Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
8
votes
2answers
768 views

macOS and .ssh/id_rsa security

My super crucial private key is stored at ~/.ssh/id_rsa with a chmod of "-rw-------" I run a lot of applications on my Mac. For example: Bash scripts .app binaries (For example, Sketch.app) Ruby ...
3
votes
1answer
155 views

Recommended practice for laptop encryption: nested encryption?

Until now I have used a laptop that has a single folder encrypted (using filevault2) containing my passwords and bank stuffs. I am getting a new laptop that encourages full-disk encryption. This ...
0
votes
0answers
135 views

MacOS keychain encryption

There has been big media coverage that an application can just go and read the keychain without needing the master password, root access or anything. It just needs to be executed. But one thing I ...
0
votes
2answers
739 views

Client hacked via ssh session

I was using my Mac's terminal for a ssh connection to a server from a hosting service provider. Sometime right after I finished the session and closed the terminal, my Mac stopped responding and ...
-1
votes
1answer
70 views

Securely erase leftovers of files from the bin in OSX

I have made a mistake and deleted a sensitive file by placing it on the bin, and then empty the bin in OSX 10.12 (Sierra). I have heard this is not a secure way to delete sensitive files. Is there a ...
1
vote
0answers
116 views

How to set up my machine for Wi-Fi penetration testing correctly? [closed]

I was trying to learn how to attack Wi-Fi encryption protocols and ran into a HUGE amount of different problems. I am pretty frustrated right now, and I would be very grateful if give me some wise ...
3
votes
1answer
1k views

Is it always safe (virus/malware/spyware) to download video/music files (torrent, lbry)? [closed]

assume all downloads legal Spent a long time trying to find an answer, this related question from 2013 (dated) doesn't fully answer my question although I do fear subtitle malware. LBRY claims to ...
7
votes
8answers
15k views

MacOS Ransomware with EFI Lock

Problem Description Yesterday my mother called me that she got a message on her iPhone, that it was stolen (iCloud Find My Phone). She then had to enter security codes (two-factor authentication) ...
-1
votes
2answers
2k views

Is Mac OSX really more secure than Windows [closed]

For as long as i've been a computer geek there have always been Apple fanboys and girls stating that "Oh Macs are just more secure than Windows" yet they can never provide evidence for it and when ...
2
votes
3answers
287 views

How do I secure devices for use on conference wifi?

A family member is traveling to a conference and will need to use the convention hall's wifi on both a macOS Sierra laptop and an Android 6.0 Marshmallow phone for web browsing and WhatsApp. How can I ...
5
votes
3answers
589 views

How can scammers inject pop-ups onto target computers?

My grandfather recently fell for a telephone scam. I won't go into details into how the scam worked; it's sufficient to say that he sent them over $2000 worth of iTunes gift card codes. The scammers ...
1
vote
1answer
996 views

How to secure your Mac when downloading torrents? [closed]

I need to download some files which are distributed as a torrent. The files aren't pirated / restricted so i dont need to worry about a VPN. My main concern is securing my computer when downloading ...
4
votes
1answer
10k views

How can trace if someone successfully remotely accessed my Mac?

On my home network, I have a headless mini-mac that I use as a media, plex and security cameras server. I had screen and file sharing enabled, so that I can control it from my regular iMac, since no ...
1
vote
2answers
2k views

OSX can't do passwordless localhost ssh [closed]

I've just searched around and couldn't find any solution so here's my problem: On my OSX 10.7.4 I'm trying to set up a passwordless localhost ssh by ssh-keygen -t dsa -P '' -f ~/.ssh/id_dsa & cat ...
6
votes
1answer
412 views

Is there malware on my mac?

So, a funny thing just happened. I have my (personal) mac connected to the wired enterprise network and have for several months. Today, a couple of guys from IT came busting through the door saying ...
0
votes
0answers
122 views

Recent persistent popups on Chrome trying to get me to download “Flash” [duplicate]

EDIT: I don't think this is 100% a duplicate, so if you've recently (around May 9th 2017) been seeing popups telling you to download Flash, I'd read on before following the link. It appears my Mac ...
0
votes
0answers
440 views

Can a mac carry viruses that could infect a pc via usb stick?

