Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

0
votes
1answer
24 views

aircrack-ng fed with crunch taking ages

I'm trying aircrack-ng attack like below: crunch 1 2 -f /usr/local/Cellar/crunch/3.6/share/charset.lst mixalpha-numeric|aircrack-ng -b 90:F6:52:80:B9:E2 -w - ~/DumpLog* ⋮ Crunch will now generate the ...
47
votes
4answers
9k views

Isn't OS X's Single-User Mode a bad idea?

Recently, I had a Mac which fried its video logic board. Luckily, Apple had concluded that this was a design flaw and was fixing the affected models for free (see more here). However, I did not find ...
0
votes
0answers
16 views

Suspicious Active Internet connection in Netstat [migrated]

I recently discovered the tool netstat on my Macbook Pro terminal and there are a lot of these connections that seem to be allowing any ip and any port to connect to my machine. Is this a sign of ...
7
votes
1answer
206 views

Encrypting individual files on OS X

I am about to go paperless, and I want to protect the documents that I scan. The use case is that I'll be scanning paper documents, encrypting each file, and storing them locally and on various backup ...
3
votes
4answers
261 views

I didn't wipe my hard drive before I sold it. How would a criminal take advantage?

I just sold a Mac Mini, and I erased/formatted the hard drive before I turned it over, but I didn't wipe it securely (not wise, I know). How would a criminal take advantage of this fact? What is the ...
0
votes
0answers
8 views

How to configure Tor browser without Vidalia on Mac OS X? [migrated]

I have a problem with finding a configuration file for my downloaded Tor browser bundle (the default installation from project webpage). I want to adjust some advanced settings for my Tor browser, and ...
0
votes
0answers
10 views

Security of encrypted data on Mac and multiple accounts on same computer

I'd like to use Boxcrypter to encrypt files shared via iCloud (OS X 10.11). The computer is connected to a network and my account is a network account. While the computer is primarily used by myself, ...
3
votes
1answer
26 views

missing ESSID from aircrack-ng

I'm using Mac OS X and I was able to sniff packet from my homeNetwork (in order to learn more about how things goes on). I'm sending a deauth command to all my devices to disconnect them and then ...
1
vote
0answers
73 views

Is this cascading encryption, and is my security weakened as a result?

I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
0
votes
0answers
31 views

Variant of OSX.pirrit

Today while working with a customer, Someone came in with a peculiar problem. They could only access websites through https, and nothing through http. I tried the regular gauntlet of fixes for network ...
3
votes
1answer
2k views

Why does the tool 'codesign' in OS X 10.11 (El Capitan) report every Python process as “code object is not signed at all”?

If you start any Python process on OS X 10.11 (10.11.0 or 10.11.1) El Capitan, and run the OS built-in tool 'codesign' to verify the process, you will receive an error saying "code object is not ...
1
vote
2answers
294 views

How to route all traffic through TOR?

I have TOR setup on my macbook and I configured my wifi connection to use TOR's SOCKS Proxy that is running on port 9050. When I check my connection it confirms I am browsing through TOR. However, ...
2
votes
2answers
3k views

How to create a OSx pen testing environment

I currently use OSx Maverick, I wish to use this machine as my pen testing machine as I also prefer coding on this machine. My current pentest machine is running Kali. Can anyone give me good tips on ...
11
votes
1answer
504 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure ...
1
vote
2answers
175 views

Would a RansomWhere application be possible for Windows too?

This is related to RansomWhere? which is a OS X specific defense developed by a former NSA employee. The premise is that it will "generically" stop ransomware from encrypting files on the OS. ...
2
votes
1answer
44 views

OS X 10.6 and known unpatched vulnerabilities

Apple is not renowned for publishing clear end-of-support announcements for their products. In our network (a big university) we have strict policies and we do not allow unpatched systems. We were ...
38
votes
5answers
45k views

What can an attacker do with Bluetooth and how should it be mitigated?

What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine? ...
2
votes
0answers
33 views

Was the OSX/iOS Airdrop flaw real?

