Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

creating large files to “zero fill” network attached storage (NAS)

For security reasons I'm trying to "zero fill" network attached storage (NAS) which is unmountable to OS X. There is no existing disk utility to low-level format the drive. So I decided to ...
0
votes
0answers
44 views

Configuring a macbook for a specific case

I've used cleanbrowsing.org as a DNS filter, created an administrator account, logged in into that account, changed my usual (admin) account to a normal user and set the new admin account with a long ...
0
votes
0answers
72 views

Best ways to isolate / sandbox a program on macOS?

I work in software development and it often involves downloading tools and things from the internet to run on my computer. It's hard to avoid this and it drives me nuts from a security standpoint. I ...
1
vote
0answers
107 views

GPG Agent SSH Forward Pinentry

I have GPG agent forwarding via SSH RemoteForward working up to a point. I can list my private and public keys on the remote host. If I try to decrypt a file remotely, the PIN is prompted for but the ...
1
vote
1answer
62 views

Homebrew and NOPASSWD sudo

I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to ...
2
votes
2answers
143 views

Which encryption cypher is used when using zip -e?

I am looking for a cross-platform way to encrypt credentials I need to send to a client. I know encrypted zip archives leak metadata and can be tampered with, but how strong is the encryption cypher? ...
0
votes
0answers
20 views

Using lulu on osx in home business setup. Any reason for external router base firewall?

I have Lulu setup under osx on my Mac. So say an errant program, curl, if it tries to access outside address is stopped. Would an external router based firewall bring any extra level of protection? I ...
1
vote
0answers
47 views

Log/Detect Clipboard access

With the public beta access to iOS 14 people got a warning when apps access the clipboard, and it lead to people realizing that many apps just grab everything from the clipboard they can get and send ...
0
votes
0answers
39 views

How secure is the apple cross device copy and paste feature? [duplicate]

I can copy and paste between my iPhone and MacBook Pro it's a great feature that I find myself using frequently. I am frequently copy and pasting from my password manager to log in to different sites....
0
votes
0answers
58 views

Potential Hack (Macbook/Edge/Teams/Remote) [duplicate]

I have noticed earlier that my Macbook Pro camera light was lit on - the screen is turned off but not sleeping - the entire time the device was not being used or touched. I logged in to investigate ...
0
votes
0answers
31 views

Apple T2 chip endorsement key

Does Apple's T2 chip have an endorsement key (or equivalent mechanism) to prove that another T2 key can only be used inside the secure enclave? We are looking for something like what a TPM provides so ...
0
votes
1answer
63 views

MacOS able to access data without password

On a Mac, one can go into recovery mode by turning off the Mac and clicking Command R while turning it on. Then, by typing resetpassword into Terminal, one is able to reset the password without ...
0
votes
1answer
48 views

What mechanisms prevent me from “ptraceing” a signed OSX application?

I want to debug an application I have installed on my Mac. The application comes in a ".app" format, which is basically a folder including the binary and some other frameworks and resources. I was ...
3
votes
1answer
92 views

Is macOS installing known bad Certificate Authorities by default?

Today I was checking out macOS security and privacy guide, and when I looked at my keychain, I was surprised to find Startcom CA and Symantec CA trusted by default. Isn't this supposed to be ...
0
votes
0answers
28 views

macOS + malware + root password [duplicate]

I entered my macOS admin details (root password) into an application I think was malicious. Suspicious, I checked the keychain and my tokens had modified passwords. What else could have this ...
15
votes
5answers
6k views

HTTPS connection to specific sites fail with cURL on macOS

On my Mac, HTTPS connnections to certain sites fail using the built-in curl binary of macOS 10.14. They work fine with different browsers, as well as other builds of cURL on the same system. One of ...
0
votes
2answers
91 views

If I am trying to clean install a MacOS with internet recovery, is it safer to use mobile network than WIFI network?

I just clean installed my MacOS Catalina on my MacBook due to virus on my PC that I worried got on my MacBook via usb file transfer. I did an internet recovery to reinstall MacOS Catalina with my ...
0
votes
2answers
96 views

Can a computer/MacBook be compromised/infected/hacker simply be requesting/attempt to join a network?

