Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

0
votes
2answers
65 views

I am getting “Your connection is not private” error and it disappears when I use a VPN

I use a Mac (running macOS Sierra). Yesterday I was watching a movie online from some not-so-trustworthy website and when I clicked the pause button, a tab appeared and suddenly disappeared. From ...
1
vote
1answer
83 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
1
vote
0answers
44 views

Bruteforcing via port 88 on MacOS

Macos has open port 88 by default. Is it possible to check validity of the password via this port from Linux and how? If the vncserver is active, it is possible to know also the username (by ...
28
votes
2answers
5k views

How is it possible for user's password to be changed after storage was encrypted? (on OS X, Android)

There are built-in functionalities to encrypt a storage on OS X (FileVault) and Android. On OS X: to enable encryption current user must have a password protected account. After enabling the ...
0
votes
0answers
31 views

Files Accessed over macOS's SMB Sharing Encryption

I have an iMac on the same network as my Windows desktop. Both are on the local network at my university. I am sharing a folder on the iMac using the built-in sharing utility (via SMB) with everyone ...
0
votes
0answers
61 views

iOS Security Architecture-Encryption Keys

As per iOS Security 12.1 documentation(Page-15), there are individual UID and GID for each processing unit i.e AP(Application Processor) and Secure Enclave. The application processor and Secure ...
34
votes
3answers
5k views

Is it insecure to send a password in a `curl` command?

Here’s an example request we can make to the GitHub API: curl 'https://api.github.com/authorizations' --user "USERNAME" This will prompt for the account password, to continue: Enter host password ...
2
votes
1answer
86 views

Why are there no free resources on exploit development on macOS? [closed]

There are many resources on Linux exploit development, but I cannot find any resources targeting macOS, except for some bad ones on YouTube. Why are there no write-ups on macOS exploitation ...
0
votes
1answer
655 views

Random Chrome Notifications and Strange Source Code

My elderly parents are receiving chrome notifications from a strange URL on their iMac: (https://s1.snc.com.ru:443) Example Messages • Pending Payment: Paypal Has Sent You $65,900 • Clean your mac....
1
vote
0answers
29 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
0
votes
1answer
53 views

print statements

Is it possible for a bad guy to read print statements done in the swift programming language? Ex. If I release an app to the Apple Appstore and it has following print line: print("my-secret-password"...
0
votes
1answer
179 views

Have I been hacked? Terminal shows me in a different hostname than my machine [duplicate]

Sorry for the generic title but really don't know how to call this. I've just upgraded my MacBook Air to macOS Mojave 10.14.3. Usually, when opening the terminal it would show something like ...
4
votes
1answer
106 views

How to Best Minimize Damage After Loss of Computer

Myself and the rest of my coworkers on my (former) employer’s dev team were all just laid off from our jobs, and the employer took our MacBook Pros without letting us clear of our personal information ...
0
votes
1answer
412 views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
0
votes
1answer
138 views

Local Video Screenshot during Netflix

I was just binge watching Netflix from my MacBook Pro on a TV streamed using HDMI. It automatically started the final episode of the season but about 20 seconds into it, a screenshot from a local ...
3
votes
0answers
183 views

Why is Spotify using my webcam (AppleCamera)

I'm running Mac OS Mojave. I've just run the following command into terminal to see which applications are using my web cam. lsof | grep "AppleCamera" Google and Spotify showed up: Spotify 668 ...
1
vote
1answer
124 views

Metasploit MacOS victim - tools to enable remote desktop / GUI view of the victim

If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface. meterpreter > run getgui -u loneferret -...
0
votes
1answer
262 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
1
vote
0answers
206 views

Weird Python script found on a Mac Os X client machine

I was reviewing a Mac Os X machine (a late 2016 MacBook Pro) and I found some weird scripts in the LaunchAgent folder. 8 -rw-r--r-- 1 XX wheel 500 30 Lug 07:18 com.1e1zq.plist 8 -rw-r--r-- 1 XX ...
2
votes
3answers
374 views

New user with Chinese name appeared on MacOS. Hacker?

I'm the only user on my personal laptop (MacBook Pro) running macOS Sierra. I discovered today that a suspicious user with a Chinese name appeared next to mine in the finder. Please see the attached ...
5
votes
1answer
364 views

How Homebrew may impact your Mac's security [duplicate]

I read (here and here) that Homebrew (the Unix package manager) is a significant Mac security risk. An attack is allowed because Homebrew makes /usr/local/bin writable without root user privilege, ...
1
vote
0answers
43 views

Increase password iterations?

Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
3
votes
1answer
110 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
1
vote
0answers
22 views

Is it possible to open Chrome's databases.db in another MacBook?

