Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

0
votes
0answers
11 views

basic: adding a profile in Volatility [migrated]

Just starting out with the Volatility framework. I want to use a pre-built profile for OSX. I've downloaded the MacProfileAll.zip file and have copied the profile I want into the ...
0
votes
0answers
26 views

improving iOS 8 and os x security [closed]

I was just going through the iOS security guide and it made me wonder how could one improve security features already present. the current system in general looks pretty secure and well thought out ...
4
votes
2answers
118 views

How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?

I've read the disclosure post by Emil Kvarnhammar of TrueSec (Hidden backdoor API to root privileges in Apple OS X) and I'm trying to confirm whether I'm vulnerable or not. After creating an ...
1
vote
1answer
38 views

Block An IP Address Scanner On Mac [closed]

I'm working on an prototype that can spot network scanners, which is working and it spits out the IP address of the scanners, but I need to block them now. Is there any way to block an IP address ...
1
vote
0answers
14 views

OpenSSL 0.9.8zc -> 0.9.8zd “broke” my certificates. [migrated]

I have a self-signed certificate (and CA) created on a Mac using OpenSSL 0.9.8zc. I use the certificate to secure connection to my svn server. With the latest OS X update, OpenSSL was updated to ...
2
votes
1answer
38 views

Patching Mac DMA attack

I want to know a few things about the blackhat attack that attacks thunderbolt. Is there anyway to wipe or patch a currently infected computer? I am not versed per se in THAT level of security. I was ...
1
vote
1answer
66 views

How to create a OSx pen testing environment

I currently use OSx Maverick, I wish to use this machine as my pen testing machine as I also prefer coding on this machine. My current pentest machine is running Kali. Can anyone give me good tips on ...
0
votes
2answers
123 views

OSX Yosemite and Security/Privacy

I currently have a Macbook Pro running OSX Mavericks, being the skeptic that I am I always wait a bit before upgrading to 'new' OS versions when they are released to see how they fare both stability ...
0
votes
1answer
204 views

At Starbucks, is my MAC address sent when I accept the terms of service for free Wifi? [closed]

Recently, I overheard by chance some technically savvy guys saying that when you accept the terms of service in order to use the "free" WiFi at Starbucks (which you pay for when you buy some coffee), ...
0
votes
1answer
76 views

Need To Use Live CD With Mac without Shutting Down Computer (VMWare/Parallels Secure?) [closed]

I've heard of using Live CDs such as Tails to protect yourself online. Is there a similar setup to this that would work except run a Mac OS? I've done some searching, but have yet to find anything. ...
0
votes
1answer
68 views

On my MacBook, is my user password now the Achilles heel of disk encryption?

From a cold boot, the only password needed to unlock the primary encrypted volume on my MacBook's SSD is just that of my main admin user. This was not always the case; it used to be that I could ...
13
votes
1answer
2k views

Does the GHOST vulnerability affect Macs?

Although the vulnerability targets Linux, I have read that it is really a glibc vulnerability, and some sites suggest that one should install a fix on any platform. I know that there are a lot of ...
4
votes
1answer
85 views

Xcode's git still vulnerable (CVE-2014-9390)? What's the best practice here?

In December everyone and his grandmother were talking about CVE-2014-9390 and we were all busy installing the git maintenance releases. Looking at my Xcode installment today - 41 days later - I still ...
4
votes
2answers
116 views

Is there a way to check for “hollow” processes, or malware hidden within “normal” processes

I recently came across an article on the The Verge, which centers around the concept of commercial malware production and how it's used around the world. The article introduced me to a number of ...
1
vote
0answers
119 views

Fosshub as an alternative to sourceforge for osx open source project, is it safe to use? [closed]

I want to download a well known open source app for OSX (security/encryption related), but I don't want to use Sourceforge for my download because I'm worried about malware. This is the second time ...
0
votes
0answers
62 views

Chromium Sandbox on Mac OSX: Is it enabled by default?

I have decided to finally replace the closed source and privately owned Google Chrome with the open-source Chromium on my Mac OSX 10.9.2 (Mavericks). I have read the differences between both here: ...
0
votes
0answers
216 views

How to configure ettercap-ng's etter.conf to use sysctl instead of ipfw for sslstrip plugin to work on OSX Yosemite?