One exploit has caught my eye, mainly due to the possibility of malware incorporating it infecting businesses and schools. This exploit is, as you may have guessed from the title, the OSX/iOS Airdrop ...
1
vote
1answer
72 views

Stronger Password-based File Encryption on OS X [closed]

I am wondering if there are any better alternatives than the zip command on the OS X terminal. My intention is to add a password to a compressed file. I have been using: zip -j -e -pMY_SECRET ...
3
votes
2answers
106 views

How Does A Hacker Send Spam Emails from Gmail with Two Factor Turned On?

We recently had an incident where two-factor authentication was enabled on a Gmail account but the account was sending spam messages. The device login activity shows no abnormal devices accessing the ...
8
votes
4answers
1k views

What FDE (with hardware encrypted drives) for OS X works?

I'm trying to get all of our laptops doing FDE (as I'm sure lots of you are), and I've run into a problematic spot. Our Windows and Linux laptops are Dells, and they have some good BIOS integration ...
7
votes
1answer
331 views

How can CVE-2016-2324 and -2315 be mitigated on Mac OS X?

The recent git remote execution vulnerability states all git clients with version <2.7.1 are vulnerable and that most linux distributions have included the fixes already. However, as of today, ...
4
votes
2answers
786 views

Is there any known encrypting ransomware that attacks Macs?

Just about every article I read about Cryptowall, Cryptolocker, and its ilk seems to assume that the reader is running some flavor of Windows. When I Google "ransomware OSX", I get a long list of ...
0
votes
0answers
28 views

when/how does an encrypted volume .dmg change to reflect the file system it stores

I'm trying to verify that storing a .dmg file stays encrypted while only the mounted file system is unencrypted (see here). My thought was to create a .dmg containing a text file, make a copy of the ...
0
votes
1answer
40 views

Potential FileVault problems in my setup

After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup: AppleID is connected to local account I don't remember exactly, but I think I have selected option "Allow ...
5
votes
5answers
220 views

VPN with client certificate via managed PKI - where did private key come from?

$company allows Mac users to request a client certificate via Symantec PKI to connect to their SSL VPN server. This process involves going to a specific Symantec website (has some sort of ID to ...
1
vote
0answers
35 views

Why doesn't homebrew fix file access problems by itself?

Before I took ownership of /usr/local, "brew link" caused a "/usr/local/..." not writeable. Is there any particular security reason why the program didn't say something like "The operating system ...
0
votes
1answer
149 views

Is that possible for Linux and windows machines to be infected with KeRanger ransomware?

According to theguardian The Transmission site offers the open source software that was infected with the ransomware called KeRanger malware, it's programmed to encrypt files on an infected personal ...
-1
votes
2answers
68 views

Nmap - host discovery doesn't show all hosts

I tried to scan my network for hosts. However, it seems like it didn't scan the MAC. I tried all kinds of TCP and UDP scans on different kind of ports but the hosts doesn't show up. It's strange ...
2
votes
2answers
200 views

How can I protect myself from “ransomware” attacks like the one that affected Transmission users?

The downloader for version 2.90 of the Transmission BitTorrent client was infected by a piece of malware called KeRanger, which encrypts files on your computer and demands a one-Bitcoin ransom to ...
0
votes
3answers
113 views

What implications does the KeRanger infection have for Mac OSX security?

Recently some hackers replaced installers for a popular torrent client with an infected version. According to paloaltonetworks, they have no idea how the hackers managed to do this (let's just assume ...
0
votes
1answer
428 views

Fishy: VMware sends all traffic through akamai

I'm running Linux inside of VMware on the Mac, and on Linux I'm running a program that has connections open to perhaps 4 different machines. On the OS/X side however VMware has only 1 active network ...
16
votes
3answers
5k views

Running windows in virtual machine, should I bother with security?

I'm running Windows in a virtual machine on my mac (via Parallels). Should I bother installing antivirus, firewall and using other conventional wisdom practices (like don't open unknown .exe etc)? I ...
1
vote
0answers
64 views

How to react to the glibc vulnerability as an OSX user? [duplicate]

Apologies if this question isn't really fit for this SE site. Wasn't sure whether to post it here, or on apple.SE. What's the currently best way for a user of OSX to react to: ...
7
votes
3answers
363 views

How secure is OS X's Keychain access control?

