Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

0
votes
0answers
10 views

Executing ELF binaries in OSX [migrated]

I have a CTF related question and I was wondering if someone can point me to the right direction. I work on OSX Yosemite and I was going through some wargames and older CTF challenges. My goal is to ...
4
votes
2answers
46 views

Are X.509 nameConstraints on certificates supported on OS X?

I have the following "chain" of certificates on a test machine right now: A self-signed CA cert, in my Keychain and trusted & trusted by Firefox. A CA cert with with the following, X509v3 Name ...
2
votes
2answers
68 views

How to track down and remove Mac malware that is calling out?

Little Snitch periodically brings up a dialog that says: Terminal via node wants to accept an incoming connection from X on port 3000 (remoteware-cl). X are different IPs in eastern europe. A full ...
3
votes
1answer
105 views

How is Facebook accessing my iPhone texts in order to recommend friends?

I have noticed that Facebook has been recently recommending people who have texted me. It has been able to connect their number (I believe most of these people are using iPhone) and connect their ...
2
votes
1answer
62 views

Patching Mac DMA attack

I want to know a few things about the blackhat attack that attacks thunderbolt. Is there anyway to wipe or patch a currently infected computer? I am not versed per se in THAT level of security. I was ...
4
votes
4answers
260 views

Can the FBI or government agencies decrypt my hardrive and/or force me to give them the password?

I have seen other TrueCrypt questions as well "Windows encryption with BitLocker" and "Mac OSX encryption with FileVault". Does the FBI/NSA or other government agencies have access to my data or can ...
1
vote
2answers
57 views

If there is a malicious attack on one partition, is the other one safe?

I recently have used Bootcamp to set up a new partition and run Windows 7. About half of my HDD is designated to my OS X partition and the other half is allocated to the new Windows 7 partition. If ...
2
votes
1answer
147 views

Is there any known encrypting ransomware that attacks Macs?

Just about every article I read about Cryptowall, Cryptolocker, and its ilk seems to assume that the reader is running some flavor of Windows. When I Google "ransomware OSX", I get a long list of ...
3
votes
5answers
345 views

Enforcing personal firewall for OS X

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
5
votes
2answers
384 views

Questions on true anonymity

I am going to use Tails to connect to Tor through VPN which has AES-256 data encryption, SHA-256 data authentication and RSA-4096 handshake encryption on my Mac on my school's WiFi (as public as I can ...
2
votes
1answer
51 views

How to determine which program accessed the Mac Camera?

The green light on my laptop's camera just flashed on and then off after 1 second. I am extremely concerned about this since I am not running any programs which could have enabled the camera. I ...
3
votes
2answers
638 views

Chrome showing SSL warning about SHA-1 when the sites don't use SHA-1

My version of Chrome on an iMac (latest 43.0.2357.130 (64-bit)) is showing an SSL warning for well-known sites (Hackernews, GitHub, DigitalOcean): This site uses a weak security configuration ...
2
votes
0answers
16 views

Is XSP suitable for Internet facing, production hosts? (either self hosted, as an Apache plugin, or FastCGI)

XSP is portable version of ASP.NET that allows for operation on OSX, Linux, and Windows. It's an alternative to IIS, and hosts its own web server, or can plug into existing web servers such as ...
8
votes
2answers
316 views

How does the DYLD privilege escalation vulnerability work on OS X?

Just reading about the DYLD privilege escalation vulnerability reported by Stefan Esser at https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html I understand this allows anyone to ...
3
votes
2answers
84 views

Can you use ssh for secure inter app communication on the same device?

I use ssh to get an encrypted connection between servers and local machines all the time. It's fast, it's secure, and there's a way to do it in nearly every system programming language that I've used ...
1
vote
1answer
494 views

Is the 'SUIDGuard' patch safe to implement?

Can someone who really knows what they're looking at advise whether the patch published here by Stefan Esser is in fact safe to install? While I'm very concerned that Apple haven't published an ...
2
votes
1answer
82 views

Is FileVault 2 HIPAA compliant?