When I run ettercap-ng with sudo ettercap -Tq -i en1 -M arp /// I get the an error based on ipfw from the etter.conf file, like this: WARNING: ...
4
votes
2answers
286 views

Password entry on OS X and keyloggers

There's several places in my ‘personal security infrastructure’ (is there a better phrase for that?) where I find myself typing very important passwords into text-fields on OS X (for instance, ...
2
votes
1answer
80 views

native mac malware opening urls across all browsers

I'm a security newbie so please excuse the solely high level symptomatic description of my problem. My friend doesn't know how he got it, but he has some form of malware on his mac which, when he ...
2
votes
1answer
92 views

Will 3rd party antivirus/antimalware programs compromise OSX's built-in security?

There is a very interesting post written by @TechZen. Here's the excerpt from the original post (bold emphasis mine) Should I get an antivirus for my Mac? There's never been a an actual Mac OS X ...
3
votes
1answer
90 views

Meterpreter on non-jailbroken Iphone [closed]

I found this at github: https://github.com/AnwarMohamed/meterpreter-darwin Does anybody know if this works on a non-jailbroken Iphone? I downloaded it on my and double-clicked on the Makefile-icon, ...
3
votes
2answers
61 views

Copy Metasploit from Linux to Mac OSX? [closed]

I'm just wondering is there anyway to move Metasploit framework from Linux to Mac completely and It will be work ? and if yes , how ?
0
votes
4answers
244 views

nmap mac os lots of questionable ports open

Ive been recently trying to lock down my network at home and suspect that someone has hacked my linksys router because port 3128 seems to be open through the router and I have no knowledge setting or ...
1
vote
0answers
41 views

Is there an extension/command line for OSX Chromium to save website passwords in LOCALSTORAGE instead of the system's keychain?

My situation: I want to use a portable-app implementation of Chromium running on a removable drive, so I never leave any passwords stored on the kaychain of any computer I use. Portable Chromium is ...
0
votes
0answers
19 views

Is it a security risk to give read/write permissions to /Library/WebServer/Documents to my main account?

The default setting is that the apache2 root-directory Documents is owned by root and I have to enter a password each time I change it. This is why I want to give full permissions to my user account ...
0
votes
1answer
55 views

Why is it ok that OS X defaults to ignoring owership on external volumes?

I just discovered this fact tonight and I was rather floored by it. Isn't that a gaping security flaw? I realize that an external drive is less secure by virtue of the fact that someone could simply ...
1
vote
2answers
1k views

CloudFlare - prompted for “attention required”

I am getting a CloudFlare - attention required / security check prompt on most of the sites I visit through my Macbook running OS X Yosemite, these sites work perfectly on other devices (such as iPad, ...
1
vote
1answer
138 views

Strange TCP traffic on Mac OS X from 'rdmd'

I noticed some curious traffic today on my MBP after running lsof. It seemed that a process called rdmd had begun 3 TCP sessions: rdmd 85842 0 9u IPv4 0xca0e547f0a118fdb 0t0 TCP ...
4
votes
2answers
1k views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
-2
votes
2answers
113 views

Can my Mac be affected without running the malware?

Can my Mac be affected by malware without running it? For instance, if I download a random file, but don't open it, can it infect my computer?
2
votes
3answers
212 views

How can a Mac OS X user protect themselves from shell-shock AND remain connected to the internet right now

Seems to me that there is a need to remain online, esp. for business users and that even when this is corrected, there will be a need to go back online to get the Apple patch. e.g. Is removing bash a ...
7
votes
3answers
8k views

How to patch Bash on OSX in wake of “shellshock”? [duplicate]

My Mac is vulnerable, as this test shows: x='() { :;}; echo VULNERABLE' bash -c : (source) I am using the version of bash that came with it. I also use Homebrew. What is the preferred way to patch ...
40
votes
3answers
22k views

Are ordinary OS X desktops at risk from bash “shellshock” bug (CVE-2014-6271)?

