're going to do is ...


2

Chrome must first ask for the access. At that time it will show up here unchecked, unless you selected "allow" at the time that it asked. As @ankii mentioned tccutil will allow you to reset your permissions, but you will require the bundle id of the app in question. To get the bundle id % osascript -e 'id of app "Google Chrome"' com.google.Chrome % From ...


2

Ordinarily you should still be safe after just mounting the DMG - as long as you haven't actual run anything from within the DMG by double-clicking an icon or similar. So normally no, you wouldn't have installed the Skype file just by mounting the DMG. By looking at your screenshots you seem to be running a modern version of macOS. Are you instead running ...


2

You can't know for sure, at least not based on the information you shared in the question: It's a https connection so it should be secure Nevertheless you could connect through a network which tricked/forced you to accept a new certificate and then performed a man-in-the-middle attack Somebody could have tampered with the script on Github, resulting in an ...


1

In addition to the answer by @nohillside: can someone please explain each of the options, flags, switches, etc. included in the command above? Here's the install command-line: /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" Here's the breakdown of the various options (from the respective man pages): ...


1

Theoretically: nothing. I can create a dialog to mimic the authentication dialog in a few lines. Luckily, owning root is not what it was, and there is still much that an admin user can't do: this is why Apple has implemented SIP and read-only System volumes, and authenticated permissions for apps; plus certificates and all the rest of it.


1

Partial answer: If the symlinked file is one of the PressAndHold plists, it does not work. With `…/Keyboard-en*.plist moved to a subdirectory, and copied to a non-SIP directory, I replaced what was moved-and-copied with symlinks to the copies. Press And Hold popups were no longer available. Removing the soft links and copying the originals back up ...


1

If you've not already set your security preferences to require a password after some amount of sleep and/or screensaver, there's really no benefit to forcing a login at the beginning of the day - it's been vulnerable all that time and locking it at 6:00am only to be unlocked again for the rest of the day makes it a moot security policy. But, if you want to ...


1

https://eprint.iacr.org/2012/374.pdf All the answers you've needed. It's a full explanation of work. ☝🏻☝🏻☝🏻 I found the link on this site: https://www.lightbluetouchpaper.org/2012/08/06/analysis-of-filevault-2-apples-full-disk-encryption/ My explanation (Maybe something is wrong in it, but the hole idea is understandable): You turn on FileVault. macOS ...


1

FileVault uses the user's login password as the encryption pass phrase. It uses the AES-XTS mode of AES with 128 bit blocks and a 256 bit key to encrypt the disk, as recommended by NIST.[12][13] Only unlock-enabled users can start or unlock the drive. Once unlocked, other users may also use the computer until it is shut down.[3] ... Master ...


1

The core question here is "What have you done to make / install any application that would request this entitlement?" A system call by an app you install and then run is what populates this preference pane. Additionally - there are several entitlements, so you might need to allow an app like Microsoft Teams several clicks for screen sharing, controlling the ...


1

I myself am working on this for days now. 2 whole weekends without any luck. So right now I try to get faith again. (to get iOS 13 and iPadOS to accept a certificates descendent from a self-signed root-ca) My conclusion after wasting 2 full weekends was right. The pki-tree and certificates were right. The main reason that the certificateson iOS were not ...


Only top voted, non community-wiki answers of a minimum length are eligible