Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0 votes
0 answers
24 views

Suspicious incoming connection attempts from random IPv6 addresses on local network on macOS

I've been using Little Snitch on my Macbook and I have since a long time a rule to alert on any incoming IPv6 connection, which would be suspicious since I use IPv4 only. Since a couple of days I've ...
user avatar
  • 101
0 votes
2 answers
120 views

Objectively, what can you do on kali that you can't do on a mac?

What is so special about kali? Is there some suite that just run on kali and won't on other distros/mac? Is it just marketed better to the infosec community?
user avatar
0 votes
0 answers
46 views

Can code be executed from copying the From field of an Outlook Email?

I received a suspicious email in Outlook and wanted to check the from email field to see if it was still a Microsoft address. I right clicked and selected "copy address" on the From field ...
user avatar
  • 1
0 votes
0 answers
15 views

Get encryption status of NAS TimeMachine disk

I’m writing a script to get the encryption status of Time Machine disks. I run defaults read /Library/Preferences/com.apple.TimeMachine.plist and grep for LastKnownEncryptionState. This works fine for ...
user avatar
  • 111
0 votes
1 answer
94 views

SSL certificate not standards compliance in Safari

I created a certificate authority on my MacBook, and I'm using it to create a wildcard certificate. I have the root CA added as trusted into my system keychain. On Safari, it complains that the ...
user avatar
  • 101
0 votes
0 answers
58 views

Can a Bluetooth device hack a phone it used to be paired to if the device was removed from the phone, but the device was not reset/cleared?

If a Bluetooth device, like a toy, smart toothbrush, or headphones etc. is paired to a phone or computer, and the Bluetooth device is sold/lost without resetting the device or any Bluetooth data on it,...
user avatar
0 votes
1 answer
82 views

VPN does not hide true location on the Maps app on Macbook

I am using a VPN (NordVPN). I am seeing the VPN IP in browsers - this is ok. However when I check the Maps apps on my mac, it shows my true location. How can I ensure that my true location is hidden ...
user avatar
  • 101
0 votes
1 answer
63 views

OS on external drive -- is it safe?

So I'm installing macOS to my external hard drive partition, so I can have a 100% clean environment where I can engage with cryptocurrencies. (Exchanges, stable coins, protocols, putting actual money ...
user avatar
0 votes
0 answers
24 views

Compromised machine. Should I create a partition or volume to install a clean OS?

My goal is to create a 100% clean environment where I can interact with cryptocurrencies. For that, I can partition my disk or I can create a volume. Which one should I prefer? Some context about the ...
user avatar
7 votes
1 answer
3k views

Is Mac OS safer to use as far as firmware rootkits, cold boot attacks and evil maid?

Windows machines have things like TPM and Secure boot to help protect against firmware rootkits, but is Mac any safer in these regards? How does Mac work in the boot stage and is it any less ...
user avatar
1 vote
0 answers
97 views

Need help cracking a MacOS Catalina password

I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
user avatar
2 votes
2 answers
546 views

Cipher suite choice on macOS on Apple Silicon

I have a postfix mail server that accepts these cipher suites: tls_high_cipherlist=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384: ...
user avatar
  • 627
0 votes
1 answer
75 views

Virus from Embedded Image in Mac Mail?

I'm using macOS High Sierra, and mac Mail version 11.3. I have a script that uses the Twitter API to continually fetch tweets in real-time and send the contents of each of these tweets, including any ...
user avatar
  • 3
0 votes
0 answers
46 views

When I visit an http://gofile.me/ link, how much information to I provide to the NAS server owner?

There are files I need from a heavy NAS user and they've given me a link of the form http://gofile.me/xxxxx/xxxxxxxxx If my laptop running the Chrome browser in macOS is connected to the internet via ...
user avatar
  • 1,385
0 votes
0 answers
66 views

Suspicious MAC address when using personal hotspot (iPhone and MacBook Air)

Personal hotspot connection from iPhone 12 used on my MacBook Air. Under Settings - Mobile Data - Personal Hotspot (iPhone), I see 2 data usage components: 1.5 GB - MacBook 20.2 KB - A suspicious MAC ...
user avatar
0 votes
1 answer
127 views

Is it possible to bruteforce Yubikey's PIN when using it as PIV/Smart card?

I'm considering using Yubikey to log in to my Mac. However, in my threat model I have to assume that it will fall into the wrong hands, hence the question: does Yubikey have any mechanisms that ...
user avatar
0 votes
0 answers
32 views

Is it a security risk that macOS Keychain.db files are accessible by any process on the system?

