People who code: we want your input. Take the Survey

Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

Lost keys after formatting Mac HD [migrated]

I lost my private keys after formatting my Mac and reinstalling my OS. I only have the public keys and the passphrase. What can I do?
0
votes
0answers
44 views

MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?

Secenario Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on. I frequently need to access sensitive data located in text files on an encrypted ...
0
votes
2answers
101 views

Is Mac OS Big Sur Spying?

I would like to know if macOS "Big Sur" sends unencrypted OCSP requests. I am a newbie and not aware of technical stuff, but when I came across Jeffrey Paul's article, I am a bit concerned ...
0
votes
0answers
15 views

Determine path of app prompting for access to macOS keychain item [migrated]

Context On macOS, when an app requests permission to access a keychain item, a prompt like this is presented: git-credential-osxkeychain wants to use your confidential information stored in "...
1
vote
1answer
77 views

How to verify a x509 certificate from Apple on a Ubuntu server?

I'm trying to verify GameCenter authentication on an iOS app with GameKit. The fetchItems API returns a URL for the public key needed to do this. Steps 3 and 4 of that API say: Use the publicKeyURL ...
27
votes
5answers
6k views

How can a non-admin program cover your entire screen with a window?

This year, since many students are online, College Board (the company that administers AP Exams in the US, along with the SAT) recently released its Digital Testing App. Once installed, and going ...
1
vote
1answer
176 views

How best to crack password for MacOS encrypted .dmg, given I know the majority of the password content? [closed]

Encrypted .dmg on MacOS High Sierra, tested password before sending for repair. Upon return from repair, password does not work. The possibilities I see are the .dmg file is corrupted, or I'm wrong ...
1
vote
0answers
48 views

Recovering files with recovery key after double FileVault activation - is that possible?

Let's imagine I have a work macbook with ssd and I use FileVault, and the company has the FileVault recovery key. I want to make sure my data is erased and unrecoverable, what is the best way to ...
0
votes
1answer
58 views

Old operating system (offline computer) need to come online for a few minutes

OSX El Capitan I have an offline computer running an old OSX operating system. I would like to connect that computer to the web for a brief few minutes in order to install HomeBrew and install a newer ...
1
vote
1answer
77 views

MacOS Firewall Needed or Unnecessary?

Coming from Windows to macOS, I was surprised that the firewall was off by default. I immediately turned this feature on. Would this be necessary? Are there some cons to having the firewall on that I ...
0
votes
0answers
64 views

How can I forcibly block all the Internet traffic that doesn't go through a VPN to prevent accidental IP leak?

I need to block all the Internet connections that don't go through a VPN server before they even get the chance to happen. How can I achieve this on Mac OS Big Sur? Mac OS doesn't seem to have any ...
0
votes
0answers
71 views

I suspect that my mac laptop is infected with malware that can view all my activity. What should I do?

Is it sufficient to reformat with a new osx install. If so, can the malware persist in cloud syncing programs like adobe creative cloud, icloud, onedrive and google drive?
0
votes
0answers
41 views

Exploiting buffer overflow in 64-bit macOS executable

I'm following this tutorial to create a buffer overflow demo. The article illustrates a 32-bit executable, but I'm feeling adventurous and decided to do a 64-bit one. Below is the deliberately ...
0
votes
1answer
75 views

What to do after a scammer took control of my mac?

A friend of mine called me in panic mode to tell me that "a message told her her computer was infected, and that she should call the phone number". So did she. Apparently, a lady made her ...
0
votes
1answer
219 views

Is flash less secure now that it is End of Life? [closed]

As of this month, the Flash player has been disabled from all mainstream browsers. However, several platforms are still offering ways to use Flash content, most notably the games hosted on said ...
2
votes
1answer
738 views

Bitwarden and gamecontrollerd on OsX Big Sur

Recently, I came across an issue concerning a daemon named gamecontrollerd in OsX Big Sur. On my laptop I'm running ReiKey (from Objective-See), which aims at identifying possible Key Loggers that ...
2
votes
1answer
235 views

Can malware infect computers via wifi routers and mice? [duplicate]

My computer was hacked, which probably resulted in malware/a virus being installed so I'm using my most recent backup on a separate machine (all macOS). Luckily, I was able to determine the timing of ...
1
vote
2answers
150 views

Can a .jar file execute malware on macOS without running it?