It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
1
vote
2answers
359 views

Where am I most vulnerable when running Mac OS 10.6.8 Snow Leopard?

I have a challenge at work, one of our computers is running Mac OS 10.6.8 Snow Leopard. We have legacy software that's required to run the business, and so we have to have it online and on our network....
88
votes
1answer
12k views

Mac OS X terminal prompt displaying foreign hostname (or: What is Stacey's iPhone doing in my Terminal?)

I opened my Terminal today and saw this: StaceysiPhone6s:~ jcz$ Who is Stacey? Why is she in my Terminal? What happened? What should I be worried about? How do I fix it?
0
votes
1answer
785 views

Sniffing the whole traffic within a network range

How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope? For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
7
votes
1answer
2k views

How does “Unlock your Mac with Apple Watch” work? What should I consider in the Enterprise?

MacOS on 2013 and newer Macs have the following setting at the bottom in system preferences: Question How does "Allow your Apple Watch to unlock your Mac work? From what I've seen, it has a ...
1
vote
1answer
2k views

Exporting non-exportable private keys in Mac

How would one extract a non-exportable private key in Mac OS X 10.12.4?
1
vote
0answers
38 views

How to remove a keylogger from MAC/how to reformat MAC to get rid of it? [duplicate]

I signed up to be a usability tester on a European site. I had to install software on my mac to complete a test. I had to use Disk Utility to install the dmg because just clicking it won't install. I ...
6
votes
0answers
112 views

Weird behaviour of `zip` utility on OSX? [duplicate]

Today, I was reviewing someone's Python code, and while I was testing it, I spotted a weird / unsafe behaviour (bug?!). I've created a password-protected zip file, by issuing the following commands ...
1
vote
0answers
58 views

Webcam on MacBook Pro turned on randomly, and wouldn't turn off. What spyware/malware to look for? [duplicate]

I have a 2015 MacBook Pro, and tonight when I opened my laptop, FaceTime was open and my webcam light was on. I never open FaceTime on my laptop, and I know for sure that the last time I closed my ...
4
votes
1answer
2k views

Simple buffer overflow on mac El Capitan?

I am trying to do a simple buffer overflow that just calls /bin/sh but can't seem to get it to work, it just segfaults. This same exploit worked on a linux vm that I ported over to my mac. As far as I'...
1
vote
0answers
183 views

Is the recent version of Google Chrome still compromised by Vault 7? [closed]

On Wikipedia page about Vault 7 we can read that Google Chrome (including other browsers) has been recently compromised (as of March 2017) by intelligence agencies. Has the exploit already been ...
1
vote
0answers
550 views

What do “Mac Ads Cleaner” and “Mac App Cleaner” do while installed? [closed]

Recently I responded to a suggestion that I "upgrade Flash" on my macOS system only do end up with several applications running, and intruding into my browser and desktop that I did not (mean to) ...
1
vote
0answers
273 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
4
votes
0answers
162 views

Doing builds in a sandbox

I'm keen to start allowing people to build Electron apps on my cloud infrastructure. On Linux the security I'm employing is with throwaway Docker containers. I know it's not 100% secure but it's ...
0
votes
1answer
654 views

Clicked a shortened link in a phishing email in Mac [duplicate]

Today, I got a fake email that says it's from Amazon and I clicked a shortened url link in that email in both Google Chrome and Firefox. I noticed that the url it redirected to was not of Amazon's, so ...
-1
votes
1answer
274 views

Few questions about kernel attacks

Yesterday I read something about kernel and possible attacks on it. And I have some questions about this attack approach: 1. Kernel is a core for whole OS. So if I take control over kernel can I do ...
1
vote
1answer
661 views

Captive portal (Wifi) remembers me even if I change my MAC address

On occasion I change my MAC address from time to time at a public Wifi service. However lately something has changed. The captive portal (Wifi) remembers me even if I change my MAC address on my ...
1
vote
1answer
161 views

What is the security risk of the Macbook Pro Touchbar?