This question might have an obvious answer but I think a clear explanation is a missing piece on the internet. Isn't it (or is it) a security risk that macOS's Keychain.db files located at ~/Library/...
user avatar
0 votes
1 answer
43 views

Read files protected with System Integrity Protection with sudo

I had a debate with a friend about the security model in new OS X versions. OS X El Capitan and newer have the System Integrity Protection security feature which protects aspects of the OS even from ...
user avatar
  • 583
0 votes
0 answers
865 views

How secure is OpenCore Legacy Patcher?

My MacBookPro doesn't get major updates anymore, but the hardware still works well. I came accross OpenCore Legacy Patcher, which allows to install recent versions of MacOs onto older macs through ...
user avatar
  • 101
0 votes
1 answer
65 views

Does MacOS Filevault + Mac hardware obviate lengthy login passwords?

Take the combination of an encrypted disk with a secure enclave chip that never exposes an internal Key Encryption Key and throttles or prevents too many password guesses. Seems to me that this should ...
user avatar
0 votes
1 answer
78 views

Postgres.app security on a Mac?

I'm wondering if there are any security concerns with installing PostgreSQL on a Mac using the app? https://www.postgresql.org/download/macosx/ I had a look at the data folder and it's owned by me ...
user avatar
0 votes
2 answers
2k views

Is Xcode vulnerable due to log4j?

After the log4j vulnerability was announced, I scanned my Mac to see if any applications were using it. find / -name "*log4j*" 2>/dev/null Here's the output that indicates that Xcode has ...
user avatar
  • 101
3 votes
1 answer
3k views

hashcat skipping gpu even if it's recognizing the device and the driver is installed

I'm trying to run hashcat on a MacBook Pro. Running hashcat -I to check the devices' informations yields: hashcat (v6.2.5-38-g8b61f60e8) starting in backend information mode OpenCL Info: ============ ...
user avatar
0 votes
1 answer
64 views

Mac os x installation partition integrity

Let's suppose i lend my new macbook to a (dishonest) friend. This is a new fresh macbook, just unboxed. My friend does what ever he wants on this macbook. One month later, he gives me back the macbook....
user avatar
  • 127
0 votes
0 answers
25 views

Can someone on same wifi access my computer? [duplicate]

I was connected to a hotel wifi and airport wifi last week. Some of the files in my Downloads folder now has been compromised (soft keys stolen). Can someone connected to same wifi gain access to my ...
user avatar
  • 101
0 votes
0 answers
26 views

Can work system admin remote into my personal Mac when I connect to work VPN? [duplicate]

I usually connect to my work VPN on my personal Mac and then use Windows Remote Desktop client to access my work computer. Today on my Mac while disconnected from the VPN I noticed the username/...
user avatar
  • 101
1 vote
1 answer
115 views

How to know which IP address is used for my DNS queries on macOS?

I'm not an expert, only have basic knowledge about all this but I'd like to understand what's going on so please bear with me. I'm currently using a VPN (IKEv2 protocol) on a macOS system and I can ...
user avatar
1 vote
1 answer
350 views

How does FileVault work with Time Machine?

Let's suppose a Mac OS computer with two users: user1 and user2. These users are not administrators. FileVault is enabled. The computer is connected to an empty external hard drive for Time Machine. ...
user avatar
  • 127
0 votes
0 answers
69 views

How to get EvilOSX's Slowloris to work?

I was trying out the Slowloris Module of EvilOSX. I've also installed the Homebrew Apache server on my victim VM using this link. However, when I executed the module, I noticed some packets started ...
user avatar
0 votes
0 answers
99 views

Hybrid-Analysis.com indicates the website that my macOS system is contacting is likely malicious

Backstory: I just upgraded my MacBook from OS X 10.11.6 to the most updated version of macOS, 10.14.6 Mojave. I also have the Little Snitch network filter installed. I know nearly nothing about ...
user avatar
1 vote
2 answers
412 views

Safe or Unsafe to Store Passwords in Chrome on MacOS?

I've seen conflicting opinions on this, more than the below, but i.e. Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/ Safe: https://...
user avatar
  • 336
10 votes
7 answers
6k views

Can you create a fake (malicious) Ubuntu iso

Recently I got into an exchange with someone on social media about the security of Linux versus OSX and Windows. I stated that it is possible (and probable) that someone could code a low level back ...
user avatar
0 votes
1 answer
149 views

How is my Macbook connecting to my WiFi APs without asking for a password?