I was finishing a clean installation of macOS Catalina on my MacBook, and I was asked to select a wifi network. I misclicked on a wifi network with a name that's very similar to mine and was asked to ...
0
votes
0answers
15 views

Is it possible to delete all traces and files on a mac? [duplicate]

Is it possible to delete all traces and files on a mac, so no one can recover files and there will be no traces at all for this files or any activity?
2
votes
2answers
162 views

Why does my MacBook air have so many MAC addresses, according to my router?

I am investigating some strange issues with my home network, and decided to have a look at my device history. I only have one Macbook Air, but my device history is showing ten, all with different MAC ...
1
vote
1answer
264 views

Hugoclose.com malware is causing issues in google chrome [closed]

In my MacBook Air, whenever I search something in google, some adds are appearing out of no where and they're hiding the actual search results from google. When I checked the developer tools, I found ...
133
votes
2answers
24k views

Why is “fhepfcelehfcepfffacacacacacacabn” a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
1
vote
1answer
168 views

How to store private keys in browsers after Apple's decision to wipe script-writeable storage?

We have a web application that puts a private key in LocalStorage, which enables users to sign off certain messages. It's been working fine until today we saw this announcement from Apple. The TLDR; ...
1
vote
1answer
55 views

Is using numeric passwords on Macs reasonable for average users?

Is using a numeric password (similar to a PIN code on a phone) on Macs reasonable for regular users, considering they are the norm for passcodes on iOS devices? Traditionally user accounts on Macs ...
1
vote
2answers
777 views

tcpdump packets have bad and incorrect checksums on localhost, how to investigate further?

Am investigating a macOS Catalina machine that is believed to be infected with malware. Have been viewing packets with tcpdump and noticed, on connecting to any web address, there are legit packet ...
0
votes
0answers
72 views

Are Mac OSX encrypted volumes to be trusted(from Disc utility)

I am currently using mac os disc utility on mac and normally create a 10GB encrypted image to store my random private files in... What really makes me paranoid is how fast or shall we say that it ...
0
votes
1answer
114 views

Malware in backups [closed]

The main thing i am interested in is the 3rd point below. In short I am worried about having a virus and what will suffice to remove it. I am on Mac and am running the latest version of Catalina. I ...
0
votes
0answers
28 views

Could a macOS app get access to my iCloud Drive folder without permission?

As I can easily cd into ~/Library/Mobile\ Documents and ls contents in iCloud Drive without getting "operation not permitted". If ls the folders like ~/Documents or ~/Downloads gives me a prompt to ...
1
vote
1answer
97 views

Is it safer to “chown” the Applications folder on macOS?

Whenever I copy a program into the Applications folder on my Mac, I have to use admin rights to do that. My standard user account (marc) does not have admin rights, so I get an alert and have to fill ...
2
votes
0answers
90 views

Under what conditions can malware bypass macOS Catalina's permission system? [closed]

Catalina has some new security features which include System Preferences > Security & Privacy features, which requires apps to request access to specific computer functionality such as camera, ...
0
votes
0answers
51 views

Is data stored on a standard mac user account considered secure from other users on that same local computer?

I'm trying to figure out if the data created by a Mac user on a local mac is truly secure from other users on that same mac. For example, on MacOS Catalina, I have three accounts: Administrator User ...
1
vote
0answers
57 views

Why does pycharm uses lax security on macOS?