I've recently heard via Twitter about CVE-2014-6271. Are ordinary OS X desktops, that aren't acting as a web server, at risks of receiving attacks that could exploit this vulnerability?
2
votes
0answers
37 views

Removing malware which is creating temp file and modifying network traffic [duplicate]

I am on OSX 10.9.2, please note I have included several URLs in my post, this is not spam this is due to the nature of the malware. I have just discovered I have malware on my computer after noticing ...
0
votes
2answers
110 views

Can I find out if my employer is snooping on me? [duplicate]

I work at a large university and have a computer supplied by my employer. I would like to find out whether my employer is snooping or can snoop on my files or activity on my computer. Can I find that ...
0
votes
1answer
960 views

Does Kismac work on MacOSX 10.9+? [closed]

Hi I am trying to get Kismac working. I downloaded the r407 version from here (http://trac.kismac-ng.org/wiki/Downloads) but when I scan for networks I get a never ending sceen saying "Loading Apple ...
1
vote
2answers
222 views

Difference between OS X md5 and gnu md5sum

I have installed the "md5sum" utility on my Mac and there was also a "md5" binary pre-installed in /sbin. My problem and question is this: "Isn't MD5 a standard algorithm?" Because I get different ...
2
votes
1answer
486 views

Capturing iTunes traffic with Wireshark - SSL decryption question

I'm fooling around with Wireshark to capture the activation packets for an iPhone and some other stuff, however the traffic is encrypted. There should be a private SSL key somewhere on my computer to ...
0
votes
1answer
160 views

Can any App Store app access all of my passwords?

Whilst researching another question, I've noticed that on OS X 10.9.4 there are many instances of Library/Keychains/login.keychain from ~ within the Data folder of what looks like apps from Apple App ...
8
votes
2answers
299 views

Mac OSX: What is the safest way to access an unknown USB storage?

Let's say a friend gives me a SD-card which I'm not sure is safe (i.e. it may contain malware), what is the safest way to access this card on a Mac OSX? E.g. Is it possible to create a sandbox in ...
3
votes
2answers
623 views

Export non-extractable private key from Keychain on OS X

I have a PKI certificate in Keychain Access.app on OS X 10.9, together with the private key. The manual page for /usr/bin/security indicates that there is a -x option for security import to specify ...
1
vote
1answer
199 views

Can any malware access the OSX keychain data

I'm working on a security project. I have sensitive data that I would like to store in OS X's keychain. I'm able to add the data programmatically into the OS X keychain by using RHKeychain. But after ...
0
votes
4answers
158 views

Can a virus on the host affect the VM guest [duplicate]

let me explain my problem. The wifi on my macbook suddenly stopped working so tried to use my usb wifi adapter on a linux VM. But the funny thing is that nothing works on the guest vm either... Well ...
41
votes
8answers
10k views

Should I get an antivirus for my Mac?

There are some people saying that people should use an antivirus software on Mac. And there are thousands of people claiming that Macs don't get viruses (under this term I mean spyware / malware as ...
0
votes
2answers
161 views

Mac laptop security on insecure wifi connections

I'm going every year at big IT conferences (3k->4k people). Everyone is connected to the internet with wifi on laptops. This wifi is open, everyone can read the traffic and analyse it... The risk is ...
2
votes
2answers
176 views

What's there to harden for a home Unix-box behind Comcast cable modem?

I'm learning that much of the security advice I come across under the "hardening" heading simply does not apply to a single-user home desktop box sitting in a private wireless IPv4 LAN behind a ...
2
votes
2answers
59 views

Is there a website or other resource that lists operating systems/platforms and the included root certificates?

I need to choose a certification authority (CA), to get a certificate, but I noticed that there are several of these only present in some operating systems/platforms like windows. I need to choose one ...
2
votes
2answers
736 views

Is OSX vulnerable / susceptible to Gameover Zeus

I've heard a TON of vague info on Gameover Zeus recently. One detail I can't seem to find is if it affects OSX? when I say I can't find it I mean from a credible source. I've found loads of people ...
3
votes
1answer
477 views

How can I check if a Mac application has NX or ASLR enabled?

According to Wikipedia, the NX bit is set for all x64 binaries: OS X for Intel supports the NX bit on all CPUs supported by Apple (from 10.4.4 – the first Intel release – onwards). Mac OS X 10.4 ...
0
votes
1answer
64 views

How can a critical Adobe Acrobat security update, only available as an unsigned executable over plain HTTP, be verified?

A critical security update for Adobe Acrobat Pro and Standard 9 on Mac OSX is only available over HTTP, and is unsigned code. Is there any out-of-band way to verify the download is authentically from ...