Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0
votes
0answers
45 views

Hybrid-Analysis.com indicates the website that my macOS system is contacting is likely malicious

Backstory: I just upgraded my MacBook from OS X 10.11.6 to the most updated version of macOS, 10.14.6 Mojave. I also have the Little Snitch network filter installed. I know nearly nothing about ...
0
votes
0answers
71 views

Safe or Unsafe to Store Passwords in Chrome on MacOS?

I've seen conflicting opinions on this, more than the below, but i.e. Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/ Safe: https://...
0
votes
0answers
12 views

How to install zip2john on MacOS? [migrated]

I am using MacOS and have installed John the Ripper using brew (john-jumbo) without any problem, but when I try to run zip2john I get: zsh: command not found: zip2john I've found only about how to ...
0
votes
0answers
3 views

How to extract SSL pre-master key from Mac app? [migrated]

I would like to analyse the traffic generated by one of the apps that I use. This .app contains an OpenSSL 1.1.0 dylib in its Frameworks folder. I would like to extract the pre-master keys using the ...
9
votes
7answers
6k views

Can you create a fake (malicious) Ubuntu iso

Recently I got into an exchange with someone on social media about the security of Linux versus OSX and Windows. I stated that it is possible (and probable) that someone could code a low level back ...
0
votes
1answer
86 views

How is my Macbook connecting to my WiFi APs without asking for a password?

When I work away from home (and home wifi) I use my phone's hotspot to connect my Macbook to the internet. However, it's always surprised me that I just have to click on the name of the hotspot to ...
0
votes
0answers
35 views

How Does it Work - User Authentication using Yubico Smart Card (Yubico PIV) on Mac

Background: I have setup my macOS Catalina so that I can authenticate my user account using my Yubico (set up as a Smart Card) and its PIN After setting this up I can see that there are now 2 ...
0
votes
0answers
56 views

MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?

Secenario Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on. I frequently need to access sensitive data located in text files on an encrypted ...
0
votes
2answers
163 views

Is Mac OS Big Sur Spying?

I would like to know if macOS "Big Sur" sends unencrypted OCSP requests. I am a newbie and not aware of technical stuff, but when I came across Jeffrey Paul's article, I am a bit concerned ...
2
votes
1answer
118 views

How to verify a x509 certificate from Apple on a Ubuntu server?

I'm trying to verify GameCenter authentication on an iOS app with GameKit. The fetchItems API returns a URL for the public key needed to do this. Steps 3 and 4 of that API say: Use the publicKeyURL ...
27
votes
5answers
6k views

How can a non-admin program cover your entire screen with a window?

This year, since many students are online, College Board (the company that administers AP Exams in the US, along with the SAT) recently released its Digital Testing App. Once installed, and going ...
1
vote
1answer
904 views

How best to crack password for MacOS encrypted .dmg, given I know the majority of the password content? [closed]

Encrypted .dmg on MacOS High Sierra, tested password before sending for repair. Upon return from repair, password does not work. The possibilities I see are the .dmg file is corrupted, or I'm wrong ...
1
vote
0answers
53 views

Recovering files with recovery key after double FileVault activation - is that possible?

Let's imagine I have a work macbook with ssd and I use FileVault, and the company has the FileVault recovery key. I want to make sure my data is erased and unrecoverable, what is the best way to ...
0
votes
1answer
59 views

Old operating system (offline computer) need to come online for a few minutes

OSX El Capitan I have an offline computer running an old OSX operating system. I would like to connect that computer to the web for a brief few minutes in order to install HomeBrew and install a newer ...
1
vote
1answer
101 views

MacOS Firewall Needed or Unnecessary?

Coming from Windows to macOS, I was surprised that the firewall was off by default. I immediately turned this feature on. Would this be necessary? Are there some cons to having the firewall on that I ...
0
votes
0answers
70 views

How can I forcibly block all the Internet traffic that doesn't go through a VPN to prevent accidental IP leak?

