Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
0
votes
1answer
201 views

Creating self-signed root CA using MacOS Keychain

I'd like to use MacOS keychain to create a basic Root CA, which will be able to sign CSRs and/or Intermediate CA which will be able to do that. For knowledge purpose, I'd like to create a Root, and ...
1
vote
1answer
52 views

Opened port leads to a collection listing

I've been doing some searching on a macOS server and have noticed that there's an open port that I am able to access outside the network. When I go to this port it will ask for a username and a ...
2
votes
1answer
83 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
0
votes
2answers
198 views

Why does Kaspersky warn me about PHP trojans on a Mac?

I have a question regarding PHP Trojans on a Mac. I have downloaded a website's home directory which has been hacked to my local Mac. On this Mac I am running Kaspersky Internet Security which ran a ...
0
votes
1answer
93 views

How to Remotely Retrieve Password Hash from Computer

Just for fun, I wanted to see if I could remotely extract the password hash of my own user account on my own Mac. Assume that the device is running either the latest version of macOS Sierra (10.12.6) ...
-1
votes
1answer
73 views

Wrong user or IP in High Sierra terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$. I Googled and found references to WannaCry ...
2
votes
1answer
3k views

does karabiner elements on Mac OSX contain or potentially contain malware?

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely. However, I am ...
2
votes
2answers
1k views

Can visiting Pirate Bay itself give you malware? [duplicate]

So I have a MacBook running High Sierra latest version and I decided to go to the Pirate Bay search engine for the first time just for seeing how it looks and just some research. So I searched for ...
3
votes
0answers
65 views

Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?

I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
3
votes
2answers
59 views

Testing an untrusted browser extension securely on macOS

I have received a .zip file containg a browser extension for Google Chrome. How can I test this safely? Current options I consider: 1) Using a VM. Installing VirtualBox on my macos, and then running ...
2
votes
0answers
51 views

What potential security issues running sandboxd as root?

I have noticed that MacOS is running its sandbox process under the root user. This implies that any sandboxed process, assuming that it can escape the sandbox, would then have root privileges. Am I ...
1
vote
0answers
32 views

Info sources to improve safety on a Mac (OSX) [closed]

I was thinking about buying some crypto currencies, but want to make sure that my computer is safe and secured before that. Could anyone provide me with some links to some tutorials or best practices?...
0
votes
1answer
171 views

Stolen Google OAuth refresh token

I had authorized Google account on my Mac computer. I think my keychain is stolen and google oauth refresh token was stored in it. I removed the OS X app from my Google account. Is the old OAuth ...
0
votes
2answers
96 views

Is there any ways to track which certificate is used for https connection in browsers?

I encounter a strange SSL error messages in Mac laptop with https connections. It only happens on some websites such as facebook, twitter with Firefox and Chrome and only happens at work. It is ...
5
votes
2answers
384 views

What security has OSX and why it does or does not need antivirus [duplicate]

Yes, I know it's a tricky question and a bit personal, but I really don't know much about the security that is in place by default in apple and I don't really know how secure it is and how it would ...
4
votes
2answers
440 views

Entropy on native memorable password on macosX keychain

I have been trying to find information on this. But I haven't found anything online. When you use the password manager on mac, it can provide "memorable" passwords. For example pick3"enigma. (You ...
-1
votes
1answer
195 views

How to tell if window is from system or malicious program on macOS? (slack helper)

On macOS Sierra, I am getting this popup asking me to enter my administrator's username and password in order to install some "Slack helper tool". How do I know this popup is from my system and not ...
8
votes
2answers
745 views

macOS and .ssh/id_rsa security

My super crucial private key is stored at ~/.ssh/id_rsa with a chmod of "-rw-------" I run a lot of applications on my Mac. For example: Bash scripts .app binaries (For example, Sketch.app) Ruby ...
3
votes
1answer
130 views

Recommended practice for laptop encryption: nested encryption?

Until now I have used a laptop that has a single folder encrypted (using filevault2) containing my passwords and bank stuffs. I am getting a new laptop that encourages full-disk encryption. This ...
0
votes
0answers
110 views

MacOS keychain encryption

There has been big media coverage that an application can just go and read the keychain without needing the master password, root access or anything. It just needs to be executed. But one thing I ...
0
votes
2answers
443 views

Client hacked via ssh session

I was using my Mac's terminal for a ssh connection to a server from a hosting service provider. Sometime right after I finished the session and closed the terminal, my Mac stopped responding and ...
-1
votes
1answer
67 views

Securely erase leftovers of files from the bin in OSX

I have made a mistake and deleted a sensitive file by placing it on the bin, and then empty the bin in OSX 10.12 (Sierra). I have heard this is not a secure way to delete sensitive files. Is there a ...
1
vote
0answers
105 views

How to set up my machine for Wi-Fi penetration testing correctly? [closed]

I was trying to learn how to attack Wi-Fi encryption protocols and ran into a HUGE amount of different problems. I am pretty frustrated right now, and I would be very grateful if give me some wise ...
3
votes
1answer
967 views

Is it always safe (virus/malware/spyware) to download video/music files (torrent, lbry)? [closed]

assume all downloads legal Spent a long time trying to find an answer, this related question from 2013 (dated) doesn't fully answer my question although I do fear subtitle malware. LBRY claims to ...
7
votes
8answers
14k views

MacOS Ransomware with EFI Lock

Problem Description Yesterday my mother called me that she got a message on her iPhone, that it was stolen (iCloud Find My Phone). She then had to enter security codes (two-factor authentication) ...
-1
votes
2answers
2k views

Is Mac OSX really more secure than Windows [closed]

For as long as i've been a computer geek there have always been Apple fanboys and girls stating that "Oh Macs are just more secure than Windows" yet they can never provide evidence for it and when ...
2
votes
3answers
274 views

How do I secure devices for use on conference wifi?