The new MacBook Pro has a touch bar that has been banned for students taking the bar exam. What is the issue that would cause this response? Data leakage Cheat sheets Add in apps could alter the ...
4
votes
2answers
2k views

Is the macOS Universal Clipboard secure?

Since the introduction of Universal Clipboard on Apple's operating systems, I've found myself increasingly relying on it to paste passwords and authentication codes from my MacBook to my iPhone and ...
0
votes
1answer
225 views

Can everyone see my Chrome passwords if they boot a live Linux distro?

I have an iMac 27" Late 2012. My browser is Google Chrome and I have a handful of passwords saved in it. When I come across a website that requires authentication, Chrome automates it without asking ...
12
votes
2answers
2k views

Is using Touch ID with FileVault full disk encryption secure?

I recently purchased a Macbook Pro (late 2016) which now includes Touch ID, like the iPhones have been for a while. Although this is a very convenient addition, I am wondering how this affects the ...
4
votes
3answers
10k views

How to send deauth packets from osx?

aireplay-ng is not available for Mac OSX. How can I inject frames into the network? I am only concerned with sending deauth packets.
0
votes
2answers
391 views

Is a password in keychain more secure than storing password in plaintext?

Many email programs such as isync and msmtp provide the facility of specifying a command that once executed prints the user's password to stdout. For example on OSX we can store the password in a ...
0
votes
1answer
96 views

Is there a way to make linux pass ls require decryption?

So pass, the standard unix password manager is great and I've started to use it to encrypt my passwords. But there is one thing that bugs me. When you run pass ls it shows you all your identities. I ...
1
vote
1answer
50 views

Apple device management

Not sure if this has been answered but I cannot find anything via the search. The whole company (10 people) use Apple devices but aren't all in the same office. Are there any tools that I can use to ...
1
vote
2answers
254 views

Is Apache (macOS pre-installed) a security risk when launched on a public network?

To develop my website I have the pre-installed Apache set up on my Mac and didn't realize until today that the website on my Mac is actually accessible by other devices in the network, too. This is ...
1
vote
0answers
542 views

On MacOS, which process is using nsurlsession to communicate over the network?

Since a few versions back (I guess it was 10.10 or 10.9) MacOS has this binary /usr/libexec/nsurlsessiond that accesses network on behalf of other processes. I believe this has to do with Apple ...
4
votes
1answer
140 views

Clean install - Security risk old files

I am running macOS 10.11. The system is as far as I know not infected, but natural I can not be sure. The system was in the past not as secure as it should have been (missing security updates and ...
-1
votes
1answer
355 views

plutil -p /Library/Preferences/com.apple.preferences.account.plist

plutil -p /Library/Preferences/com.apple.preferences.accounts.plist shows some deleted usernames that I am in the same school with. Am I hacked by them?? I am really concerned. Additional information:...
78
votes
8answers
11k views

Should the sole user of a *nix system have two accounts?

Should the sole user of a *nix (particularly Linux and MacOS) have two accounts, one with sudo privileges and one without? Years ago I read that on your personal computer you should do your daily ...
1
vote
1answer
54 views

How to tell if encryption has been enabled for my gmail email account when connecting via mac Mail / iOS Mail /

Ive got several gmail and google apps for business accounts setup on my laptop (macbook pro running OSX 10.10) and iPhone (running iOS9). For both devices i use Apples native Mail programme / app ...
1
vote
1answer
2k views

Does Dirty COW Affect OSX Kernel?

I attempted to compile the POC for Dirty COW on OSX (Disclaimer: not a C programmer). Here is the error: dirtycow.c: In function ‘procselfmemThread’: dirtycow.c:64:5: warning: implicit declaration of ...
0
votes
2answers
140 views

iptables: block traffic from OSX hotspot

We use Linux for a router and firewall setup and some of our employee makes hotspot from OS X. Is there a way to block this traffic, or control it? The problem is, that the IP addresses what this ...
0
votes
2answers
7k views

How safe are the passwords suggested by Apple keychain?

Safari on recent versions of Mac OSX can suggest passwords on signup forms. These passwords have the a similar form (the alphanumeric characters are separated by dashes: AbC-dEf-941-T3k) and they only ...

1 2
3
4 5
8