Questions tagged [macos]

macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

Filter by
Sorted by
Tagged with
1
vote
1answer
139 views

What is the security risk of the Macbook Pro Touchbar?

The new MacBook Pro has a touch bar that has been banned for students taking the bar exam. What is the issue that would cause this response? Data leakage Cheat sheets Add in apps could alter the ...
3
votes
2answers
1k views

Is the macOS Universal Clipboard secure?

Since the introduction of Universal Clipboard on Apple's operating systems, I've found myself increasingly relying on it to paste passwords and authentication codes from my MacBook to my iPhone and ...
0
votes
1answer
191 views

Can everyone see my Chrome passwords if they boot a live Linux distro?

I have an iMac 27" Late 2012. My browser is Google Chrome and I have a handful of passwords saved in it. When I come across a website that requires authentication, Chrome automates it without asking ...
11
votes
2answers
2k views

Is using Touch ID with FileVault full disk encryption secure?

I recently purchased a Macbook Pro (late 2016) which now includes Touch ID, like the iPhones have been for a while. Although this is a very convenient addition, I am wondering how this affects the ...
4
votes
3answers
7k views

How to send deauth packets from osx?

aireplay-ng is not available for Mac OSX. How can I inject frames into the network? I am only concerned with sending deauth packets.
0
votes
2answers
338 views

Is a password in keychain more secure than storing password in plaintext?

Many email programs such as isync and msmtp provide the facility of specifying a command that once executed prints the user's password to stdout. For example on OSX we can store the password in a ...
0
votes
1answer
86 views

Is there a way to make linux pass ls require decryption?

So pass, the standard unix password manager is great and I've started to use it to encrypt my passwords. But there is one thing that bugs me. When you run pass ls it shows you all your identities. I ...
1
vote
1answer
48 views

Apple device management

Not sure if this has been answered but I cannot find anything via the search. The whole company (10 people) use Apple devices but aren't all in the same office. Are there any tools that I can use to ...
1
vote
2answers
212 views

Is Apache (macOS pre-installed) a security risk when launched on a public network?

To develop my website I have the pre-installed Apache set up on my Mac and didn't realize until today that the website on my Mac is actually accessible by other devices in the network, too. This is ...
1
vote
0answers
430 views

On MacOS, which process is using nsurlsession to communicate over the network?

Since a few versions back (I guess it was 10.10 or 10.9) MacOS has this binary /usr/libexec/nsurlsessiond that accesses network on behalf of other processes. I believe this has to do with Apple ...
3
votes
1answer
137 views

Clean install - Security risk old files

I am running macOS 10.11. The system is as far as I know not infected, but natural I can not be sure. The system was in the past not as secure as it should have been (missing security updates and ...
-1
votes
1answer
307 views

plutil -p /Library/Preferences/com.apple.preferences.account.plist

plutil -p /Library/Preferences/com.apple.preferences.accounts.plist shows some deleted usernames that I am in the same school with. Am I hacked by them?? I am really concerned. Additional information:...
78
votes
8answers
10k views

Should the sole user of a *nix system have two accounts?

Should the sole user of a *nix (particularly Linux and MacOS) have two accounts, one with sudo privileges and one without? Years ago I read that on your personal computer you should do your daily ...
1
vote
1answer
50 views

How to tell if encryption has been enabled for my gmail email account when connecting via mac Mail / iOS Mail /

Ive got several gmail and google apps for business accounts setup on my laptop (macbook pro running OSX 10.10) and iPhone (running iOS9). For both devices i use Apples native Mail programme / app ...
1
vote
1answer
2k views

Does Dirty COW Affect OSX Kernel?

I attempted to compile the POC for Dirty COW on OSX (Disclaimer: not a C programmer). Here is the error: dirtycow.c: In function ‘procselfmemThread’: dirtycow.c:64:5: warning: implicit declaration of ...
0
votes
2answers
133 views

iptables: block traffic from OSX hotspot

We use Linux for a router and firewall setup and some of our employee makes hotspot from OS X. Is there a way to block this traffic, or control it? The problem is, that the IP addresses what this ...
0
votes
2answers
6k views

How safe are the passwords suggested by Apple keychain?

Safari on recent versions of Mac OSX can suggest passwords on signup forms. These passwords have the a similar form (the alphanumeric characters are separated by dashes: AbC-dEf-941-T3k) and they only ...
1
vote
1answer
803 views

Runtime checksum of Mach-O differs from executable checksum

In our iOS application we are trying to make an anti-tamper check. What we would like to apply is a common procedure used in anti-tapering techniques. We are trying to get the __text section of a Mach-...
1
vote
3answers
303 views

IDS for Personal Computer (Mac)

I'm reading the Nmap Security Scanning book and it mentions that servers often have Intrusion Detection Systems installed. From my understanding, these systems alert server admins when there is ...
5
votes
3answers
953 views

Is there a clipboard timeout?

The "clipboard" buffer might contain sensitive information (like passwords, or private messages sent to or received from other people) cut/copied previously, that, wenn accidentally pasted into a ...
2
votes
2answers
250 views

Does Apple backport fixes?

Does Apple backport fixes for older versions of their software like OSX 10.8.5 or iOS 7.1.2? I tend to stay behind the curve a little with new devices because I find them to be more reliable and ...
6
votes
1answer
2k views

Mac OS hacked via Bluetooth?

I was working from Starbucks today on my Macbook Air running OS X 10.11.5, and a strange thing happened. I was in Chrome and browsing the web, when a Bluetooth connection request popped up from an ...
1
vote
1answer
1k views

What does this malicious bash script do?