I need to block all the Internet connections that don't go through a VPN server before they even get the chance to happen. How can I achieve this on Mac OS Big Sur? Mac OS doesn't seem to have any ...
0
votes
0answers
77 views

I suspect that my mac laptop is infected with malware that can view all my activity. What should I do?

Is it sufficient to reformat with a new osx install. If so, can the malware persist in cloud syncing programs like adobe creative cloud, icloud, onedrive and google drive?
0
votes
0answers
52 views

Exploiting buffer overflow in 64-bit macOS executable

I'm following this tutorial to create a buffer overflow demo. The article illustrates a 32-bit executable, but I'm feeling adventurous and decided to do a 64-bit one. Below is the deliberately ...
0
votes
1answer
82 views

What to do after a scammer took control of my mac?

A friend of mine called me in panic mode to tell me that "a message told her her computer was infected, and that she should call the phone number". So did she. Apparently, a lady made her ...
0
votes
1answer
268 views

Is flash less secure now that it is End of Life? [closed]

As of this month, the Flash player has been disabled from all mainstream browsers. However, several platforms are still offering ways to use Flash content, most notably the games hosted on said ...
2
votes
1answer
973 views

Bitwarden and gamecontrollerd on OsX Big Sur

Recently, I came across an issue concerning a daemon named gamecontrollerd in OsX Big Sur. On my laptop I'm running ReiKey (from Objective-See), which aims at identifying possible Key Loggers that ...
2
votes
1answer
308 views

Can malware infect computers via wifi routers and mice? [duplicate]

My computer was hacked, which probably resulted in malware/a virus being installed so I'm using my most recent backup on a separate machine (all macOS). Luckily, I was able to determine the timing of ...
1
vote
2answers
256 views

Can a .jar file execute malware on macOS without running it?

I've heard java files can pose a significant security risk due to vulnerabilities. Is it possible for these java files to infect a computer with malware if they are never run? In my case, I am ...
0
votes
0answers
156 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
1
vote
1answer
101 views

Can visiting website infect computer? [duplicate]

I have heard online that simply visiting a website can infect a computer. I had an instance recently where someone I know sent me a link but misspelled it. The misspelled link lead to a malicious ...
1
vote
1answer
118 views

Would VirtualBox sandbox potential viruses from main system?

I am working with several maintainers of Homebrew currently to verify that several programs in the cask library now ship from the developer with trojans. To verify the claims I created a Virtual ...
0
votes
1answer
94 views

Secure MacOS against malware and external threats?

Often I am required to connect to public wifi or open files that others send me. Doing so opens me up to possible credential theft as well as possible viruses or malware. Thus far I have done my best ...
0
votes
1answer
48 views

Potential danger of infection through downloading malware?

Recently I was on Nox Player's website checking out their Android emulator. I did some googling and came to the conclusion that it was bundled with tons of malware and as a result didn't install it. ...
2
votes
1answer
410 views

Is homebrew's change of usr/local/bin to r/w a security issue?

I've been reading online that homebrew changing usr/local/bin to r/w could pose a serious security issue as usr/bin is the path after usr/local/bin. Article found here: https://applehelpwriter.com/...
0
votes
1answer
94 views

MacOS's Finder (and Xcode) accessing iDevices while network was off

I am trying to figure out what is wrong with my Mac. Here are my devices: iPad (7th generation, MW752LL/A) with iOS 14.01 (18A393), iPad Air (MD788LL/A) with iOS 12.4.8 (16G201), iPhone 6 Plus (...
0
votes
0answers
20 views

creating large files to "zero fill" network attached storage (NAS)

For security reasons I'm trying to "zero fill" network attached storage (NAS) which is unmountable to OS X. There is no existing disk utility to low-level format the drive. So I decided to ...
0
votes
0answers
48 views

Configuring a macbook for a specific case

I've used cleanbrowsing.org as a DNS filter, created an administrator account, logged in into that account, changed my usual (admin) account to a normal user and set the new admin account with a long ...
0
votes
0answers
282 views

Best ways to isolate / sandbox a program on macOS?

