Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

3
votes
1answer
625 views

Mac sending hundreds of packets to gateway

I've got a user on my work network who brings her personal laptop (macbook) in for work. They've been having some horrendously slow network issues on everything past that hub, so I did some packet ...
2
votes
5answers
1k views

Apple ID Created With My Email Address

A little similar to this question. but rather than hack my email address someone has created an Apple ID with a gmail address that is similar to mine, but had dots '.' in it. For example if I have ...
2
votes
1answer
242 views

FireFox Download Source

While downloading the latest version of Firefox for Mac, i took a peek at the source. The names don't look legit but i am not that familiar with how CDNs work. I hit download multiple times and ...
2
votes
2answers
173 views

Is OSX vulnerable / susceptible to Gameover Zeus

I've heard a TON of vague info on Gameover Zeus recently. One detail I can't seem to find is if it affects OSX? when I say I can't find it I mean from a credible source. I've found loads of people ...
2
votes
1answer
474 views

Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2

Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads. Is anyone aware ...
2
votes
2answers
263 views

Checklist for securing MacOSX

Is there a checklist for securing MacOSX machines?
2
votes
1answer
106 views

Capturing iTunes traffic with Wireshark - SSL decryption question

I'm fooling around with Wireshark to capture the activation packets for an iPhone and some other stuff, however the traffic is encrypted. There should be a private SSL key somewhere on my computer to ...
2
votes
2answers
31 views

Is there a website or other resource that lists operating systems/platforms and the included root certificates?

I need to choose a certification authority (CA), to get a certificate, but I noticed that there are several of these only present in some operating systems/platforms like windows. I need to choose one ...
2
votes
1answer
93 views

How can I check if a Mac application has NX or ASLR enabled?

According to Wikipedia, the NX bit is set for all x64 binaries: OS X for Intel supports the NX bit on all CPUs supported by Apple (from 10.4.4 – the first Intel release – onwards). Mac OS X 10.4 ...
2
votes
1answer
135 views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If ...
2
votes
1answer
2k views

Is there any way to list the contents of the iPhone/OSX Keychain and their security level?

I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone. Since it's possible for keychain items to be bound to a device (and ...
2
votes
1answer
818 views

VMWare Fusion Encryption and Snapshotting

VMWare Fusion 5 has an encryption feature that I have enabled, with what I would consider a hard-to-brute-force-crack password. How secure is the data in this VM? If I shut down the VM each time ...
2
votes
2answers
391 views

Apple Mac Security - What do I need to know?

As I've been working on Windows machines most of my life I know most of the best practices and apps to keep them secure. When it comes to security on Apple macs I'm clueless as to where to start.
2
votes
1answer
10k views

kadmin problem: “Client not found in Kerberos database while initializing kadmin interface”

I'm having problems setting up Single Sign On on my Mac (Snow Leopard). My program was giving the error accept_sec_context: Unspecified GSS failure. Minor code may provide more information: \ Key ...
2
votes
1answer
167 views

Swatch installation's issue to detect intrusion

I have installed snort and I want to use the swatch tool to send me an email when it detects something going wrong. I am using OSX and I followed the installation guide: ...
2
votes
1answer
4k views

How to block all access to Akami deploy servers and Apple push servers?

I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like: a23-33-37-54.deploy.akamaitechnologies.com ...
2
votes
0answers
226 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure ...
2
votes
0answers
802 views

What is a self-contained cross-platform encryption for USB drive? [closed]

I'm trying to find self-contained encryption solution for USB drives while at the same time being platform independent. For example, Windows' BitLocker only works on Windows and not on OS X or Linux. ...
2
votes
2answers
298 views

Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?

OS X 10.8 comes with GateKeeper, which basically has three settings: Allow only apps from Mac App Store Allow only apps from Mac App Store or that are signed with a valid Apple Developer certificate ...
1
vote
2answers
76 views

Difference between OS X md5 and gnu md5sum

I have installed the "md5sum" utility on my Mac and there was also a "md5" binary pre-installed in /sbin. My problem and question is this: "Isn't MD5 a standard algorithm?" Because I get different ...
1
vote
2answers
69 views

What's there to harden for a home Unix-box behind Comcast cable modem?

I'm learning that much of the security advice I come across under the "hardening" heading simply does not apply to a single-user home desktop box sitting in a private wireless IPv4 LAN behind a ...
1
vote
2answers
199 views

In what sense is Knock to Unlock safer than a password?

I've recently seen a youtube video, which is advertising an iphone app which will unlock your mac computer by knocking on your iphone. The ad is claiming that it is faster and safer than typing your ...
1
vote
2answers
1k views

TCP / UDP port monitoring programs for mac?

Does anyone know of a free and effective port monitor for mac? Also, can a laymen, in relatively short order, learn to use such software to detect and thus prevent unauthorized remote access/control ...
1
vote
2answers
184 views

How should I diagnose a macintosh laptop running OS X Lion 10.7.5 automatically booting at 12:00:09 sharp every night?

Using the "Console" app within OS X and viewing the "syslog" file I can see the user shutdown their laptop (it was a HALT operation) around 10:22PM. For some reason, 9 seconds after midnight ...
1
vote
2answers
656 views

Reseting my computer to uninstall LogKext

My friend downloaded LogKext on my computer, so I'm guessing he can see every keystroke, but I've reset my computer so that it's in a condition when I first opened from the box. Can my friend still ...
1
vote
1answer
12k views

Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2 [closed]

Does Kismac 0.3.3 (0.3.3) built on February 7th work on Mac OSX 10.8.2 It doesn't seem to scan for me. Both are the latest versions as of today.
1
vote
2answers
224 views

Dealing with a (possible) virus on both MacOSX and iOS

The symptom: On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page. On iPhone, when navigating to google.com I get ...
1
vote
3answers
1k views

How to set password on applications in Mac OS to prevent an administrator to start them?