A family member is traveling to a conference and will need to use the convention hall's wifi on both a macOS Sierra laptop and an Android 6.0 Marshmallow phone for web browsing and WhatsApp. How can I ...
5
votes
3answers
537 views

How can scammers inject pop-ups onto target computers?

My grandfather recently fell for a telephone scam. I won't go into details into how the scam worked; it's sufficient to say that he sent them over $2000 worth of iTunes gift card codes. The scammers ...
1
vote
1answer
706 views

How to secure your Mac when downloading torrents? [closed]

I need to download some files which are distributed as a torrent. The files aren't pirated / restricted so i dont need to worry about a VPN. My main concern is securing my computer when downloading ...
4
votes
1answer
9k views

How can trace if someone successfully remotely accessed my Mac?

On my home network, I have a headless mini-mac that I use as a media, plex and security cameras server. I had screen and file sharing enabled, so that I can control it from my regular iMac, since no ...
1
vote
2answers
2k views

OSX can't do passwordless localhost ssh [closed]

I've just searched around and couldn't find any solution so here's my problem: On my OSX 10.7.4 I'm trying to set up a passwordless localhost ssh by ssh-keygen -t dsa -P '' -f ~/.ssh/id_dsa & cat ...
6
votes
1answer
384 views

Is there malware on my mac?

So, a funny thing just happened. I have my (personal) mac connected to the wired enterprise network and have for several months. Today, a couple of guys from IT came busting through the door saying ...
0
votes
0answers
118 views

Recent persistent popups on Chrome trying to get me to download “Flash” [duplicate]

EDIT: I don't think this is 100% a duplicate, so if you've recently (around May 9th 2017) been seeing popups telling you to download Flash, I'd read on before following the link. It appears my Mac ...
0
votes
0answers
401 views

Can a mac carry viruses that could infect a pc via usb stick?

It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
1
vote
2answers
289 views

Where am I most vulnerable when running Mac OS 10.6.8 Snow Leopard?

I have a challenge at work, one of our computers is running Mac OS 10.6.8 Snow Leopard. We have legacy software that's required to run the business, and so we have to have it online and on our network....
88
votes
1answer
11k views

Mac OS X terminal prompt displaying foreign hostname (or: What is Stacey's iPhone doing in my Terminal?)

I opened my Terminal today and saw this: StaceysiPhone6s:~ jcz$ Who is Stacey? Why is she in my Terminal? What happened? What should I be worried about? How do I fix it?
0
votes
1answer
642 views

Sniffing the whole traffic within a network range

How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope? For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
6
votes
1answer
1k views

How does “Unlock your Mac with Apple Watch” work? What should I consider in the Enterprise?

MacOS on 2013 and newer Macs have the following setting at the bottom in system preferences: Question How does "Allow your Apple Watch to unlock your Mac work? From what I've seen, it has a ...
1
vote
1answer
2k views

Exporting non-exportable private keys in Mac

How would one extract a non-exportable private key in Mac OS X 10.12.4?
1
vote
0answers
38 views

How to remove a keylogger from MAC/how to reformat MAC to get rid of it? [duplicate]

I signed up to be a usability tester on a European site. I had to install software on my mac to complete a test. I had to use Disk Utility to install the dmg because just clicking it won't install. I ...
5
votes
0answers
110 views

Weird behaviour of `zip` utility on OSX? [duplicate]

Today, I was reviewing someone's Python code, and while I was testing it, I spotted a weird / unsafe behaviour (bug?!). I've created a password-protected zip file, by issuing the following commands ...
1
vote
0answers
58 views

Webcam on MacBook Pro turned on randomly, and wouldn't turn off. What spyware/malware to look for? [duplicate]

I have a 2015 MacBook Pro, and tonight when I opened my laptop, FaceTime was open and my webcam light was on. I never open FaceTime on my laptop, and I know for sure that the last time I closed my ...
4
votes
1answer
1k views

Simple buffer overflow on mac El Capitan?

I am trying to do a simple buffer overflow that just calls /bin/sh but can't seem to get it to work, it just segfaults. This same exploit worked on a linux vm that I ported over to my mac. As far as I'...
2
votes
0answers
180 views

Is the recent version of Google Chrome still compromised by Vault 7? [closed]

On Wikipedia page about Vault 7 we can read that Google Chrome (including other browsers) has been recently compromised (as of March 2017) by intelligence agencies. Has the exploit already been ...
1
vote
0answers
527 views

What do “Mac Ads Cleaner” and “Mac App Cleaner” do while installed? [closed]

Recently I responded to a suggestion that I "upgrade Flash" on my macOS system only do end up with several applications running, and intruding into my browser and desktop that I did not (mean to) ...
1
vote
0answers
221 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
4
votes
0answers
154 views

Doing builds in a sandbox

I'm keen to start allowing people to build Electron apps on my cloud infrastructure. On Linux the security I'm employing is with throwaway Docker containers. I know it's not 100% secure but it's ...
0
votes
1answer
564 views

Clicked a shortened link in a phishing email in Mac [duplicate]

Today, I got a fake email that says it's from Amazon and I clicked a shortened url link in that email in both Google Chrome and Firefox. I noticed that the url it redirected to was not of Amazon's, so ...
-1
votes
1answer
252 views

Few questions about kernel attacks

Yesterday I read something about kernel and possible attacks on it. And I have some questions about this attack approach: 1. Kernel is a core for whole OS. So if I take control over kernel can I do ...
1
vote
1answer
533 views

Captive portal (Wifi) remembers me even if I change my MAC address

On occasion I change my MAC address from time to time at a public Wifi service. However lately something has changed. The captive portal (Wifi) remembers me even if I change my MAC address on my ...