I work in software development and it often involves downloading tools and things from the internet to run on my computer. It's hard to avoid this and it drives me nuts from a security standpoint. I ...
3
votes
0answers
428 views

GPG Agent SSH Forward Pinentry

I have GPG agent forwarding via SSH RemoteForward working up to a point. I can list my private and public keys on the remote host. If I try to decrypt a file remotely, the PIN is prompted for but the ...
2
votes
1answer
168 views

Homebrew and NOPASSWD sudo

I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to ...
2
votes
2answers
380 views

Which encryption cypher is used when using zip -e?

I am looking for a cross-platform way to encrypt credentials I need to send to a client. I know encrypted zip archives leak metadata and can be tampered with, but how strong is the encryption cypher? ...
2
votes
0answers
68 views

Log/Detect Clipboard access

With the public beta access to iOS 14 people got a warning when apps access the clipboard, and it lead to people realizing that many apps just grab everything from the clipboard they can get and send ...
0
votes
0answers
59 views

Potential Hack (Macbook/Edge/Teams/Remote) [duplicate]

I have noticed earlier that my Macbook Pro camera light was lit on - the screen is turned off but not sleeping - the entire time the device was not being used or touched. I logged in to investigate ...
0
votes
1answer
67 views

MacOS able to access data without password

On a Mac, one can go into recovery mode by turning off the Mac and clicking Command R while turning it on. Then, by typing resetpassword into Terminal, one is able to reset the password without ...
0
votes
1answer
154 views

What mechanisms prevent me from "ptraceing" a signed OSX application?

I want to debug an application I have installed on my Mac. The application comes in a ".app" format, which is basically a folder including the binary and some other frameworks and resources. I was ...
3
votes
1answer
107 views

Is macOS installing known bad Certificate Authorities by default?

Today I was checking out macOS security and privacy guide, and when I looked at my keychain, I was surprised to find Startcom CA and Symantec CA trusted by default. Isn't this supposed to be ...
15
votes
5answers
8k views

HTTPS connection to specific sites fail with cURL on macOS

On my Mac, HTTPS connnections to certain sites fail using the built-in curl binary of macOS 10.14. They work fine with different browsers, as well as other builds of cURL on the same system. One of ...
0
votes
2answers
194 views

If I am trying to clean install a MacOS with internet recovery, is it safer to use mobile network than WIFI network?

I just clean installed my MacOS Catalina on my MacBook due to virus on my PC that I worried got on my MacBook via usb file transfer. I did an internet recovery to reinstall MacOS Catalina with my ...
0
votes
2answers
121 views

Can a computer/MacBook be compromised/infected/hacker simply be requesting/attempt to join a network?

I was finishing a clean installation of macOS Catalina on my MacBook, and I was asked to select a wifi network. I misclicked on a wifi network with a name that's very similar to mine and was asked to ...
0
votes
0answers
15 views

Is it possible to delete all traces and files on a mac? [duplicate]

Is it possible to delete all traces and files on a mac, so no one can recover files and there will be no traces at all for this files or any activity?
2
votes
2answers
372 views

Why does my MacBook air have so many MAC addresses, according to my router?

I am investigating some strange issues with my home network, and decided to have a look at my device history. I only have one Macbook Air, but my device history is showing ten, all with different MAC ...
1
vote
1answer
283 views

Hugoclose.com malware is causing issues in google chrome [closed]

In my MacBook Air, whenever I search something in google, some adds are appearing out of no where and they're hiding the actual search results from google. When I checked the developer tools, I found ...
132
votes
2answers
24k views

Why is "fhepfcelehfcepfffacacacacacacabn" a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
1
vote
1answer
293 views

How to store private keys in browsers after Apple's decision to wipe script-writeable storage?

We have a web application that puts a private key in LocalStorage, which enables users to sign off certain messages. It's been working fine until today we saw this announcement from Apple. The TLDR; ...
1
vote
1answer
57 views

Is using numeric passwords on Macs reasonable for average users?

Is using a numeric password (similar to a PIN code on a phone) on Macs reasonable for regular users, considering they are the norm for passcodes on iOS devices? Traditionally user accounts on Macs ...

1
2 3 4 5
9