It looks to me like FileVault 2 uses AES 256 bit encryption for the desk. Does that mean that it meets the HIPAA "data at rest" standard? Is there something else I need to check about it?
1
vote
1answer
67 views

CryptoAPI to CommonCrypto with RC4

I have cryptographic code used in the Windows platform, which uses the Crypto API functions and need to convert this to using Common Crypto on OS X. Essentially the original code is this, with error ...
1
vote
2answers
559 views

Macbook pro, rootkithunter

I've never really tried to understand rootkit enough, I'm too much paranoid... I recently reinstalled mountain lion, but my EFI might be infected. I have a macbook pro, it was really slow at some ...
1
vote
2answers
5k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my system.log Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate Apr 25 22:20:57 Ivans-MacBook-Pro.local apsd[194]: ...
8
votes
4answers
1k views

What FDE (with hardware encrypted drives) for OS X works?

I'm trying to get all of our laptops doing FDE (as I'm sure lots of you are), and I've run into a problematic spot. Our Windows and Linux laptops are Dells, and they have some good BIOS integration ...
1
vote
2answers
2k views

CloudFlare - prompted for “attention required”

I am getting a CloudFlare - attention required / security check prompt on most of the sites I visit through my Macbook running OS X Yosemite, these sites work perfectly on other devices (such as iPad, ...
15
votes
7answers
4k views

Convenient cross-platform help on checking secure hashes like SHA-256

It is often helpful to be able to obtain a good cryptographic checksum of a file, e.g. the SHA-256 hash. This can be used to verify file integrity, so long as you have a reliable source for the hash. ...
0
votes
0answers
50 views

Forensics: Any legitimate reason for code injection in artifacts?

I have two images I'm analyzing using volatility. I've found two instances where malfind found injected code in processes in which the code had well defined function prologues and returns. One was ...
1
vote
3answers
103 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...
4
votes
1answer
241 views

Sites are signed with an incorrect VeriSign Class 3 G5 CA

Previously today, I encountered a SSL error trying to access twitter.com in Chrome. Investigating the issue, I encountered the same error accessing discussions.apple.com. Most other HTTPS sites were ...
3
votes
1answer
175 views

How do I enable support for Cryptographic Message Syntax (CMS) in OpenSSL on OS X?

I want to use the Cryptographic Message Syntax (CMS) of OpenSSL as documented on https://www.openssl.org/docs/apps/cms.html on OS X. When I try to run openssl cms I get the following error: $ ...
0
votes
1answer
273 views

Chromium Sandbox on Mac OSX: Is it enabled by default?

I have decided to finally replace the closed source and privately owned Google Chrome with the open-source Chromium on my Mac OSX 10.9.2 (Mavericks). I have read the differences between both here: ...
0
votes
1answer
91 views

Suspicious wifi networks from distant places and hotels

When I check my Macbook's network settings, I see some unfamiliar wifi networks from distant places like famous hotels. It's impossible to connect to those networks because I've never been to those ...
4
votes
2answers
2k views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
4
votes
2answers
367 views

Password entry on OS X and keyloggers

There's several places in my ‘personal security infrastructure’ (is there a better phrase for that?) where I find myself typing very important passwords into text-fields on OS X (for instance, ...
1
vote
1answer
56 views

Block An IP Address Scanner On Mac [closed]

I'm working on an prototype that can spot network scanners, which is working and it spits out the IP address of the scanners, but I need to block them now. Is there any way to block an IP address ...
4
votes
2answers
304 views

How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?

I've read the disclosure post by Emil Kvarnhammar of TrueSec (Hidden backdoor API to root privileges in Apple OS X) and I'm trying to confirm whether I'm vulnerable or not. After creating an ...
2
votes
1answer
91 views

native mac malware opening urls across all browsers

I'm a security newbie so please excuse the solely high level symptomatic description of my problem. My friend doesn't know how he got it, but he has some form of malware on his mac which, when he ...
7
votes
3answers
45k views

How do I detect malware on Mac OS X?

