Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.
4
votes
2answers
260 views
Why did Apple think OS/X was virus proof?
In such articles as this one at Examiner.com, we see that Apple had long "advertised" the immunity of its desktop OS to viruses. It had to dilute that assertion when the Flashback virus appeared.
...
0
votes
1answer
67 views
What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]
I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
1
vote
4answers
72 views
Enforcing personal firewall for OS X
We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
5
votes
1answer
142 views
Guest user on Mac Book Pro is suddenly on. Was I hacked?
Today I restarted my Mac book Pro and the guest user was on when has always been off before.
-1
votes
1answer
66 views
Is there a way to get OS X to start a VPN connection before allowing network traffic? [closed]
I'm running OS X 10.8 and have Tunnelblick set up so I can connect to my OpenVPN server at home. I've also used this at $WORK in the past.
When I'm out and about and want to jump on a public network, ...
4
votes
4answers
2k views
How to detect KeyLogger on Mac OS X ?
I have a Mac OS X computer and I want to know if it has installed a Keylogger or something that control what I'm doing: when I switch on/off the computer, what I install on it, etc.
How can I know ...
-1
votes
2answers
3k views
Is it Possible to Dual Boot OSX Lion & Backtrack 5 R2 Smoothly? [closed]
I have a 13inch Macbook Pro i5 and I would like to duel boot backtrack 5 on it as my ram struggles a bit when I run it inside a virtualbox.
I have heard stories how it has borked the install on osx, ...
1
vote
2answers
72 views
Reseting my computer to uninstall LogKext
My friend downloaded LogKext on my computer, so I'm guessing he can see every keystroke, but I've reset my computer so that it's in a condition when I first opened from the box.
Can my friend still ...
4
votes
1answer
53 views
PKI integration in MAC OS
I have setup an ejbca pki and integrated certificates in MAC OS for S/MIME signing and encrypting. I have also set up a CRL distribution point and put the CRL online available on an HTTP server.
...
18
votes
3answers
590 views
What can an attacker do with Bluetooth and how should it be mitigated?
What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine?
...
-2
votes
0answers
106 views
History of RAT + Strange networking recently… was I hacked again? [closed]
(FYI, my PCs were infected and remote accessed in the past by a friend/stalker, & I’ve reinstalled the network few times already. Recently added Router#2 to double-NAT).
My network has 2 routers ...
5
votes
6answers
220 views
Safe to connect to external drive?
A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
2answers
130 views
“You have new mail” message
I received a message from Google saying someone entered my email account.
I confirmed that there were an access from an IP in another country.
I have noticed "You have new mail" message when I open ...
7
votes
6answers
2k views
How secure is FileVault 2 while the computer is in sleep mode?
How secure is Apples disk encryption FileVault 2 when someone has physical or network access while the computer in sleep mode or is running a screen saver? Are there ways to circumvent FileVault 2 ...
1
vote
1answer
257 views
I wonder if my MacBook Pro with OS X got hacked?
Maybe I am getting a little paranoid. Lately my MacBook Pro with Mac OS X 10.8.2 is behaving a little different the usual.
The last strange thing that happend was that in iTerm2 when I tried to sudo ...
2
votes
4answers
369 views
Apple ID Created With My Email Address
A little similar to this question. but rather than hack my email address someone has created an Apple ID with a gmail address that is similar to mine, but had dots '.' in it. For example if I have ...
6
votes
4answers
281 views
Can you really change the password to a mac on reboot without knowing the old one?
I was looking for answers for a configuration issue on my laptop but then I got to reading the answers to this post. There was one that troubled me slightly (the last one by Lauri) which says how to ...
1
vote
1answer
113 views
Did I get hit by the recent Java exploit?
Looks like the website iphonedevsdk was responsible for serving up the malware that's been causing some of the recent security exploits. According to my browser history, I visited that site back in ...
2
votes
1answer
193 views
Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2
Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads.
Is anyone aware ...
1
vote
1answer
57 views
Should users share OSX crash logs?
OSX stores app crash logs into ~/Library/Logs/DiagnosticLogs/appname_date.crash and optionally submits these anonymously back to Apple.
These contain a fair amount of debug info for the developer, ...
8
votes
1answer
323 views
How can I secure my log files?
I have a cool tool that displays my syslog and kernellog on my mac's desktop. This has me concerned about what is written in them - I'm staring to feel like they are creating a hole in my privacy. I ...
2
votes
1answer
396 views
Is there any way to list the contents of the iPhone/OSX Keychain and their security level?
I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone.
Since it's possible for keychain items to be bound to a device (and ...
1
vote
1answer
205 views
Macbook pro, rootkithunter
I've never really tried to understand rootkit enough, I'm too much paranoid...
I recently reinstalled mountain lion, but my EFI might be infected.
I have a macbook pro, it was really slow at some ...
1
vote
0answers
94 views
Swatch installation's issue to detect intrusion
I have installed snort and I want to use the swatch tool to send me an email when it detects something going wrong. I am using OSX and I followed the installation guide: ...
0
votes
1answer
4k views
Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
Does Kismac 0.3.3 (0.3.3) built on February 7th work on Mac OSX 10.8.2
It doesn't seem to scan for me.