On OS X, when an application requests access to a Keychain item, the user is prompted whether to grant or deny that access. Supposedly, the system saves not only the binary path, but also its hash in ...
3
votes
1answer
78 views

How can I view images in forwarded packets on (current) Mac OS X?

How can I view reassembled images on a Mac being used as a router? I'd like to do this as a demonstration of how HTTP doesn't provide privacy. I've done some research, and on Linux there's a tool ...
3
votes
0answers
36 views

Where could the iOS security key be stored on the hard drive, *if printed* when enabling 2 Factor?

Apple allows people to print out their recovery key when enabling two factor. Taking the assumption that the local spooler may not do a great job of protecting, secure erasing, and eliminating traces ...
5
votes
1answer
459 views

Is Adobe Flash Player installer redirect due to a malware?

When I go to http://get.adobe.com/flashplayer/ 'Install Now' will redirect me to their homepage without downloading the update or any explanation. What could be going on? Is some malware ...
6
votes
4answers
557 views

What do you do to protect data on a Macbook in the event of theft/loss of the device?

What setup do you recommend to protect data on a MacBook in the event of theft/loss of the device? I'm specifically interested in Macs here, rather than laptops generally, and in concrete ...
2
votes
1answer
43 views

What full-disk secure erase solutions exist for SSDs (OS X)? [duplicate]

I want to back up the contents of my Macbook before encrypting it, but after I'm done, I would like to sanitize the SSD that I have backed up my files to, since it will be unencrypted (no point ...
1
vote
0answers
23 views

How do I stop MacBook port scanning & fragment packet attacks

How can I stop OSX El Capitan from port scanning and stop fragmented packet attacks?
1
vote
0answers
34 views

Under what conditions does Safari have access to the Keychain?

The Keychain is shared among many different apple products and includes asymmetric, symmetric, and other types of security data. People who use iCloud, and also enable the keychain synchronization ...
0
votes
1answer
16 views

What is the accessibility of a process's environment on OS X?

Are the environment variables of a process running on a modern OS X system accessible to other processes? If so, is this information accessible only to the same user and root? This answer from Gilles ...
1
vote
2answers
88 views

Why does nmap remotely show when I have port 6969 open, but not others?

Specifically, I was running a node.js application on port 6969 which I thought was strictly local. I discovered this was not the case when I ran nmap <myip> from a different computer and found ...
7
votes
1answer
589 views

OSX HomeBrew Security Risks

I've been trying to harden my OSX 10.11 computer and one of the guides suggested installing Homebrew to get updates to things such as OpenSSL. While updates are great, it seems like Apple should be ...
1
vote
2answers
306 views

Spoofing TCP/IP stack OS Fingerprinting attacks in OSX

We need to change our OSX fingerprint in order to impersonate the Android OS against "passive OS fingerprinting" attacks. For Windows machines there are tools/guides for doing that, but can't find ...
0
votes
0answers
337 views

Tradeadexchange everywhere. On my mac, android and every browser

The tradeadexchange malware seems to have infected me in every possible way. It pops up new tabs whenever I am browsing on my Mac or Android devices, and also in any browser-Firefox/Chrome/.. ...
-2
votes
1answer
179 views

Can someone bruteforce my OSX? (Macbook)

Is it possible for someone to bruteforce or perform a dictionary attack on a Macbook? It's very easy to bypass security of a Windows box (Password Protection) , what is the difficulty level of ...
8
votes
3answers
517 views

Secure cleaning of deleted files

So I know how to secure delete files. But at our company, we have a laptop which had many important documents, which now have been deleted, but not in a secure way. We can't perform a full format of ...
1
vote
0answers
1k views

How do I view the signature of an iOS application?

OSX had an issue where the certificate was expired and several apps could not be opened after that date. The command above illustrates how this could have been detected. Does iOS have a similar ...