I've heard java files can pose a significant security risk due to vulnerabilities. Is it possible for these java files to infect a computer with malware if they are never run? In my case, I am ...
0
votes
0answers
122 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
1
vote
1answer
92 views

Can visiting website infect computer? [duplicate]

I have heard online that simply visiting a website can infect a computer. I had an instance recently where someone I know sent me a link but misspelled it. The misspelled link lead to a malicious ...
1
vote
1answer
107 views

Would VirtualBox sandbox potential viruses from main system?

I am working with several maintainers of Homebrew currently to verify that several programs in the cask library now ship from the developer with trojans. To verify the claims I created a Virtual ...
0
votes
1answer
93 views

Secure MacOS against malware and external threats?

Often I am required to connect to public wifi or open files that others send me. Doing so opens me up to possible credential theft as well as possible viruses or malware. Thus far I have done my best ...
0
votes
1answer
48 views

Potential danger of infection through downloading malware?

Recently I was on Nox Player's website checking out their Android emulator. I did some googling and came to the conclusion that it was bundled with tons of malware and as a result didn't install it. ...
1
vote
1answer
327 views

Is homebrew's change of usr/local/bin to r/w a security issue?

I've been reading online that homebrew changing usr/local/bin to r/w could pose a serious security issue as usr/bin is the path after usr/local/bin. Article found here: https://applehelpwriter.com/...
0
votes
1answer
84 views

MacOS's Finder (and Xcode) accessing iDevices while network was off

I am trying to figure out what is wrong with my Mac. Here are my devices: iPad (7th generation, MW752LL/A) with iOS 14.01 (18A393), iPad Air (MD788LL/A) with iOS 12.4.8 (16G201), iPhone 6 Plus (...
0
votes
0answers
18 views

creating large files to “zero fill” network attached storage (NAS)

For security reasons I'm trying to "zero fill" network attached storage (NAS) which is unmountable to OS X. There is no existing disk utility to low-level format the drive. So I decided to ...
0
votes
0answers
48 views

Configuring a macbook for a specific case

I've used cleanbrowsing.org as a DNS filter, created an administrator account, logged in into that account, changed my usual (admin) account to a normal user and set the new admin account with a long ...
0
votes
0answers
244 views

Best ways to isolate / sandbox a program on macOS?

I work in software development and it often involves downloading tools and things from the internet to run on my computer. It's hard to avoid this and it drives me nuts from a security standpoint. I ...
2
votes
0answers
344 views

GPG Agent SSH Forward Pinentry

I have GPG agent forwarding via SSH RemoteForward working up to a point. I can list my private and public keys on the remote host. If I try to decrypt a file remotely, the PIN is prompted for but the ...
2
votes
1answer
149 views

Homebrew and NOPASSWD sudo

I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to ...
2
votes
2answers
292 views

Which encryption cypher is used when using zip -e?

I am looking for a cross-platform way to encrypt credentials I need to send to a client. I know encrypted zip archives leak metadata and can be tampered with, but how strong is the encryption cypher? ...
0
votes
0answers
31 views

Using lulu on osx in home business setup. Any reason for external router base firewall?

