Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

1
vote
1answer
42 views

Can any malware access the OSX keychain data

I'm working on a security project. I have sensitive data that I would like to store in OS X's keychain. I'm able to add the data programmatically into the OS X keychain by using RHKeychain. But after ...
0
votes
4answers
58 views

Can a virus on the host affect the VM guest [duplicate]

let me explain my problem. The wifi on my macbook suddenly stopped working so tried to use my usb wifi adapter on a linux VM. But the funny thing is that nothing works on the guest vm either... Well ...
0
votes
0answers
85 views

Apple ID phishing lead to my router infected?

For future visitors, I will try to be as general as possible, but I must include details to give you a full picture. As my Apple ID's security email address belongs to my brother, he forwarded an ...
32
votes
8answers
5k views

Should I get an antivirus for my Mac?

There are some people saying that people should use an antivirus software on Mac. And there are thousands of people claiming that Macs don't get viruses (under this term I mean spyware / malware as ...
0
votes
2answers
77 views

Mac laptop security on insecure wifi connections

I'm going every year at big IT conferences (3k->4k people). Everyone is connected to the internet with wifi on laptops. This wifi is open, everyone can read the traffic and analyse it... The risk is ...
1
vote
2answers
59 views

What's there to harden for a home Unix-box behind Comcast cable modem?

I'm learning that much of the security advice I come across under the "hardening" heading simply does not apply to a single-user home desktop box sitting in a private wireless IPv4 LAN behind a ...
2
votes
2answers
30 views

Is there a website or other resource that lists operating systems/platforms and the included root certificates?

I need to choose a certification authority (CA), to get a certificate, but I noticed that there are several of these only present in some operating systems/platforms like windows. I need to choose one ...
2
votes
2answers
152 views

Is OSX vulnerable / susceptible to Gameover Zeus

I've heard a TON of vague info on Gameover Zeus recently. One detail I can't seem to find is if it affects OSX? when I say I can't find it I mean from a credible source. I've found loads of people ...
2
votes
1answer
63 views

How can I check if a Mac application has NX or ASLR enabled?

According to Wikipedia, the NX bit is set for all x64 binaries: OS X for Intel supports the NX bit on all CPUs supported by Apple (from 10.4.4 – the first Intel release – onwards). Mac OS X 10.4 ...
0
votes
1answer
40 views

How can a critical Adobe Acrobat security update, only available as an unsigned executable over plain HTTP, be verified?

A critical security update for Adobe Acrobat Pro and Standard 9 on Mac OSX is only available over HTTP, and is unsigned code. Is there any out-of-band way to verify the download is authentically from ...
11
votes
2answers
1k views

Is Apple's push notification service implementation vulnerable to a MitM attack

Recently(more info) I've spotted a strange message in the logs on my quite recent, fresh installation of OS X Mavericks 10.9.2 Apr 27 15:26:47 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf ...
1
vote
2answers
1k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my system.log Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate Apr 25 22:20:57 Ivans-MacBook-Pro.local apsd[194]: ...
0
votes
0answers
72 views

Does Mac OS X 10.8+ support self-signed Package Installer

I'm not sure whether self-signed Package Installer are supported by Mac OS X 10.8+ Using informations in How to create an Apple Installer Package Signing Certificate I could create a Package ...
0
votes
1answer
291 views

How to install Metasploit on Mavericks + MacPorts?

I would like to install Metasploit on an hardened OS. For this purpose I chose Mavericks just because I'm able to harden this OS pretty far. I would like to install Metasploit with MacPorts because ...
47
votes
7answers
5k views

Can “cat-ing” a file be a potential security risk?

I often use cat on the console to view the contents of files, and every now and then I accidentally cat a binary file which basically produces gibberish and system beeps. However today I've ...
0
votes
1answer
101 views

I get the feeling that Microsoft and Mac use two different forms of AES

I have an AES string being produced with this class, the AesCryptoServiceProvider Class provided by Microsoft. And I need to decode this encryption with Ruby's SSL::Cipher class . The problem is ...
0
votes
1answer
327 views

How would I know if my Apple Mac has a virus, and what can I do if I have? [closed]

I have used PCs for most of my life, and I am very aware of the fact that they can catch a variety of viruses. I have owned a MAC now for two years, and have enjoyed a pleasant (perhaps too pleasant) ...
1
vote
0answers
25 views

To which extent are paid alternatives to Apple's Xprotect worth it?

