Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

-1
votes
1answer
38 views

Can I used the command line to disable settings in Yosemite that have made my Mac visible?

Recent changes to my machine as the result of an upgrade to Yosemite (OS X 10.10) have made my machine visible on Bluetooth and Bonjour, where it was not visible before. Is there a command line way ...
17
votes
6answers
3k views

How can I protect my computer from my potentially malicious colleagues?

So, I work in this small company (10 people) where we do stuff in programming, for various platforms. I started recently working there (2 months) right after I graduated. My work is not exactly ...
2
votes
1answer
67 views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
0
votes
1answer
92 views

Can any App Store app access all of my passwords?

Whilst researching another question, I've noticed that on OS X 10.9.4 there are many instances of Library/Keychains/login.keychain from ~ within the Data folder of what looks like apps from Apple App ...
-2
votes
2answers
48 views

Can my Mac be affected without running the malware?

Can my Mac be affected by malware without running it? For instance, if I download a random file, but don't open it, can it infect my computer?
7
votes
3answers
7k views

How to patch Bash on OSX in wake of “shellshock”? [duplicate]

My Mac is vulnerable, as this test shows: x='() { :;}; echo VULNERABLE' bash -c : (source) I am using the version of bash that came with it. I also use Homebrew. What is the preferred way to patch ...
2
votes
3answers
202 views

How can a Mac OS X user protect themselves from shell-shock AND remain connected to the internet right now

Seems to me that there is a need to remain online, esp. for business users and that even when this is corrected, there will be a need to go back online to get the Apple patch. e.g. Is removing bash a ...
40
votes
3answers
22k views

Are ordinary OS X desktops at risk from bash “shellshock” bug (CVE-2014-6271)?

I've recently heard via Twitter about CVE-2014-6271. Are ordinary OS X desktops, that aren't acting as a web server, at risks of receiving attacks that could exploit this vulnerability?
2
votes
0answers
34 views

Removing malware which is creating temp file and modifying network traffic [duplicate]

I am on OSX 10.9.2, please note I have included several URLs in my post, this is not spam this is due to the nature of the malware. I have just discovered I have malware on my computer after noticing ...
6
votes
2answers
175 views

Mac OSX: What is the safest way to access an unknown USB storage?

Let's say a friend gives me a SD-card which I'm not sure is safe (i.e. it may contain malware), what is the safest way to access this card on a Mac OSX? E.g. Is it possible to create a sandbox in ...
5
votes
7answers
928 views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
1answer
1k views

How to install Metasploit on Mavericks + MacPorts? [closed]

I would like to install Metasploit on an hardened OS. For this purpose I chose Mavericks just because I'm able to harden this OS pretty far. I would like to install Metasploit with MacPorts because ...
0
votes
2answers
79 views

Can I find out if my employer is snooping on me? [duplicate]

I work at a large university and have a computer supplied by my employer. I would like to find out whether my employer is snooping or can snoop on my files or activity on my computer. Can I find that ...
0
votes
1answer
233 views

Does Kismac work on MacOSX 10.9+? [closed]

Hi I am trying to get Kismac working. I downloaded the r407 version from here (http://trac.kismac-ng.org/wiki/Downloads) but when I scan for networks I get a never ending sceen saying "Loading Apple ...
7
votes
2answers
204 views

How secure is OS X's Keychain access control?

On OS X, when an application requests access to a Keychain item, the user is prompted whether to grant or deny that access. Supposedly, the system saves not only the binary path, but also its hash in ...
1
vote
2answers
98 views

Difference between OS X md5 and gnu md5sum

I have installed the "md5sum" utility on my Mac and there was also a "md5" binary pre-installed in /sbin. My problem and question is this: "Isn't MD5 a standard algorithm?" Because I get different ...
1
vote
2answers
189 views

How should I diagnose a macintosh laptop running OS X Lion 10.7.5 automatically booting at 12:00:09 sharp every night?

