Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

Could a macOS app get access to my iCloud Drive folder without permission?

As I can easily cd into ~/Library/Mobile\ Documents and ls contents in iCloud Drive without getting "operation not permitted". If ls the folders like ~/Documents or ~/Downloads gives me a prompt to ...
1
vote
1answer
73 views

Is it safer to “chown” the Applications folder on macOS?

Whenever I copy a program into the Applications folder on my Mac, I have to use admin rights to do that. My standard user account (marc) does not have admin rights, so I get an alert and have to fill ...
0
votes
0answers
23 views

Arachni on Mac OS X Catalina [migrated]

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of modern web applications, I never use it before ...
0
votes
0answers
32 views

Decreasing The Physical Access Time Required for a Twin Duck Payload [migrated]

I have recently started playing with with the Twin Duck Firmware on the USB Rubber Ducky. I was wondering if anybody could possibly give me some suggestions as to how to decrease the amount of time ...
2
votes
0answers
69 views

Under what conditions can malware bypass macOS Catalina's permission system? [closed]

Catalina has some new security features which include System Preferences > Security & Privacy features, which requires apps to request access to specific computer functionality such as camera, ...
0
votes
0answers
47 views

Is data stored on a standard mac user account considered secure from other users on that same local computer?

I'm trying to figure out if the data created by a Mac user on a local mac is truly secure from other users on that same mac. For example, on MacOS Catalina, I have three accounts: Administrator User ...
0
votes
0answers
53 views

Cannot capture WPA handshake on macOS by any means

In my free time I go in for pen testing and wireless security using my 2018 MacBook Pro. I have been trying to capture 4-way WPA handshake using 3 various tools: airport command, tcpdump and Apple's ...
1
vote
0answers
47 views

Why does pycharm uses lax security on macOS?

When looking at entitlements on pycharm CE for macOS, it shows many serious security exceptions. Here are its entitlements: <dict> <key>com.apple.security.cs.allow-jit</key> ...
0
votes
0answers
80 views

Osx protections binary patch

I'm newbie in reverse engineering field recently I tried my "skill" in real world applications (apple MacOS) , but think that something went wrong during the binary patch. I tried to patch 3 apps (...
0
votes
0answers
35 views

Xcode trace application

I have to do some ios coding but i don’t have my work machine. Fortunately I have access to another one. I wonder if xcode keeps track of the id of the machine that was used to write the code? And ...
0
votes
0answers
76 views

Security implications of homebrew

I want to install homebrew in the safest possible way (single user system). It is often criticized that homebrew takes precedence over /usr/bin and /bin (in /etc/path) and therefore any malware can ...
1
vote
1answer
54 views

Prevent an application from making any network access on macOS

I want to run an application on macOS, but preventing it from making any type of network access, or any type of internet access. I have seen the following possibilities: Use the built-in firewall. ...
9
votes
1answer
294 views

Is reading from /dev/urandom on macOS Catalina a safe way to produce cryptographically secure data?

I'm reading a lot about entropy on macOS... I know it doesn't use Yarrow anymore as per this FIPS 140-02 doc a NIST compliant DRBG. I read a lot: https://github.com/briansmith/ring/pull/398 How ...
3
votes
0answers
55 views

Capture macOS/IOS system HTTPS packets

I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
0
votes
0answers
50 views

On MacOS, gpg gives “random_seed file is empty” error after I ran out of space for an encryption process?

I tried to encrypt a file on MacOS with gpg, and it turns out that I did not have enough hard drive space to make it. Afterwards, it exited with an error: gpg: can't write '/Users/myname/.gnupg/...
0
votes
1answer
117 views

Info about gpg setup on MacOS

On Mac OS Mojave: ▶ gpg --list-keys Warning: Failed to set locale category LC_NUMERIC to en_GR. Warning: Failed to set locale category LC_TIME to en_GR. Warning: Failed to set locale category ...
-3
votes
1answer
55 views

My IT manager says rMBP is not satisfied ISO27001 [closed]

My company computer is using MS Windows and I myself as a software engineer I would recommend my developer team to use OSX since it is hassle least than Linux/Unix based OS. When I propose the ...
3
votes
1answer
161 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
2
votes
1answer
68 views

Thunderbolt to HDMI connector freezes macbook, potential security risks? Time for a clean install? [closed]

I recently used a Thunderbolt to HDMI connector (ADAM 4K2K) casually given by a colleague who then left the country, misguidedly thinking "oh, it's a display adapter, not a USB, so it probably isn't ...
2
votes
1answer
54 views

What are the dangers of extending my PATH?

Are there any dangers of extending my PATH, say by adding /Users/me/bin?
18
votes
3answers
6k views

Stolen MacBook: should I worry about my data?

Unfortunately, someone stole my laptop (a MacBook) and I did not realize that for 48 hours. Now, this was a work laptop and my company's security team is going to wipe the laptop remotely as soon as ...
-1
votes
1answer
94 views

Macbook Pro compromised / Rootkit. Are the files I pulled onto my external drive safe? [duplicate]

I am basically positive my macbook pro has been hacked and has a firmware rootkit installed on it, and at this point I have decided it is now a brick and I need to move onto a new computer. The ...
1
vote
0answers
46 views

OSX: Momentary appearance of a .dmg modal, when opening an image

I had a situation that struck me as odd. I opened an image which I had downloaded via browser save-as. After the finder/OS initiated the file-open, a modal dialog momentarily flashed, typical to ...
0
votes
0answers
53 views

Diff files between two HFS volumes

I currently have two HFS volumes that I would like to compare in order to see which files have been added or modified. It's a Mac OS X 10.9 (Mavericks) install. First volume is the system as of today....
0
votes
0answers
90 views

New user has appeared on my Macbook Pro [duplicate]

Today I noticed the addition of a new user "Linchengzhang" on my MacBook pro. Apparently the user was added 25th April 2019 (according to the folder creation) and it appears to have an identical ...
0
votes
1answer
49 views

OS X Firewall Block all incoming Connections Affecting Software Updates?