Mac OS X ships with Xprotect, Apple's mechanism to detect and remove malware. System software security holes are patched decently quickly. In a world of fragmented, code-signed, sandboxed apps, what ...
1
vote
1answer
62 views

Can I reliably identify Apple devices that have not patched against the gotofail vulnerability based on user agent string?

The title pretty much says it. Do the security patches to address the gotofail security issue in multiple Apple products employing SSL change the User Agent string for the respective systems? And, of ...
2
votes
0answers
223 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure ...
-4
votes
1answer
114 views

Is it possible to hack my encrypted session and hijack the session by electromagnetic waves? [closed]

I'm concerned about microwave technologies nowadays and suspicious matter happend. So, I have several questions. Could you tell me about my question in below if you know. Question: Is it possible ...
1
vote
1answer
173 views

Why are OSX users of my TLS-only site being asked to supply a client certificate?

I purchased a Comodo SSL certificate (OV), and set up the Apache vhost config so that all traffic is forwarded to 443. Intermittently some users are being prompted to supply a client certificate; ...
4
votes
3answers
492 views

What is the most secure way to send emails using PGP?

I am a PGP beginner, having just downloaded GPG for OS X. I created my first pub/sec key for my email address and uploaded it to the public key server. GPG has several features available, namely: 1) ...
2
votes
0answers
651 views

What is a self-contained cross-platform encryption for USB drive? [closed]

I'm trying to find self-contained encryption solution for USB drives while at the same time being platform independent. For example, Windows' BitLocker only works on Windows and not on OS X or Linux. ...
5
votes
1answer
814 views

How secure is “Secure Keyboard Entry” in Mac OS X's Terminal?

I've been using Terminal under Mac OS X for years but somehow missed to spot this feature: I'm now wondering how does this actually work, and is it 100% safe? If it isn't, what technique could be ...
3
votes
1answer
215 views

Safely Use sudo Without allowing Other applications root privileges on Mavericks

I have noticed recently on OS X Mavericks that running sudo will not only allow one to run it again in the same window or even the same application, but will permit any application to run shell ...
15
votes
1answer
400 views

Keyboard firmware hack - Linux vulnerable?

I see that Apple patched OS X to mitigate against K. Chen's famous Apple keyboard firmware hack. However: Apple keyboards can be used with computers running other operating systems; and in any ...
1
vote
1answer
102 views

Why is ICMP timestamping disabled on OS X?

It would seem like ICMP timestamping is quite a useful feature for troubleshooting networks with asymmetric paths. Replies to icmp(4) timestamp requests are generated by the kernel: On OpenBSD, the ...
4
votes
3answers
416 views

How to keep Mac secure from viruses, malware and keyloggers?

How can I download and install software and make sure that it is not infected with viruses, malware or a keylogger? Also, I heard that Macs "don't get viruses". Is this true? Is it a good practice to ...
0
votes
1answer
962 views

Single user mode for Windows

I am familiar with single user mode on OSX. By holding down Command-S, you can boot into a terminal as root. Resetting the PRAM with Command-Option-P-R will disable any firmware protection that would ...
1
vote
2answers
194 views

In what sense is Knock to Unlock safer than a password?

I've recently seen a youtube video, which is advertising an iphone app which will unlock your mac computer by knocking on your iphone. The ad is claiming that it is faster and safer than typing your ...
0
votes
1answer
175 views

Fishy: VMware sends all traffic through akamai

I'm running Linux inside of VMware on the Mac, and on Linux I'm running a program that has connections open to perhaps 4 different machines. On the OS/X side however VMware has only 1 active network ...
0
votes
0answers
28 views

apple hardware for infosec student, or pc [duplicate]

I see a ton of infosec people using Mac hardware. mitnick, Paul asadoorian, tons of people at defcon, etc ... my question is ... I spend most of my time in Linux at school. usually in bt kali or ...
5
votes
2answers
255 views

Using FileVault on a Mac with existing data

I have recently got a Mac which I have started using already without any encryption while looking for the best solution. I have come to the conclusion that using Mac's own file encryption technology ...
5
votes
1answer
155 views

How secure is OS X's Keychain access control?