Using the "Console" app within OS X and viewing the "syslog" file I can see the user shutdown their laptop (it was a HALT operation) around 10:22PM. For some reason, 9 seconds after midnight ...
2
votes
1answer
183 views

Capturing iTunes traffic with Wireshark - SSL decryption question

I'm fooling around with Wireshark to capture the activation packets for an iPhone and some other stuff, however the traffic is encrypted. There should be a private SSL key somewhere on my computer to ...
3
votes
2answers
261 views

Export non-extractable private key from Keychain on OS X

I have a PKI certificate in Keychain Access.app on OS X 10.9, together with the private key. The manual page for /usr/bin/security indicates that there is a -x option for security import to specify ...
1
vote
1answer
73 views

Can any malware access the OSX keychain data

I'm working on a security project. I have sensitive data that I would like to store in OS X's keychain. I'm able to add the data programmatically into the OS X keychain by using RHKeychain. But after ...
1
vote
1answer
193 views

Why are OSX users of my TLS-only site being asked to supply a client certificate?

I purchased a Comodo SSL certificate (OV), and set up the Apache vhost config so that all traffic is forwarded to 443. Intermittently some users are being prompted to supply a client certificate; ...
33
votes
8answers
6k views

Should I get an antivirus for my Mac?

There are some people saying that people should use an antivirus software on Mac. And there are thousands of people claiming that Macs don't get viruses (under this term I mean spyware / malware as ...
0
votes
4answers
85 views

Can a virus on the host affect the VM guest [duplicate]

let me explain my problem. The wifi on my macbook suddenly stopped working so tried to use my usb wifi adapter on a linux VM. But the funny thing is that nothing works on the guest vm either... Well ...
0
votes
0answers
125 views

Apple ID phishing lead to my router infected?

For future visitors, I will try to be as general as possible, but I must include details to give you a full picture. As my Apple ID's security email address belongs to my brother, he forwarded an ...
0
votes
2answers
119 views

Mac laptop security on insecure wifi connections

I'm going every year at big IT conferences (3k->4k people). Everyone is connected to the internet with wifi on laptops. This wifi is open, everyone can read the traffic and analyse it... The risk is ...
1
vote
2answers
138 views

What's there to harden for a home Unix-box behind Comcast cable modem?

I'm learning that much of the security advice I come across under the "hardening" heading simply does not apply to a single-user home desktop box sitting in a private wireless IPv4 LAN behind a ...
47
votes
7answers
5k views

Can “cat-ing” a file be a potential security risk?

I often use cat on the console to view the contents of files, and every now and then I accidentally cat a binary file which basically produces gibberish and system beeps. However today I've ...
2
votes
2answers
34 views

Is there a website or other resource that lists operating systems/platforms and the included root certificates?

I need to choose a certification authority (CA), to get a certificate, but I noticed that there are several of these only present in some operating systems/platforms like windows. I need to choose one ...
2
votes
2answers
298 views

Is OSX vulnerable / susceptible to Gameover Zeus

I've heard a TON of vague info on Gameover Zeus recently. One detail I can't seem to find is if it affects OSX? when I say I can't find it I mean from a credible source. I've found loads of people ...
2
votes
5answers
1k views

Apple ID Created With My Email Address

A little similar to this question. but rather than hack my email address someone has created an Apple ID with a gmail address that is similar to mine, but had dots '.' in it. For example if I have ...
2
votes
1answer
144 views

How can I check if a Mac application has NX or ASLR enabled?

According to Wikipedia, the NX bit is set for all x64 binaries: OS X for Intel supports the NX bit on all CPUs supported by Apple (from 10.4.4 – the first Intel release – onwards). Mac OS X 10.4 ...
2
votes
1answer
510 views

Is Dual Factor possible during boot with whole disk encryption on Mac FileVault 2

Mac FileVault 2 is the default disk encryption for newer Macs that occurs in the EFI pre-boot phase. The challenge here is that most smartcard drivers are loaded after the OS loads. Is anyone aware ...
2
votes
1answer
4k views

How to block all access to Akami deploy servers and Apple push servers?

I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like: a23-33-37-54.deploy.akamaitechnologies.com ...
0
votes
1answer
53 views

How can a critical Adobe Acrobat security update, only available as an unsigned executable over plain HTTP, be verified?

