Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

5
votes
2answers
1k views

Why did Apple think OS/X was virus proof?

In such articles as this one at Examiner.com, we see that Apple had long "advertised" the immunity of its desktop OS to viruses. It had to dilute that assertion when the Flashback virus appeared. ...
-1
votes
1answer
374 views

Is there a way to get OS X to start a VPN connection before allowing network traffic? [closed]

I'm running OS X 10.8 and have Tunnelblick set up so I can connect to my OpenVPN server at home. I've also used this at $WORK in the past. When I'm out and about and want to jump on a public network, ...
3
votes
4answers
218 views

Enforcing personal firewall for OS X

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
2answers
573 views

Reseting my computer to uninstall LogKext

My friend downloaded LogKext on my computer, so I'm guessing he can see every keystroke, but I've reset my computer so that it's in a condition when I first opened from the box. Can my friend still ...
4
votes
1answer
246 views

PKI integration in MAC OS

I have setup an ejbca pki and integrated certificates in MAC OS for S/MIME signing and encrypting. I have also set up a CRL distribution point and put the CRL online available on an HTTP server. ...
5
votes
6answers
694 views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
2answers
226 views

“You have new mail” message

I received a message from Google saying someone entered my email account. I confirmed that there were an access from an IP in another country. I have noticed "You have new mail" message when I open ...
1
vote
1answer
424 views

I wonder if my MacBook Pro with OS X got hacked?

Maybe I am getting a little paranoid. Lately my MacBook Pro with Mac OS X 10.8.2 is behaving a little different the usual. The last strange thing that happend was that in iTerm2 when I tried to sudo ...
0
votes
1answer
135 views

Did I get hit by the recent Java exploit?

Looks like the website iphonedevsdk was responsible for serving up the malware that's been causing some of the recent security exploits. According to my browser history, I visited that site back in ...
5
votes
4answers
380 views

Can you really change the password to a mac on reboot without knowing the old one?

I was looking for answers for a configuration issue on my laptop but then I got to reading the answers to this post. There was one that troubled me slightly (the last one by Lauri) which says how to ...
6
votes
3answers
26k views

How to detect KeyLogger on Mac OS X ?

I have a Mac OS X computer and I want to know if it has installed a Keylogger or something that control what I'm doing: when I switch on/off the computer, what I install on it, etc. How can I know ...
1
vote
1answer
76 views

Should users share OSX crash logs?

OSX stores app crash logs into ~/Library/Logs/DiagnosticLogs/appname_date.crash and optionally submits these anonymously back to Apple. These contain a fair amount of debug info for the developer, ...
2
votes
5answers
980 views

Apple ID Created With My Email Address

A little similar to this question. but rather than hack my email address someone has created an Apple ID with a gmail address that is similar to mine, but had dots '.' in it. For example if I have ...
20
votes
4answers
6k views

What can an attacker do with Bluetooth and how should it be mitigated?

What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine? ...
2
votes
1answer
1k views

Is there any way to list the contents of the iPhone/OSX Keychain and their security level?

I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone. Since it's possible for keychain items to be bound to a device (and ...
1
vote
1answer
335 views

Macbook pro, rootkithunter

I've never really tried to understand rootkit enough, I'm too much paranoid... I recently reinstalled mountain lion, but my EFI might be infected. I have a macbook pro, it was really slow at some ...
1
vote
1answer
11k views

Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2 [closed]

Does Kismac 0.3.3 (0.3.3) built on February 7th work on Mac OSX 10.8.2 It doesn't seem to scan for me. Both are the latest versions as of today.
2
votes
1answer
451 views

Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2

Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads. Is anyone aware ...
1
vote
2answers
219 views

Dealing with a (possible) virus on both MacOSX and iOS

The symptom: On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page. On iPhone, when navigating to google.com I get ...
2
votes
2answers
248 views

Checklist for securing MacOSX

Is there a checklist for securing MacOSX machines?
3
votes
1answer
346 views

How do I configure Terminal Server (and clients) for use over untrusted Wifi networks?

Suppose a client wants to directly connect to Terminal Server exposed to the Internet, without a VPN, ... what software & settings is needed to properly protect against WiFi based attacks? ...
2
votes
1answer
165 views

Swatch installation's issue to detect intrusion

I have installed snort and I want to use the swatch tool to send me an email when it detects something going wrong. I am using OSX and I followed the installation guide: ...
1
vote
1answer
497 views

Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?

I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario: "macbox" OS X using OpenSSH_5.2p1 ssh client "sunbox" Solaris 10 ...
3
votes
1answer
132 views

Do public keys make Kerberos more secure (RFC4556)?

We're using IPA to centralize our authentication and I found an option to add a public key for each user. After doing a little research I found this to be an extension to Kerberos 5, RFC4556. From my ...
1
vote
3answers
976 views

How to secure data before returning Macbook Air?