I have a computer running OS X, and I want to know if there's malware (e.g. a keylogger, or something that lets an attacker control my computer, or something that stops me from installing whatever I ...
1
vote
1answer
834 views

How to create a OSx pen testing environment

I currently use OSx Maverick, I wish to use this machine as my pen testing machine as I also prefer coding on this machine. My current pentest machine is running Kali. Can anyone give me good tips on ...
4
votes
1answer
90 views

Xcode's git still vulnerable (CVE-2014-9390)? What's the best practice here?

In December everyone and his grandmother were talking about CVE-2014-9390 and we were all busy installing the git maintenance releases. Looking at my Xcode installment today - 41 days later - I still ...
4
votes
2answers
161 views

Is there a way to check for “hollow” processes, or malware hidden within “normal” processes

I recently came across an article on the The Verge, which centers around the concept of commercial malware production and how it's used around the world. The article introduced me to a number of ...
0
votes
2answers
262 views

OSX Yosemite and Security/Privacy

I currently have a Macbook Pro running OSX Mavericks, being the skeptic that I am I always wait a bit before upgrading to 'new' OS versions when they are released to see how they fare both stability ...
0
votes
1answer
126 views

Need To Use Live CD With Mac without Shutting Down Computer (VMWare/Parallels Secure?) [closed]

I've heard of using Live CDs such as Tails to protect yourself online. Is there a similar setup to this that would work except run a Mac OS? I've done some searching, but have yet to find anything. ...
0
votes
1answer
351 views

At Starbucks, is my MAC address sent when I accept the terms of service for free Wifi? [closed]

Recently, I overheard by chance some technically savvy guys saying that when you accept the terms of service in order to use the "free" WiFi at Starbucks (which you pay for when you buy some coffee), ...
5
votes
4answers
722 views

How to keep Mac secure from viruses, malware and keyloggers?

How can I download and install software and make sure that it is not infected with viruses, malware or a keylogger? Also, I heard that Macs "don't get viruses". Is this true? Is it a good practice to ...
0
votes
1answer
85 views

On my MacBook, is my user password now the Achilles heel of disk encryption?

From a cold boot, the only password needed to unlock the primary encrypted volume on my MacBook's SSD is just that of my main admin user. This was not always the case; it used to be that I could ...
13
votes
1answer
2k views

Does the GHOST vulnerability affect Macs?

Although the vulnerability targets Linux, I have read that it is really a glibc vulnerability, and some sites suggest that one should install a fix on any platform. I know that there are a lot of ...
7
votes
1answer
3k views

Guest user on Mac Book Pro is suddenly on. Was I hacked?

Today I restarted my Mac book Pro and the guest user was on when has always been off before.
2
votes
5answers
1k views

Apple ID Created With My Email Address

A little similar to this question. but rather than hack my email address someone has created an Apple ID with a gmail address that is similar to mine, but had dots '.' in it. For example if I have ...
2
votes
0answers
282 views

Fosshub as an alternative to sourceforge for osx open source project, is it safe to use? [closed]

I want to download a well known open source app for OSX (security/encryption related), but I don't want to use Sourceforge for my download because I'm worried about malware. This is the second time ...
0
votes
0answers
369 views

How to configure ettercap-ng's etter.conf to use sysctl instead of ipfw for sslstrip plugin to work on OSX Yosemite?

When I run ettercap-ng with sudo ettercap -Tq -i en1 -M arp /// I get the an error based on ipfw from the etter.conf file, like this: WARNING: ...
0
votes
1answer
168 views

Can any App Store app access all of my passwords?

Whilst researching another question, I've noticed that on OS X 10.9.4 there are many instances of Library/Keychains/login.keychain from ~ within the Data folder of what looks like apps from Apple App ...
7
votes
4answers
1k views

Verify Mac firmware is not hacked…how to do?

I have a late model Mac computer. I allowed someone to plug in a USB drive, and my network activity changed afterwards. Normally, Little Snitch will report every app that uses the internet. Every ...