Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0
votes
0answers
58 views

Potential Hack (Macbook/Edge/Teams/Remote) [duplicate]

I have noticed earlier that my Macbook Pro camera light was lit on - the screen is turned off but not sleeping - the entire time the device was not being used or touched. I logged in to investigate ...
0
votes
0answers
29 views

Apple T2 chip endorsement key

Does Apple's T2 chip have an endorsement key (or equivalent mechanism) to prove that another T2 key can only be used inside the secure enclave? We are looking for something like what a TPM provides so ...
0
votes
1answer
60 views

MacOS able to access data without password

On a Mac, one can go into recovery mode by turning off the Mac and clicking Command R while turning it on. Then, by typing resetpassword into Terminal, one is able to reset the password without ...
0
votes
1answer
40 views

What mechanisms prevent me from “ptraceing” a signed OSX application?

I want to debug an application I have installed on my Mac. The application comes in a ".app" format, which is basically a folder including the binary and some other frameworks and resources. I was ...
3
votes
1answer
89 views

Is macOS installing known bad Certificate Authorities by default?

Today I was checking out macOS security and privacy guide, and when I looked at my keychain, I was surprised to find Startcom CA and Symantec CA trusted by default. Isn't this supposed to be ...
0
votes
0answers
28 views

macOS + malware + root password [duplicate]

I entered my macOS admin details (root password) into an application I think was malicious. Suspicious, I checked the keychain and my tokens had modified passwords. What else could have this ...
15
votes
5answers
5k views

HTTPS connection to specific sites fail with cURL on macOS

On my Mac, HTTPS connnections to certain sites fail using the built-in curl binary of macOS 10.14. They work fine with different browsers, as well as other builds of cURL on the same system. One of ...
0
votes
2answers
71 views

If I am trying to clean install a MacOS with internet recovery, is it safer to use mobile network than WIFI network?

I just clean installed my MacOS Catalina on my MacBook due to virus on my PC that I worried got on my MacBook via usb file transfer. I did an internet recovery to reinstall MacOS Catalina with my ...
0
votes
2answers
93 views

Can a computer/MacBook be compromised/infected/hacker simply be requesting/attempt to join a network?

I was finishing a clean installation of macOS Catalina on my MacBook, and I was asked to select a wifi network. I misclicked on a wifi network with a name that's very similar to mine and was asked to ...
0
votes
0answers
14 views

Is it possible to delete all traces and files on a mac? [duplicate]

Is it possible to delete all traces and files on a mac, so no one can recover files and there will be no traces at all for this files or any activity?
2
votes
2answers
127 views

Why does my MacBook air have so many MAC addresses, according to my router?

I am investigating some strange issues with my home network, and decided to have a look at my device history. I only have one Macbook Air, but my device history is showing ten, all with different MAC ...
1
vote
1answer
244 views

Hugoclose.com malware is causing issues in google chrome [closed]

In my MacBook Air, whenever I search something in google, some adds are appearing out of no where and they're hiding the actual search results from google. When I checked the developer tools, I found ...
134
votes
2answers
24k views

Why is “fhepfcelehfcepfffacacacacacacabn” a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
1
vote
1answer
134 views

How to store private keys in browsers after Apple's decision to wipe script-writeable storage?

We have a web application that puts a private key in LocalStorage, which enables users to sign off certain messages. It's been working fine until today we saw this announcement from Apple. The TLDR; ...
1
vote
1answer
55 views

Is using numeric passwords on Macs reasonable for average users?

Is using a numeric password (similar to a PIN code on a phone) on Macs reasonable for regular users, considering they are the norm for passcodes on iOS devices? Traditionally user accounts on Macs ...
1
vote
2answers
316 views

tcpdump packets have bad and incorrect checksums on localhost, how to investigate further?