According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords ...
5
votes
5answers
201 views

Unix Privilege Escalation: “sudo must be owned by uid 0 and have the setuid bit set”

It seems protections are harcoded into sudo that prevent the binary from executing as a low-privileged user. Running it in Ubuntu as a normal user returns the following error: "sudo must be owned ...
2
votes
2answers
82 views

Home environment for MacOS detection tools

I was recently introduced to a variety of detection/hunting tools for MacOS. Listed below are some of the tools I am interested in learning to broaden my toolkit and better learn Mac security. Google ...
2
votes
0answers
87 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
5
votes
0answers
163 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
3
votes
1answer
186 views

MacBookPro's OSX install.log has entries that predate the initial unboxing

Basically what the title says. I recently had a look at my /var/log/install.log and the earliest entries are from about 2 full months prior to me unboxing the computer. The packaging had cellophane, ...
7
votes
4answers
501 views

Freaked out by “impossible click” in logs

I was staging an isolated production environment and accessing it's remote PHP script from my local mac on http://example.com/XbAM7Kt7SJj3M8ytJfEQZbwcBLzg0gNWGfyCHL2b0f0 I saw my click in the log as ...
-2
votes
1answer
92 views

Security testing alternatives on MacOS [closed]

Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
1
vote
2answers
92 views

Is setting a firmware password on a Macbook enough to prevent cold boot attacks?

I have a Macbook configured with a firmware password required to boot from any media other than the built-in NVMe drive. In theory, this means without my password you can't boot from removable media. ...
3
votes
1answer
2k views

What are the security implications of homebrew and macports?

macports binaries are useable from /opt/local/bin/, i.e. for tesseract bin$ which tesseract /opt/local/bin/tesseract bin$ ls /opt/local/bin/tesseract -rwxr-xr-x 1 root admin 28120 15 Sep 2016 /...
0
votes
0answers
63 views

Capturing Dot11 (802.11) headers on Mac OSX

I'm trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I've heard somewhere that WLAN interface of Mac OSX (en1 interface as ...
1
vote
1answer
133 views

Somebody called a number from a pop-up on their MacOS computer and installed a program called GoToAssist. What is the best course of action now? [duplicate]

Somebody I know saw a pop-up on their iMac running Sierra (10.13.5) that advised them to call 877-336-5833. They called the number and the representative advised that they install a program called "...
0
votes
3answers
138 views

Does installing undercover (macbook theft software) increase risk of attack, privacy breach

http://orbicule.com/undercover/mac/ I stumbled upon this page today and am intrigued by the service, it offers a lot of features that I have been interested in since my last computer was stolen in a ...
1
vote
0answers
45 views

Second User On My Computer Via iCloud? [closed]

Disclaimer: I have tried looking for an answer to this, but I couldn't find anything. I also am learning the basics of internet security and I have recently discovered the Objective See security apps ...
0
votes
2answers
107 views

Is revealing login name of macOS into internet a security risk?

For example, sometimes I need to post debug messages to internet like this: No such file : /Users/xxxxx/Documents/test.sh My question is, is forgetting replacing the login name into xxxxx a security ...
1
vote
0answers
100 views

What encryption method is used on macOS Preview.app?

In order to send a file securely, I am going to encrypt/password protect a PDF file with Preview on macOS. Other question(s), such as this one have asked the method of encryption for PDF's in ...
2
votes
2answers
76 views

What format is an decrypted RSA private key in, specifically in OS X Keychain?

I was trying to extract an un-exportable key from OS X Keychain. I used this tool to extract the key. The tool gives me a hexdump of the private key. An RSA 2048 bit key came out to be 2441 bits, ...
2
votes
1answer
79 views

Why does not updating a MacOS keychain password cause applications to become troublesome? [closed]

I've changed my Macbook computer's password in using recovery mode. I'd changed it once normally, then it suddenly "stopped working" (or I started "mis-remembering" it after using it a few times, ...
6
votes
1answer
1k views

What encryption method is used by the zip program in macOS?

In order to send a file securely I am going to encrypt/password protect a zip file. (Why I am doing this). I am using macOS Sierra 10.12.6 and through my research I have concluded that encrypting a ...
2
votes
1answer
38 views

How save, on a log file, all IP inbound/outbound connected to my Mac under MacOsX 10.9.5?

During its operation, the computer connects and disconnects to and from numerous servers - which are identified by a specific IP address. Is there a solution to trace the ip addresses of all the ...
4
votes
2answers
15k views

gpg: decryption failed: No secret key

I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error: gpg: decryption failed: No ...
0
votes
1answer
164 views

Creating self-signed root CA using MacOS Keychain

I'd like to use MacOS keychain to create a basic Root CA, which will be able to sign CSRs and/or Intermediate CA which will be able to do that. For knowledge purpose, I'd like to create a Root, and ...
1
vote
1answer
51 views

Opened port leads to a collection listing

I've been doing some searching on a macOS server and have noticed that there's an open port that I am able to access outside the network. When I go to this port it will ask for a username and a ...
2
votes
1answer
83 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
0
votes
2answers
189 views

Why does Kaspersky warn me about PHP trojans on a Mac?

I have a question regarding PHP Trojans on a Mac. I have downloaded a website's home directory which has been hacked to my local Mac. On this Mac I am running Kaspersky Internet Security which ran a ...
0
votes
1answer
86 views

How to Remotely Retrieve Password Hash from Computer

Just for fun, I wanted to see if I could remotely extract the password hash of my own user account on my own Mac. Assume that the device is running either the latest version of macOS Sierra (10.12.6) ...
-1
votes
1answer
69 views

Wrong user or IP in High Sierra terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$. I Googled and found references to WannaCry ...