Both are the latest versions as of today.
0
votes
2answers
158 views
Dealing with a (possible) virus on both MacOSX and iOS
The symptom:
On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page.
On iPhone, when navigating to google.com I get ...
2
votes
2answers
171 views
2
votes
4answers
1k views
Reverse engineering (decompiling) an .exe file in OSX
I am a complete newby in the reverse engineering world, and being able to decompile .exe files in my OSX is being a pain.
Does anybody know a good decompiler of .exe for OSX, or any hint about where ...
3
votes
1answer
172 views
How do I configure Terminal Server (and clients) for use over untrusted Wifi networks?
Suppose a client wants to directly connect to Terminal Server exposed to the Internet, without a VPN, ... what software & settings is needed to properly protect against WiFi based attacks? ...
6
votes
3answers
2k views
Is it possible for a phishing link to install a major virus on a Mac?
My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
-1
votes
1answer
106 views
Mac app purchase validation
How do I sell a mac app off of my website without somebody being able to copy-and-paste the app to some friends after he buys it, etc..
I understand that you can use receipt validation when selling ...
1
vote
3answers
966 views
How to set password on applications in Mac OS to prevent an administrator to start them?
Is there any program that can set password on the app like mail or browser? I know about parent control, but I doesn't work with administrator account.
What I want is some program that blocks some ...
0
votes
0answers
93 views
Can nmap out of MSF but can't within [closed]
I am running Mac OS X 10.7. In Metasploit, this is my version
msf > version
Framework: 4.5.0-dev.15713
Console : 4.5.0-dev.15672
But when I try nmapping on msf:
msf > db_nmap -A ...
1
vote
1answer
256 views
Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?
I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario:
"macbox" OS X using OpenSSH_5.2p1 ssh client
"sunbox" Solaris 10 ...
3
votes
1answer
83 views
Do public keys make Kerberos more secure (RFC4556)?
We're using IPA to centralize our authentication and I found an option to add a public key for each user. After doing a little research I found this to be an extension to Kerberos 5, RFC4556.
From my ...
6
votes
3answers
612 views
Who (which process) is calling curl?
On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server.
Basically I installed little Snitch and find out that "somebody" is using curl periodically.
...
1
vote
3answers
621 views
How to secure data before returning Macbook Air?
I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...
2
votes
1answer
298 views
VMWare Fusion Encryption and Snapshotting
VMWare Fusion 5 has an encryption feature that I have enabled, with what I would consider a hard-to-brute-force-crack password.
How secure is the data in this VM? If I shut down the VM each time ...
0
votes
1answer
640 views
Is OSX or Mac hardware used in the InfoSec world? What resources are available? [duplicate]
Possible Duplicate:
Mac OS X from an IT Security Practitioners' Perspective?
I'm new to the OSX world (formerly Windows background) and am interested in understanding what is or isn't ...
2
votes
2answers
1k views
How to block all access to Akami deploy servers and Apple push servers?
I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like:
a23-33-37-54.deploy.akamaitechnologies.com
...
4
votes
4answers
384 views
What do you do to protect data on a Macbook in the event of theft/loss of the device?
What setup do you recommend to protect data on a MacBook in the event of theft/loss of the device?
I'm specifically interested in Macs here, rather than laptops generally, and in concrete ...
3
votes
1answer
241 views
Does setting a firmware password add security if FileVault 2 is enabled?
On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
3
votes
2answers
267 views
Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?
OS X 10.8 comes with GateKeeper, which basically has three settings:
Allow only apps from Mac App Store
Allow only apps from Mac App Store or that are signed with a valid Apple Developer certificate
...
1
vote
1answer
919 views
SQL Injection tool (Mac OS X)
Do you know any software for searching (analyze) SQL injection (on website) from Snow Leopard ?
I have found some that can run from Linux or Windows.
I understand that most Linux (console) ...
3
votes
2answers
180 views
Chrome: Found a crash, is it a security vulnerability?
I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability.
How can I determine if a Chrome ...
2
votes
3answers
395 views
Apple FileVault — would Apple build a backdoor?
Could Apple build a backdoor into it's FileVault encryption technology? Is that a risk you take of using a closed-source encryption product in general? Would using something like TrueCrypt be more ...
5
votes
2answers
999 views
Need help identifying the OSX process that's generating strange network traffic
Since the past few days, I noticed that my router was a bit slow, and was restarting by itself at times. When looked at it's logs, they had entries like:
Friday Jul 13 13:09:02 2012 1 Blocked by DoS ...
2
votes
2answers
498 views
LDAP Security problems?
I have installed many Active Directiory based networks and have applied various standard security templates based on best practices, however I have never really looked at LDAP on a deeper level and ...
0
votes
1answer
284 views
Securing firewalls for XAMPP on Mac OS X
I've recently installed XAMPP on my Mac OS X 10.6.8, and this has caused me to reevaluate how I have my firewall setup. Right now I am using the two firewalls that came pre-installed on my computer:
...
4
votes
1answer
242 views
SSL protocol issues on OS X and iOS
I have a PfSense box as a UTM, running snort among other things. I started noticing that when MacBooks and iPhones/iPods connect to my network, the snort log gets flooded with this message:
...