When I work away from home (and home wifi) I use my phone's hotspot to connect my Macbook to the internet. However, it's always surprised me that I just have to click on the name of the hotspot to ...
user avatar
  • 101
0 votes
0 answers
81 views

How Does it Work - User Authentication using Yubico Smart Card (Yubico PIV) on Mac

Background: I have setup my macOS Catalina so that I can authenticate my user account using my Yubico (set up as a Smart Card) and its PIN After setting this up I can see that there are now 2 ...
user avatar
0 votes
0 answers
128 views

MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?

Secenario Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on. I frequently need to access sensitive data located in text files on an encrypted ...
user avatar
0 votes
2 answers
386 views

Is Mac OS Big Sur Spying?

I would like to know if macOS "Big Sur" sends unencrypted OCSP requests. I am a newbie and not aware of technical stuff, but when I came across Jeffrey Paul's article, I am a bit concerned ...
user avatar
2 votes
1 answer
273 views

How to verify a x509 certificate from Apple on a Ubuntu server?

I'm trying to verify GameCenter authentication on an iOS app with GameKit. The fetchItems API returns a URL for the public key needed to do this. Steps 3 and 4 of that API say: Use the publicKeyURL ...
user avatar
26 votes
5 answers
6k views

How can a non-admin program cover your entire screen with a window?

This year, since many students are online, College Board (the company that administers AP Exams in the US, along with the SAT) recently released its Digital Testing App. Once installed, and going ...
user avatar
  • 361
1 vote
1 answer
5k views

How best to crack password for MacOS encrypted .dmg, given I know the majority of the password content? [closed]

Encrypted .dmg on MacOS High Sierra, tested password before sending for repair. Upon return from repair, password does not work. The possibilities I see are the .dmg file is corrupted, or I'm wrong ...
user avatar
  • 61
1 vote
0 answers
100 views

Recovering files with recovery key after double FileVault activation - is that possible?

Let's imagine I have a work macbook with ssd and I use FileVault, and the company has the FileVault recovery key. I want to make sure my data is erased and unrecoverable, what is the best way to ...
user avatar
  • 153
0 votes
1 answer
104 views

Old operating system (offline computer) need to come online for a few minutes

OSX El Capitan I have an offline computer running an old OSX operating system. I would like to connect that computer to the web for a brief few minutes in order to install HomeBrew and install a newer ...
user avatar
1 vote
1 answer
258 views

MacOS Firewall Needed or Unnecessary?

Coming from Windows to macOS, I was surprised that the firewall was off by default. I immediately turned this feature on. Would this be necessary? Are there some cons to having the firewall on that I ...
user avatar
0 votes
0 answers
122 views

How can I forcibly block all the Internet traffic that doesn't go through a VPN to prevent accidental IP leak?

I need to block all the Internet connections that don't go through a VPN server before they even get the chance to happen. How can I achieve this on Mac OS Big Sur? Mac OS doesn't seem to have any ...
user avatar
0 votes
1 answer
169 views

What to do after a scammer took control of my mac?

A friend of mine called me in panic mode to tell me that "a message told her her computer was infected, and that she should call the phone number". So did she. Apparently, a lady made her ...
user avatar
  • 103
0 votes
1 answer
397 views

Is flash less secure now that it is End of Life? [closed]

As of this month, the Flash player has been disabled from all mainstream browsers. However, several platforms are still offering ways to use Flash content, most notably the games hosted on said ...
user avatar
2 votes
1 answer
1k views

Bitwarden and gamecontrollerd on OsX Big Sur

Recently, I came across an issue concerning a daemon named gamecontrollerd in OsX Big Sur. On my laptop I'm running ReiKey (from Objective-See), which aims at identifying possible Key Loggers that ...
user avatar
2 votes
1 answer
489 views

Can malware infect computers via wifi routers and mice? [duplicate]

My computer was hacked, which probably resulted in malware/a virus being installed so I'm using my most recent backup on a separate machine (all macOS). Luckily, I was able to determine the timing of ...
user avatar
1 vote
2 answers
590 views

Can a .jar file execute malware on macOS without running it?

I've heard java files can pose a significant security risk due to vulnerabilities. Is it possible for these java files to infect a computer with malware if they are never run? In my case, I am ...
user avatar
0 votes
0 answers
262 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
user avatar
  • 101
0 votes
1 answer
168 views

Can visiting website infect computer? [duplicate]

I have heard online that simply visiting a website can infect a computer. I had an instance recently where someone I know sent me a link but misspelled it. The misspelled link lead to a malicious ...
user avatar

1
2 3 4 5
9