A critical security update for Adobe Acrobat Pro and Standard 9 on Mac OSX is only available over HTTP, and is unsigned code. Is there any out-of-band way to verify the download is authentically from ...
11
votes
2answers
2k views

Is Apple's push notification service implementation vulnerable to a MitM attack

Recently(more info) I've spotted a strange message in the logs on my quite recent, fresh installation of OS X Mavericks 10.9.2 Apr 27 15:26:47 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf ...
1
vote
2answers
2k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my system.log Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate Apr 25 22:20:57 Ivans-MacBook-Pro.local apsd[194]: ...
0
votes
0answers
121 views

Does Mac OS X 10.8+ support self-signed Package Installer

I'm not sure whether self-signed Package Installer are supported by Mac OS X 10.8+ Using informations in How to create an Apple Installer Package Signing Certificate I could create a Package ...
1
vote
1answer
13k views

Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2 [closed]

Does Kismac 0.3.3 (0.3.3) built on February 7th work on Mac OSX 10.8.2 It doesn't seem to scan for me. Both are the latest versions as of today.
0
votes
1answer
121 views

I get the feeling that Microsoft and Mac use two different forms of AES

I have an AES string being produced with this class, the AesCryptoServiceProvider Class provided by Microsoft. And I need to decode this encryption with Ruby's SSL::Cipher class . The problem is ...
23
votes
4answers
9k views

What can an attacker do with Bluetooth and how should it be mitigated?

What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine? ...
10
votes
5answers
1k views

What firewall settings on a Macintosh are the most restrictive, while still permitting casual internet use?

I don't want this to be subjective, so I'll try to make the requirements as clear as possible. On a Mac with Snow Leopard, how can I set up the firewall rulesets that allow ONLY: Using the internet ...
0
votes
1answer
2k views

How would I know if my Apple Mac has a virus, and what can I do if I have? [closed]

I have used PCs for most of my life, and I am very aware of the fact that they can catch a variety of viruses. I have owned a MAC now for two years, and have enjoyed a pleasant (perhaps too pleasant) ...
6
votes
3answers
32k views

How to detect KeyLogger on Mac OS X ?

I have a Mac OS X computer and I want to know if it has installed a Keylogger or something that control what I'm doing: when I switch on/off the computer, what I install on it, etc. How can I know ...
1
vote
0answers
28 views

To which extent are paid alternatives to Apple's Xprotect worth it?

Mac OS X ships with Xprotect, Apple's mechanism to detect and remove malware. System software security holes are patched decently quickly. In a world of fragmented, code-signed, sandboxed apps, what ...
5
votes
0answers
610 views

Why does DestroyFVKeyOnStandby no longer work to secure Mavericks? [closed]

I noticed that using the DestroyFVKeyOnStandby option for FileVault 2 in terminal no longer works since upgrading to Mavericks. Usually you type the following in terminal: sudo pmset -a ...
1
vote
1answer
64 views

Can I reliably identify Apple devices that have not patched against the gotofail vulnerability based on user agent string?

The title pretty much says it. Do the security patches to address the gotofail security issue in multiple Apple products employing SSL change the User Agent string for the respective systems? And, of ...
2
votes
0answers
238 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure ...
-4
votes
1answer
129 views

Is it possible to hack my encrypted session and hijack the session by electromagnetic waves? [closed]

I'm concerned about microwave technologies nowadays and suspicious matter happend. So, I have several questions. Could you tell me about my question in below if you know. Question: Is it possible ...
4
votes
3answers
674 views

What is the most secure way to send emails using PGP?

I am a PGP beginner, having just downloaded GPG for OS X. I created my first pub/sec key for my email address and uploaded it to the public key server. GPG has several features available, namely: 1) ...
3
votes
4answers
793 views

Apple FileVault — would Apple build a backdoor?

Could Apple build a backdoor into it's FileVault encryption technology? Is that a risk you take of using a closed-source encryption product in general? Would using something like TrueCrypt be more ...