New answers tagged security
2
Some commenters have been asking how to use their X11 applications on Catalina, so I thought I'd follow up with some research I did on this issue recently when I was having trouble using FontForge.
While the original answerer is correct in that there is not a way to do this for all apps, there is a workaround for some apps that are more likely to have ...
0
You can try to run the installer on your USB directly in Recovery mode.
Open up terminal and enter: ls /volumes. Identify your USB, and then enter /volumes/<USB Name>/Install\ macOS\ Catalina.app/Contents/MacOS/InstallAssistant. The macOS installer should appear.
If it did not launch, you can copy your installation partition on the USB over to your ...
0
I am going to guess you ended up with a firmware password and aren’t seeing the images here due to some removals of OS that the system expected.
https://support.apple.com/en-us/HT204455
If so, you will need to get Apple to unlock the device by providing original proof of purchase if you can’t recall and enter the passwords that were entered into the T2 / ...
4
You will need to write a short script to gather this information.
Obtaining a list of processes is possible with ps and code signatures of processes can be checked with codesign.
codesign
The codesign command can be passed process identifiers, pid. To verify the signatures of two running processes call:
/usr/bin/codesign -d -vvvv 279 422
The flags are:
-d ...
1
In general "entangling" means that you're somehow "mixing" two components into one. This can be done in a number of ways.
In this specific instance what happens is that the UID and passcode are entangled by using an AES encryption algorithm. The UID is as the key for the AES encryption, and the passcode is used as the clear text. The ...
0
Since macOS High Sierra 10.13.x the virtual memory "swapfile(s)" have been encrypted even if FileVault2 disk encryption is off. Obviously, I would test that theory and review any CVE reports and validate it.
https://support.apple.com/guide/mac-help/what-is-secure-virtual-memory-on-mac-mh11852/mac
You might be scratching your left ear with your ...
2
Don't use System Events to do this. As well as the difficulties you've discovered, it's also a pretty unreliable way to do this, a potential security risk, and—thankfully—not at all necessary.
Here's an outline of how to use Automator to insert the date at the cursor's location in the currently active application:
Create a new† Automator workflow, ...
1
It does get a bit confusing setting up a new device.
Did you clone a machine to create this VM, or did you create it from scratch? If you cloned it, you could be having some issues about duplicate identifiers.
If you installed this from scratch, it is important to note that the password request is unusual. It is not asking for the iCloud password or the ...
1
This is a new authentication method. It really doesn’t have anything to do with your app or your VM - Apple is using another trusted device to prove you’re in control of the sign in request.
This all started around April 2017:
iPhone asks for Mac password (or Mac asks for iOS password)
3
The two things you can control on the hardware MAC ethernet address and the macOS Catalina firewall.
To prevent detection, try these one by one. Power down your router and Mac so that these things cause a new IP address to be issued between scans.
Turn on the firewall - https://support.apple.com/guide/mac-help/change-firewall-preferences-on-mac-mh11783/mac
...
0
Yes, RAM disks created by hdiutil are in ordinary, swappable memory. You might find another way to lock the memory, but Apple's tools do not support creating a RAM disk with wired memory. I found some documentation saying hdiutil might support it in a roundabout way, but I tested it and found that in Catalina 10.5.6 the kernel will not allow it.
If you are ...
1
For what it's worth, I have found that when the keypad appears, rather than entering the numbers, if I just hit cancel, the Mac is back in the good books, but it still happens every time.
GeoffPh
3
At https://objective-see.com/products.html there are (free) tools available to see security related process information (persistent processes, process hierarchy etc.)
There is a suite of security features (like GateKeeper), including malware removal tools (xProtect and – appropriately named – MRT) built into macOS.
These are updated silently and regularly in ...
1
I had this issue where Google Chrome was not showing up on the list at all. Turns out that there was a pending request from another app that was in the background, still waiting for me to "Open System Preferences" or "Deny". Once I cleared that out, the system prompt for Google Chrome showed up.
3
It's called Network Discovery.
Basically, Fing can get this information because your computer (not limited to Macs) is both broadcasting who/what it's resources are and responding to requests about what resources are available.
There's lots of tools (mostly professional) that will do a "network inventory" of not only what's connected to your ...
1
There’s rarely a good technical question to a purely human problem. I heard one company change every account to the cell phone of people that don’t clean up so that everyone would call that number any time someone forgot to log out. Until the person paying the salaries resolves if it’s always IT’s responsibility to clean up after other people or set a ...
1
This functionality is referred to by Apple as “Transparency, Consent, and Control” (TCC), Access Control, and Privacy Preferences Policy Control (PPPC). It is designed to give a user control over Apps to protect their privacy. In some cases an App will request access to something that App really doesn't need and the user can block the App from accessing that ...
0
If you are working on security then can I recommend that you use the Center for Internet Security benchmarks. They include tunring off password hints. Katie English at Jamf has developed a set of scripts that allows you to check the status of of the benchmarks on a machine and remediate anything broken. The CIS benchmarks also give you an easy way to discuss ...
2
The ability to disable Passwords Hints has been built into macOS
System Preferences → Users & Groups → Login Options. Just make sure "Show Password Hints" is unchecked.
Using Terminal, you can issue the command:
defaults write com.apple.loginwindow RetriesUntilHint -int 0
Your security policy
You aren't alone in dealing with employees/users ...
3
AuthorizationExecuteWithPrivileges
security uses the deprecated AuthorizationExecuteWithPrivileges function to implement execute-with-privileges:
status = AuthorizationExecuteWithPrivileges(auth_ref,argv[0], 0, (argc > 1) ? &argv[1] : NULL, &communications_pipe);
The function needs an AuthorizationRef, which is the part that confirms who the user ...
Top 50 recent answers are included