On OS X, when an application requests access to a Keychain item, the user is prompted whether to grant or deny that access. Supposedly, the system saves not only the binary path, but also its hash in ...
6
votes
4answers
566 views

Security of different OS

At my work we are given a computer to set up at home so if we ever feel like working from home we can do so. The thing is that whenever it comes to developing for java I always prefer using windows or ...
2
votes
1answer
128 views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If ...
4
votes
0answers
581 views

Why does DestroyFVKeyOnStandby no longer work to secure Mavericks? [closed]

I noticed that using the DestroyFVKeyOnStandby option for FileVault 2 in terminal no longer works since upgrading to Mavericks. Usually you type the following in terminal: sudo pmset -a ...
1
vote
1answer
90 views

Hardening Services, Ports on OSX

People boast about OSX Security, yet I find it very hard to find a comprehensive manual in regards to any equivalent Services and the ports they use. I am aware of lanchd and launchctl and Lingon is ...
1
vote
0answers
361 views

Adobe Install Redirect

I have heard of the Flash virus floating around, but after reading more I do not believe I have it. When I go to http://get.adobe.com/flashplayer/ So that I can update, 'Install Now' will redirect ...
1
vote
1answer
141 views

Intrusions attempt monitoring (on MacOS X) [closed]

I know utilities such as last exist - but not sure if it's applicable for my needs - I'd like a system to notify me of any login attempts on any of my macs (home, work or remote). Attempts from a ...
0
votes
1answer
524 views

Configuring SSL certificate on OS X 10.8.5 produces “Chain issues Contains anchor” error

I'm trying to install a Thawte SSL123 certificate on OS X 10.8.5, but having a difficulty. While the certificate and intermediates appear to be installed without any errors, running the Qualys SSL ...
0
votes
1answer
129 views

How to fetch and update all my friend's keys? [closed]

Where can I upload a list of my friends and get a list of their keys found on keyservers? Here are some key servers: http://keyserver.ubuntu.com:11371/ http://pgp.mit.edu/ ...
1
vote
1answer
206 views

How is the FileVault master key protected?

FileVault has the functionality to both allow and disable user accounts from booting up the encrypted drive. Reference: this cnet article. See also the stack exchange question How does FileVault 2 ...
0
votes
2answers
175 views

Random File downloaded

Okay so I was setting up stuff on my new mac earlier, downloading flash and office. They both downloaded and installed smoothly, but after I noticed a weird new file in my 'downloads' folder: ...
-4
votes
2answers
168 views

Is writing a document, not saving it, and printing it wirelessly 100% secure? [closed]

Say I want to write a top secret document (yeh, I'm a secret agent), and I use the method in the title...more specifically 1) Write a document on TextEdit on a Macbook Pro 2) Do not save it 3) ...
3
votes
3answers
243 views

Why Parallels 8 installer looking into my Chrome's Cookies?

While trying to install Parallels on OS X I looked into Activity Monitor to find where is the installed Parallels located (it was weird that it stays invisible in Application folder). And than I found ...
3
votes
1answer
149 views

Does Apple maintain the security of the built-in Ruby?

Does Apple maintain the security of the Ruby implementation that comes by default in OS X? I recently heard about CVE-2013-4073, but when I ran "Software Update..." on my OS X Lion box, it didn't ...
1
vote
1answer
159 views

How should I diagnose a macintosh laptop running OS X Lion 10.7.5 automatically booting at 12:00:09 sharp every night?

Using the "Console" app within OS X and viewing the "syslog" file I can see the user shutdown their laptop (it was a HALT operation) around 10:22PM. For some reason, 9 seconds after midnight ...
1
vote
1answer
3k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...