Is there any program that can set password on the app like mail or browser? I know about parent control, but I doesn't work with administrator account. What I want is some program that blocks some ...
1
vote
3answers
1k views

How to secure data before returning Macbook Air?

I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...
1
vote
2answers
2k views

SQL Injection tool (Mac OS X)

Do you know any software for searching (analyze) SQL injection (on website) from Snow Leopard ? I have found some that can run from Linux or Windows. I understand that most Linux (console) ...
1
vote
1answer
806 views

Has my Mac been compromised? [closed]

I am running NOD32 on a Mac running Leopard 10.5.8. When I visited a website, NOD32 automatically detected it as a virus. For some reason I was taken to bing.com and I got a "page not found" error. ...
1
vote
2answers
2k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my system.log Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate Apr 25 22:20:57 Ivans-MacBook-Pro.local apsd[194]: ...
1
vote
1answer
93 views

Hardening Services, Ports on OSX

People boast about OSX Security, yet I find it very hard to find a comprehensive manual in regards to any equivalent Services and the ports they use. I am aware of lanchd and launchctl and Lingon is ...
1
vote
1answer
3k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
1
vote
1answer
513 views

Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?

I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario: "macbox" OS X using OpenSSH_5.2p1 ssh client "sunbox" Solaris 10 ...
1
vote
1answer
52 views

Can any malware access the OSX keychain data

I'm working on a security project. I have sensitive data that I would like to store in OS X's keychain. I'm able to add the data programmatically into the OS X keychain by using RHKeychain. But after ...
1
vote
1answer
63 views

Can I reliably identify Apple devices that have not patched against the gotofail vulnerability based on user agent string?

The title pretty much says it. Do the security patches to address the gotofail security issue in multiple Apple products employing SSL change the User Agent string for the respective systems? And, of ...
1
vote
1answer
180 views

Why are OSX users of my TLS-only site being asked to supply a client certificate?

I purchased a Comodo SSL certificate (OV), and set up the Apache vhost config so that all traffic is forwarded to 443. Intermittently some users are being prompted to supply a client certificate; ...
1
vote
1answer
113 views

Why is ICMP timestamping disabled on OS X?

It would seem like ICMP timestamping is quite a useful feature for troubleshooting networks with asymmetric paths. Replies to icmp(4) timestamp requests are generated by the kernel: On OpenBSD, the ...
1
vote
1answer
210 views

How is the FileVault master key protected?

FileVault has the functionality to both allow and disable user accounts from booting up the encrypted drive. Reference: this cnet article. See also the stack exchange question How does FileVault 2 ...
1
vote
1answer
457 views

I wonder if my MacBook Pro with OS X got hacked?

Maybe I am getting a little paranoid. Lately my MacBook Pro with Mac OS X 10.8.2 is behaving a little different the usual. The last strange thing that happend was that in iTerm2 when I tried to sudo ...
1
vote
1answer
77 views

Should users share OSX crash logs?

OSX stores app crash logs into ~/Library/Logs/DiagnosticLogs/appname_date.crash and optionally submits these anonymously back to Apple. These contain a fair amount of debug info for the developer, ...
1
vote
1answer
347 views

Macbook pro, rootkithunter

I've never really tried to understand rootkit enough, I'm too much paranoid... I recently reinstalled mountain lion, but my EFI might be infected. I have a macbook pro, it was really slow at some ...
1
vote
0answers
27 views

To which extent are paid alternatives to Apple's Xprotect worth it?

Mac OS X ships with Xprotect, Apple's mechanism to detect and remove malware. System software security holes are patched decently quickly. In a world of fragmented, code-signed, sandboxed apps, what ...
1
vote
0answers
366 views

Adobe Install Redirect

I have heard of the Flash virus floating around, but after reading more I do not believe I have it. When I go to http://get.adobe.com/flashplayer/ So that I can update, 'Install Now' will redirect ...
1
vote
1answer
183 views

Intrusions attempt monitoring (on MacOS X) [closed]

I know utilities such as last exist - but not sure if it's applicable for my needs - I'd like a system to notify me of any login attempts on any of my macs (home, work or remote). Attempts from a ...
0
votes
2answers
229 views

“You have new mail” message

I received a message from Google saying someone entered my email account. I confirmed that there were an access from an IP in another country. I have noticed "You have new mail" message when I open ...
0
votes
2answers
183 views

Random File downloaded

Okay so I was setting up stuff on my new mac earlier, downloading flash and office. They both downloaded and installed smoothly, but after I noticed a weird new file in my 'downloads' folder: ...
0
votes
1answer
41 views

How can a critical Adobe Acrobat security update, only available as an unsigned executable over plain HTTP, be verified?

A critical security update for Adobe Acrobat Pro and Standard 9 on Mac OSX is only available over HTTP, and is unsigned code. Is there any out-of-band way to verify the download is authentically from ...
0
votes
1answer
104 views

I get the feeling that Microsoft and Mac use two different forms of AES

I have an AES string being produced with this class, the AesCryptoServiceProvider Class provided by Microsoft. And I need to decode this encryption with Ruby's SSL::Cipher class . The problem is ...