Am investigating a macOS Catalina machine that is believed to be infected with malware. Have been viewing packets with tcpdump and noticed, on connecting to any web address, there are legit packet ...
0
votes
0answers
66 views

Are Mac OSX encrypted volumes to be trusted(from Disc utility)

I am currently using mac os disc utility on mac and normally create a 10GB encrypted image to store my random private files in... What really makes me paranoid is how fast or shall we say that it ...
0
votes
1answer
104 views

Malware in backups [closed]

The main thing i am interested in is the 3rd point below. In short I am worried about having a virus and what will suffice to remove it. I am on Mac and am running the latest version of Catalina. I ...
0
votes
0answers
27 views

Could a macOS app get access to my iCloud Drive folder without permission?

As I can easily cd into ~/Library/Mobile\ Documents and ls contents in iCloud Drive without getting "operation not permitted". If ls the folders like ~/Documents or ~/Downloads gives me a prompt to ...
1
vote
1answer
90 views

Is it safer to “chown” the Applications folder on macOS?

Whenever I copy a program into the Applications folder on my Mac, I have to use admin rights to do that. My standard user account (marc) does not have admin rights, so I get an alert and have to fill ...
2
votes
0answers
83 views

Under what conditions can malware bypass macOS Catalina's permission system? [closed]

Catalina has some new security features which include System Preferences > Security & Privacy features, which requires apps to request access to specific computer functionality such as camera, ...
0
votes
0answers
50 views

Is data stored on a standard mac user account considered secure from other users on that same local computer?

I'm trying to figure out if the data created by a Mac user on a local mac is truly secure from other users on that same mac. For example, on MacOS Catalina, I have three accounts: Administrator User ...
1
vote
0answers
55 views

Why does pycharm uses lax security on macOS?

When looking at entitlements on pycharm CE for macOS, it shows many serious security exceptions. Here are its entitlements: <dict> <key>com.apple.security.cs.allow-jit</key> ...
0
votes
0answers
86 views

Osx protections binary patch

I'm newbie in reverse engineering field recently I tried my "skill" in real world applications (apple MacOS) , but think that something went wrong during the binary patch. I tried to patch 3 apps (...
0
votes
0answers
37 views

Xcode trace application

I have to do some ios coding but i don’t have my work machine. Fortunately I have access to another one. I wonder if xcode keeps track of the id of the machine that was used to write the code? And ...
0
votes
0answers
194 views

Security implications of homebrew

I want to install homebrew in the safest possible way (single user system). It is often criticized that homebrew takes precedence over /usr/bin and /bin (in /etc/path) and therefore any malware can ...
1
vote
1answer
61 views

Prevent an application from making any network access on macOS

I want to run an application on macOS, but preventing it from making any type of network access, or any type of internet access. I have seen the following possibilities: Use the built-in firewall. ...
9
votes
1answer
1k views

Is reading from /dev/urandom on macOS Catalina a safe way to produce cryptographically secure data?

I'm reading a lot about entropy on macOS... I know it doesn't use Yarrow anymore as per this FIPS 140-02 doc a NIST compliant DRBG. I read a lot: https://github.com/briansmith/ring/pull/398 How ...
3
votes
0answers
66 views

Capture macOS/IOS system HTTPS packets

I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
0
votes
0answers
108 views

On MacOS, gpg gives “random_seed file is empty” error after I ran out of space for an encryption process?

I tried to encrypt a file on MacOS with gpg, and it turns out that I did not have enough hard drive space to make it. Afterwards, it exited with an error: gpg: can't write '/Users/myname/.gnupg/...
0
votes
1answer
193 views

Info about gpg setup on MacOS

On Mac OS Mojave: ▶ gpg --list-keys Warning: Failed to set locale category LC_NUMERIC to en_GR. Warning: Failed to set locale category LC_TIME to en_GR. Warning: Failed to set locale category ...
-3
votes
1answer
56 views

My IT manager says rMBP is not satisfied ISO27001 [closed]

My company computer is using MS Windows and I myself as a software engineer I would recommend my developer team to use OSX since it is hassle least than Linux/Unix based OS. When I propose the ...
3
votes
1answer
281 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
2
votes
1answer
75 views

Thunderbolt to HDMI connector freezes macbook, potential security risks? Time for a clean install? [closed]

I recently used a Thunderbolt to HDMI connector (ADAM 4K2K) casually given by a colleague who then left the country, misguidedly thinking "oh, it's a display adapter, not a USB, so it probably isn't ...
2
votes
1answer
60 views

What are the dangers of extending my PATH?