I just bought a 2017 Macbook Pro with the latest OS (Mojave). In the OS X Mojave Security and Privacy-Firewall settings, I set Firewall to "Block all incoming connections" as I am extra cautious, but ...
0
votes
0answers
46 views

CSP/KSP module for MacOS

My company developed a custom Key Storage Provider for Microsoft CAPI so that CNG-using Windows apps can perform signatures using a remote signature service. I would like to know if there is support ...
0
votes
2answers
191 views

I am getting “Your connection is not private” error and it disappears when I use a VPN

I use a Mac (running macOS Sierra). Yesterday I was watching a movie online from some not-so-trustworthy website and when I clicked the pause button, a tab appeared and suddenly disappeared. From ...
1
vote
1answer
113 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
1
vote
1answer
97 views

Bruteforcing via port 88 on MacOS

Macos has open port 88 by default. Is it possible to check validity of the password via this port from Linux and how? If the vncserver is active, it is possible to know also the username (by ...
28
votes
2answers
5k views

How is it possible for user's password to be changed after storage was encrypted? (on OS X, Android)

There are built-in functionalities to encrypt a storage on OS X (FileVault) and Android. On OS X: to enable encryption current user must have a password protected account. After enabling the ...
0
votes
0answers
89 views

Files Accessed over macOS's SMB Sharing Encryption

I have an iMac on the same network as my Windows desktop. Both are on the local network at my university. I am sharing a folder on the iMac using the built-in sharing utility (via SMB) with everyone ...
0
votes
0answers
70 views

iOS Security Architecture-Encryption Keys

As per iOS Security 12.1 documentation(Page-15), there are individual UID and GID for each processing unit i.e AP(Application Processor) and Secure Enclave. The application processor and Secure ...
35
votes
3answers
6k views

Is it insecure to send a password in a `curl` command?

Here’s an example request we can make to the GitHub API: curl 'https://api.github.com/authorizations' --user "USERNAME" This will prompt for the account password, to continue: Enter host password ...
2
votes
1answer
173 views

Why are there no free resources on exploit development on macOS? [closed]

There are many resources on Linux exploit development, but I cannot find any resources targeting macOS, except for some bad ones on YouTube. Why are there no write-ups on macOS exploitation ...
0
votes
1answer
3k views

Random Chrome Notifications and Strange Source Code

My elderly parents are receiving chrome notifications from a strange URL on their iMac: (https://s1.snc.com.ru:443) Example Messages • Pending Payment: Paypal Has Sent You $65,900 • Clean your mac....
0
votes
0answers
48 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
0
votes
1answer
55 views

print statements

Is it possible for a bad guy to read print statements done in the swift programming language? Ex. If I release an app to the Apple Appstore and it has following print line: print("my-secret-password"...
0
votes
1answer
319 views

Have I been hacked? Terminal shows me in a different hostname than my machine [duplicate]

Sorry for the generic title but really don't know how to call this. I've just upgraded my MacBook Air to macOS Mojave 10.14.3. Usually, when opening the terminal it would show something like ...
4
votes
1answer
163 views

How to Best Minimize Damage After Loss of Computer

Myself and the rest of my coworkers on my (former) employer’s dev team were all just laid off from our jobs, and the employer took our MacBook Pros without letting us clear of our personal information ...
1
vote
1answer
2k views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
0
votes
1answer
234 views

Local Video Screenshot during Netflix

I was just binge watching Netflix from my MacBook Pro on a TV streamed using HDMI. It automatically started the final episode of the season but about 20 seconds into it, a screenshot from a local ...
4
votes
3answers
663 views

Why is Spotify using my webcam (AppleCamera)

I'm running Mac OS Mojave. I've just run the following command into terminal to see which applications are using my web cam. lsof | grep "AppleCamera" Google and Spotify showed up: Spotify 668 ...
1
vote
1answer
195 views

Metasploit MacOS victim - tools to enable remote desktop / GUI view of the victim

If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface. meterpreter > run getgui -u loneferret -...
0
votes
1answer
388 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
2
votes
0answers
284 views

Weird Python script found on a Mac Os X client machine

I was reviewing a Mac Os X machine (a late 2016 MacBook Pro) and I found some weird scripts in the LaunchAgent folder. 8 -rw-r--r-- 1 XX wheel 500 30 Lug 07:18 com.1e1zq.plist 8 -rw-r--r-- 1 XX ...
3
votes
3answers
545 views

New user with Chinese name appeared on MacOS. Hacker?

I'm the only user on my personal laptop (MacBook Pro) running macOS Sierra. I discovered today that a suspicious user with a Chinese name appeared next to mine in the finder. Please see the attached ...
6
votes
1answer
766 views

How Homebrew may impact your Mac's security [duplicate]

I read (here and here) that Homebrew (the Unix package manager) is a significant Mac security risk. An attack is allowed because Homebrew makes /usr/local/bin writable without root user privilege, ...
1
vote
0answers
45 views

Increase password iterations?

Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
3
votes
1answer
112 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...

1 2 3 4 5 8