I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...
-1
votes
1answer
144 views

Mac app purchase validation

How do I sell a mac app off of my website without somebody being able to copy-and-paste the app to some friends after he buys it, etc.. I understand that you can use receipt validation when selling ...
2
votes
1answer
775 views

VMWare Fusion Encryption and Snapshotting

VMWare Fusion 5 has an encryption feature that I have enabled, with what I would consider a hard-to-brute-force-crack password. How secure is the data in this VM? If I shut down the VM each time ...
0
votes
1answer
2k views

Is OSX or Mac hardware used in the InfoSec world? What resources are available? [duplicate]

Possible Duplicate: Mac OS X from an IT Security Practitioners' Perspective? I'm new to the OSX world (formerly Windows background) and am interested in understanding what is or isn't ...
2
votes
1answer
4k views

How to block all access to Akami deploy servers and Apple push servers?

I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like: a23-33-37-54.deploy.akamaitechnologies.com ...
3
votes
1answer
431 views

Does setting a firmware password add security if FileVault 2 is enabled?

On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
2
votes
2answers
298 views

Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?

OS X 10.8 comes with GateKeeper, which basically has three settings: Allow only apps from Mac App Store Allow only apps from Mac App Store or that are signed with a valid Apple Developer certificate ...
6
votes
3answers
4k views

Is it possible for a phishing link to install a major virus on a Mac?

My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
1
vote
2answers
2k views

SQL Injection tool (Mac OS X)

Do you know any software for searching (analyze) SQL injection (on website) from Snow Leopard ? I have found some that can run from Linux or Windows. I understand that most Linux (console) ...
12
votes
6answers
6k views

How secure is FileVault 2 while the computer is in sleep mode?

How secure is Apples disk encryption FileVault 2 when someone has physical or network access while the computer in sleep mode or is running a screen saver? Are there ways to circumvent FileVault 2 ...
3
votes
2answers
211 views

Chrome: Found a crash, is it a security vulnerability?

I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability. How can I determine if a Chrome ...
3
votes
4answers
708 views

Apple FileVault — would Apple build a backdoor?

Could Apple build a backdoor into it's FileVault encryption technology? Is that a risk you take of using a closed-source encryption product in general? Would using something like TrueCrypt be more ...
5
votes
2answers
3k views

Need help identifying the OSX process that's generating strange network traffic

Since the past few days, I noticed that my router was a bit slow, and was restarting by itself at times. When looked at it's logs, they had entries like: Friday Jul 13 13:09:02 2012 1 Blocked by DoS ...
-1
votes
2answers
4k views

Is it Possible to Dual Boot OSX Lion & Backtrack 5 R2 Smoothly? [closed]

I have a 13inch Macbook Pro i5 and I would like to duel boot backtrack 5 on it as my ram struggles a bit when I run it inside a virtualbox. I have heard stories how it has borked the install on osx, ...
0
votes
1answer
454 views

Securing firewalls for XAMPP on Mac OS X

I've recently installed XAMPP on my Mac OS X 10.6.8, and this has caused me to reevaluate how I have my firewall setup. Right now I am using the two firewalls that came pre-installed on my computer: ...
3
votes
2answers
2k views

Is leaving the root user enabled in Mac OS X a security risk?

To those unfamiliar, the Mac OSX has the root account disabled by default. In order to enable the root user you have to go deep into System Preferences and authenticate yourself with an administrator ...
1
vote
3answers
1k views

How to set password on applications in Mac OS to prevent an administrator to start them?

Is there any program that can set password on the app like mail or browser? I know about parent control, but I doesn't work with administrator account. What I want is some program that blocks some ...
9
votes
3answers
529 views

Reading keystrokes of other applications

Is it possible for other application running in the OS to read the keystrokes that my application uses? What about mouse events and window handles? Is there any security wall that the OS uses to ...
4
votes
1answer
511 views

SSL protocol issues on OS X and iOS

I have a PfSense box as a UTM, running snort among other things. I started noticing that when MacBooks and iPhones/iPods connect to my network, the snort log gets flooded with this message: ...
16
votes
1answer
4k views

Mac OS X from an IT Security Practitioners' Perspective?

What does the Mac OS X offer that it has been recently attracting users with IT security focus? There are sites that specifically focus on "hacking" with OSX, such as machacking.net. Defcon has an ...
3
votes
5answers
3k views

Reverse engineering (decompiling) an .exe file in OSX

I am a complete newby in the reverse engineering world, and being able to decompile .exe files in my OSX is being a pain. Does anybody know a good decompiler of .exe for OSX, or any hint about where ...
2
votes
1answer
240 views

FireFox Download Source

While downloading the latest version of Firefox for Mac, i took a peek at the source. The names don't look legit but i am not that familiar with how CDNs work. I hit download multiple times and ...
1
vote
1answer
783 views

Has my Mac been compromised? [closed]

I am running NOD32 on a Mac running Leopard 10.5.8. When I visited a website, NOD32 automatically detected it as a virus. For some reason I was taken to bing.com and I got a "page not found" error. ...
2
votes
2answers
380 views

Apple Mac Security - What do I need to know?

As I've been working on Windows machines most of my life I know most of the best practices and apps to keep them secure. When it comes to security on Apple macs I'm clueless as to where to start.
0
votes
1answer
479 views

How does FileVault 2 work with multiple decryption keys?

With FileVault 2, you can encrypt the hard-drive such that users on the computer can decrypt it with either of their passwords How does this work?
7
votes
3answers
1k views

Who (which process) is calling curl?

On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server. Basically I installed little Snitch and find out that "somebody" is using curl periodically. ...