When looking at entitlements on pycharm CE for macOS, it shows many serious security exceptions. Here are its entitlements: <dict> <key>com.apple.security.cs.allow-jit</key> ...
0
votes
0answers
87 views

Osx protections binary patch

I'm newbie in reverse engineering field recently I tried my "skill" in real world applications (apple MacOS) , but think that something went wrong during the binary patch. I tried to patch 3 apps (...
0
votes
0answers
40 views

Xcode trace application

I have to do some ios coding but i don’t have my work machine. Fortunately I have access to another one. I wonder if xcode keeps track of the id of the machine that was used to write the code? And ...
0
votes
0answers
249 views

Security implications of homebrew

I want to install homebrew in the safest possible way (single user system). It is often criticized that homebrew takes precedence over /usr/bin and /bin (in /etc/path) and therefore any malware can ...
1
vote
1answer
67 views

Prevent an application from making any network access on macOS

I want to run an application on macOS, but preventing it from making any type of network access, or any type of internet access. I have seen the following possibilities: Use the built-in firewall. ...
9
votes
1answer
1k views

Is reading from /dev/urandom on macOS Catalina a safe way to produce cryptographically secure data?

I'm reading a lot about entropy on macOS... I know it doesn't use Yarrow anymore as per this FIPS 140-02 doc a NIST compliant DRBG. I read a lot: https://github.com/briansmith/ring/pull/398 How ...
3
votes
0answers
74 views

Capture macOS/IOS system HTTPS packets

I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
0
votes
0answers
132 views

On MacOS, gpg gives “random_seed file is empty” error after I ran out of space for an encryption process?

I tried to encrypt a file on MacOS with gpg, and it turns out that I did not have enough hard drive space to make it. Afterwards, it exited with an error: gpg: can't write '/Users/myname/.gnupg/...
0
votes
1answer
203 views

Info about gpg setup on MacOS

On Mac OS Mojave: ▶ gpg --list-keys Warning: Failed to set locale category LC_NUMERIC to en_GR. Warning: Failed to set locale category LC_TIME to en_GR. Warning: Failed to set locale category ...
-3
votes
1answer
58 views

My IT manager says rMBP is not satisfied ISO27001 [closed]

My company computer is using MS Windows and I myself as a software engineer I would recommend my developer team to use OSX since it is hassle least than Linux/Unix based OS. When I propose the ...
3
votes
1answer
339 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
2
votes
1answer
80 views

Thunderbolt to HDMI connector freezes macbook, potential security risks? Time for a clean install? [closed]

I recently used a Thunderbolt to HDMI connector (ADAM 4K2K) casually given by a colleague who then left the country, misguidedly thinking "oh, it's a display adapter, not a USB, so it probably isn't ...
2
votes
1answer
60 views

What are the dangers of extending my PATH?

Are there any dangers of extending my PATH, say by adding /Users/me/bin?
19
votes
3answers
7k views

Stolen MacBook: should I worry about my data?

Unfortunately, someone stole my laptop (a MacBook) and I did not realize that for 48 hours. Now, this was a work laptop and my company's security team is going to wipe the laptop remotely as soon as ...
-1
votes
1answer
130 views

Macbook Pro compromised / Rootkit. Are the files I pulled onto my external drive safe? [duplicate]

I am basically positive my macbook pro has been hacked and has a firmware rootkit installed on it, and at this point I have decided it is now a brick and I need to move onto a new computer. The ...
1
vote
0answers
46 views

OSX: Momentary appearance of a .dmg modal, when opening an image

I had a situation that struck me as odd. I opened an image which I had downloaded via browser save-as. After the finder/OS initiated the file-open, a modal dialog momentarily flashed, typical to ...
0
votes
0answers
115 views

New user has appeared on my Macbook Pro [duplicate]

Today I noticed the addition of a new user "Linchengzhang" on my MacBook pro. Apparently the user was added 25th April 2019 (according to the folder creation) and it appears to have an identical ...
0
votes
1answer
80 views

OS X Firewall Block all incoming Connections Affecting Software Updates?

I just bought a 2017 Macbook Pro with the latest OS (Mojave). In the OS X Mojave Security and Privacy-Firewall settings, I set Firewall to "Block all incoming connections" as I am extra cautious, but ...
0
votes
2answers
261 views

I am getting “Your connection is not private” error and it disappears when I use a VPN

I use a Mac (running macOS Sierra). Yesterday I was watching a movie online from some not-so-trustworthy website and when I clicked the pause button, a tab appeared and suddenly disappeared. From ...

1
2 3 4 5
8