I have Lulu setup under osx on my Mac. So say an errant program, curl, if it tries to access outside address is stopped. Would an external router based firewall bring any extra level of protection? I ...
2
votes
0answers
61 views

Log/Detect Clipboard access

With the public beta access to iOS 14 people got a warning when apps access the clipboard, and it lead to people realizing that many apps just grab everything from the clipboard they can get and send ...
0
votes
0answers
39 views

How secure is the apple cross device copy and paste feature? [duplicate]

I can copy and paste between my iPhone and MacBook Pro it's a great feature that I find myself using frequently. I am frequently copy and pasting from my password manager to log in to different sites....
0
votes
0answers
58 views

Potential Hack (Macbook/Edge/Teams/Remote) [duplicate]

I have noticed earlier that my Macbook Pro camera light was lit on - the screen is turned off but not sleeping - the entire time the device was not being used or touched. I logged in to investigate ...
0
votes
0answers
35 views

Apple T2 chip endorsement key

Does Apple's T2 chip have an endorsement key (or equivalent mechanism) to prove that another T2 key can only be used inside the secure enclave? We are looking for something like what a TPM provides so ...
0
votes
1answer
66 views

MacOS able to access data without password

On a Mac, one can go into recovery mode by turning off the Mac and clicking Command R while turning it on. Then, by typing resetpassword into Terminal, one is able to reset the password without ...
0
votes
1answer
120 views

What mechanisms prevent me from “ptraceing” a signed OSX application?

I want to debug an application I have installed on my Mac. The application comes in a ".app" format, which is basically a folder including the binary and some other frameworks and resources. I was ...
3
votes
1answer
101 views

Is macOS installing known bad Certificate Authorities by default?

Today I was checking out macOS security and privacy guide, and when I looked at my keychain, I was surprised to find Startcom CA and Symantec CA trusted by default. Isn't this supposed to be ...
15
votes
5answers
7k views

HTTPS connection to specific sites fail with cURL on macOS

On my Mac, HTTPS connnections to certain sites fail using the built-in curl binary of macOS 10.14. They work fine with different browsers, as well as other builds of cURL on the same system. One of ...
0
votes
2answers
158 views

If I am trying to clean install a MacOS with internet recovery, is it safer to use mobile network than WIFI network?

I just clean installed my MacOS Catalina on my MacBook due to virus on my PC that I worried got on my MacBook via usb file transfer. I did an internet recovery to reinstall MacOS Catalina with my ...
0
votes
2answers
115 views

Can a computer/MacBook be compromised/infected/hacker simply be requesting/attempt to join a network?

I was finishing a clean installation of macOS Catalina on my MacBook, and I was asked to select a wifi network. I misclicked on a wifi network with a name that's very similar to mine and was asked to ...
0
votes
0answers
15 views

Is it possible to delete all traces and files on a mac? [duplicate]

Is it possible to delete all traces and files on a mac, so no one can recover files and there will be no traces at all for this files or any activity?
2
votes
2answers
335 views

Why does my MacBook air have so many MAC addresses, according to my router?

I am investigating some strange issues with my home network, and decided to have a look at my device history. I only have one Macbook Air, but my device history is showing ten, all with different MAC ...
1
vote
1answer
283 views

Hugoclose.com malware is causing issues in google chrome [closed]

In my MacBook Air, whenever I search something in google, some adds are appearing out of no where and they're hiding the actual search results from google. When I checked the developer tools, I found ...
132
votes
2answers
24k views

Why is “fhepfcelehfcepfffacacacacacacabn” a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
1
vote
1answer
249 views

How to store private keys in browsers after Apple's decision to wipe script-writeable storage?

We have a web application that puts a private key in LocalStorage, which enables users to sign off certain messages. It's been working fine until today we saw this announcement from Apple. The TLDR; ...
1
vote
1answer
56 views

Is using numeric passwords on Macs reasonable for average users?

Is using a numeric password (similar to a PIN code on a phone) on Macs reasonable for regular users, considering they are the norm for passcodes on iOS devices? Traditionally user accounts on Macs ...
1
vote
2answers
3k views

tcpdump packets have bad and incorrect checksums on localhost, how to investigate further?

Am investigating a macOS Catalina machine that is believed to be infected with malware. Have been viewing packets with tcpdump and noticed, on connecting to any web address, there are legit packet ...
0
votes
0answers
124 views

Are Mac OSX encrypted volumes to be trusted(from Disc utility)

I am currently using mac os disc utility on mac and normally create a 10GB encrypted image to store my random private files in... What really makes me paranoid is how fast or shall we say that it ...

1
2 3 4 5
9