Are there any dangers of extending my PATH, say by adding /Users/me/bin?
19
votes
3answers
6k views

Stolen MacBook: should I worry about my data?

Unfortunately, someone stole my laptop (a MacBook) and I did not realize that for 48 hours. Now, this was a work laptop and my company's security team is going to wipe the laptop remotely as soon as ...
-1
votes
1answer
122 views

Macbook Pro compromised / Rootkit. Are the files I pulled onto my external drive safe? [duplicate]

I am basically positive my macbook pro has been hacked and has a firmware rootkit installed on it, and at this point I have decided it is now a brick and I need to move onto a new computer. The ...
1
vote
0answers
46 views

OSX: Momentary appearance of a .dmg modal, when opening an image

I had a situation that struck me as odd. I opened an image which I had downloaded via browser save-as. After the finder/OS initiated the file-open, a modal dialog momentarily flashed, typical to ...
0
votes
0answers
105 views

New user has appeared on my Macbook Pro [duplicate]

Today I noticed the addition of a new user "Linchengzhang" on my MacBook pro. Apparently the user was added 25th April 2019 (according to the folder creation) and it appears to have an identical ...
0
votes
1answer
71 views

OS X Firewall Block all incoming Connections Affecting Software Updates?

I just bought a 2017 Macbook Pro with the latest OS (Mojave). In the OS X Mojave Security and Privacy-Firewall settings, I set Firewall to "Block all incoming connections" as I am extra cautious, but ...
0
votes
2answers
240 views

I am getting “Your connection is not private” error and it disappears when I use a VPN

I use a Mac (running macOS Sierra). Yesterday I was watching a movie online from some not-so-trustworthy website and when I clicked the pause button, a tab appeared and suddenly disappeared. From ...
1
vote
1answer
116 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
1
vote
1answer
119 views

Bruteforcing via port 88 on MacOS

Macos has open port 88 by default. Is it possible to check validity of the password via this port from Linux and how? If the vncserver is active, it is possible to know also the username (by ...
28
votes
2answers
5k views

How is it possible for user's password to be changed after storage was encrypted? (on OS X, Android)

There are built-in functionalities to encrypt a storage on OS X (FileVault) and Android. On OS X: to enable encryption current user must have a password protected account. After enabling the ...
35
votes
3answers
6k views

Is it insecure to send a password in a `curl` command?

Here’s an example request we can make to the GitHub API: curl 'https://api.github.com/authorizations' --user "USERNAME" This will prompt for the account password, to continue: Enter host password ...
2
votes
1answer
212 views

Why are there no free resources on exploit development on macOS? [closed]

There are many resources on Linux exploit development, but I cannot find any resources targeting macOS, except for some bad ones on YouTube. Why are there no write-ups on macOS exploitation ...
0
votes
1answer
3k views

Random Chrome Notifications and Strange Source Code

My elderly parents are receiving chrome notifications from a strange URL on their iMac: (https://s1.snc.com.ru:443) Example Messages • Pending Payment: Paypal Has Sent You $65,900 • Clean your mac....
0
votes
0answers
48 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
0
votes
1answer
55 views

print statements

Is it possible for a bad guy to read print statements done in the swift programming language? Ex. If I release an app to the Apple Appstore and it has following print line: print("my-secret-password"...
0
votes
1answer
388 views

Have I been hacked? Terminal shows me in a different hostname than my machine [duplicate]

Sorry for the generic title but really don't know how to call this. I've just upgraded my MacBook Air to macOS Mojave 10.14.3. Usually, when opening the terminal it would show something like ...

1
2 3 4 5
8