I found this script digging around on a friend's computer (Mac OSX El Capitan) today. It obviously looks malicious, and seems to be an install/setup script. I can see it moves files around and unpacks ...
2
votes
0answers
434 views

Native OS X sandbox profile to control network access (IP/host-based)

On Mac OS X, is it possible to limit an application's accessible hosts by using sandbox-exec? I can easily do it via a firewall app, but I would prefer to do it via the native sandbox mechanism in ...
1
vote
0answers
236 views

How is webrtc leaking IPs from behind a protocol agnostic, full VPN?

I am using the sshuttle VPN. It's NOT a browser plug-in or a simple proxy - it is a protocol agnostic, full VPN that sends all traffic out of any host you can ssh login to. It creates a bridge0 ...
1
vote
0answers
67 views

Employee home OSX laptop was stolen. How can I determine if the laptop was encrypted?

A non technical employee has had an OSX laptop stolen. 1) What technical approaches (iCloud verification) 2) What Questions should I ask the user to determine if the laptop was encrypted. (boot up ...
1
vote
0answers
2k views

SSL self signed certificate CER exception added to Keychain but fails in Chrome

Operating System: Mac OSX El Capitan 10.11.5 When browsing to the page I have a Privacy error, although an exception was added. I have the correct CER file so I added it to my Keychain TRUST THE ...
1
vote
0answers
54 views

How can I find out which process was stopped by RansomWhere? [closed]

Edit: Since this question turned out to be off-topic here, I've re-posted it to Ask Different. I use RansomWhere, a tool to protect from ransomware. As far as I understand, RansomWhere just warns ...
11
votes
1answer
844 views

Universal clipboard iOS10 and macOS. How secure?

New iOS10 and macOS Sierra has a feature called universal clipboard. You can copy something (text, image) on one device and paste it on another. How secure is it and does that mean that everything ...
44
votes
1answer
4k views

Why is Firewire a bigger threat than USB?

This question notes that a person briefly connected an Android device to an Apple computer via USB, and one comment indicates that it would "quite possibly" be a risk: In theory, yes, in practice, ...
53
votes
6answers
11k views

Am I at risk if I let someone charge their Android phone from my MacBook through a micro USB cable?

Someone connected their Android phone to my MacBook and it made me think if this has put my MacBook at risk. It was for 3 seconds and I was in control of the MacBook the whole time.
3
votes
1answer
2k views

Secure way to store openconnect password?

I'm running OpenConnect on my MacOS (10.11 El Capitan) box to access my university VPN servers which run Cisco AnyConnect. The Cisco AnyConnect app has a clunky GUI which doesn't store the password ...
0
votes
1answer
80 views

Securing Macbooks in an Enterprise Environment [closed]

I have been looking online at different forums/websites but was not able to find a direct answer. Does a checklist/process or software exist to secure Macbook computers in a enterprise environment( ...
2
votes
0answers
40 views

If I encrypt my Mac hard drive using File Vault, does it also encrypt deleted data? [duplicate]

Or is the data that was deleted before the encryption process vulnerable to recovery?
50
votes
4answers
11k views

Isn't OS X's Single-User Mode a bad idea?

Recently, I had a Mac which fried its video logic board. Luckily, Apple had concluded that this was a design flaw and was fixing the affected models for free (see more here). However, I did not find ...
7
votes
2answers
1k views

How to protect Time Machine backups from Ransomware?

According to Heise (German) Time Machine backups can be encrypted by Ransomware. Sorry I didn't find an English source, please use Google translate. KeRanger had an inactive module ...
1
vote
0answers
95 views

Is this cascading encryption, and is my security weakened as a result?

I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
3
votes
1answer
318 views

missing ESSID from aircrack-ng

I'm using Mac OS X and I was able to sniff packet from my homeNetwork (in order to learn more about how things goes on). I'm sending a deauth command to all my devices to disconnect them and then ...
1
vote
3answers
1k views

aircrack-ng fed with crunch taking ages

I'm trying aircrack-ng attack like below: crunch 1 2 -f /usr/local/Cellar/crunch/3.6/share/charset.lst mixalpha-numeric|aircrack-ng -b 90:F6:52:80:B9:E2 -w - ~/DumpLog* ⋮ Crunch will now generate the ...
1
vote
2answers
280 views

Would a RansomWhere application be possible for Windows too?

This is related to RansomWhere? which is a OS X specific defense developed by a former NSA employee. The premise is that it will "generically" stop ransomware from encrypting files on the OS. ...
3
votes
1answer
318 views

OS X 10.6 and known unpatched vulnerabilities

Apple is not renowned for publishing clear end-of-support announcements for their products. In our network (a big university) we have strict policies and we do not allow unpatched systems. We were ...
2
votes
0answers
151 views

Was the OSX/iOS Airdrop flaw real?

One exploit has caught my eye, mainly due to the possibility of malware incorporating it infecting businesses and schools. This exploit is, as you may have guessed from the title, the OSX/iOS Airdrop ...
1
vote
1answer
93 views

Stronger Password-based File Encryption on OS X [closed]

I am wondering if there are any better alternatives than the zip command on the OS X terminal. My intention is to add a password to a compressed file. I have been using: zip -j -e -pMY_SECRET test....
3
votes
2answers
485 views

How Does A Hacker Send Spam Emails from Gmail with Two Factor Turned On?

We recently had an incident where two-factor authentication was enabled on a Gmail account but the account was sending spam messages. The device login activity shows no abnormal devices accessing the ...
7
votes
1answer
437 views

How can CVE-2016-2324 and -2315 be mitigated on Mac OS X?

The recent git remote execution vulnerability states all git clients with version <2.7.1 are vulnerable and that most linux distributions have included the fixes already. However, as of today, $ ...
1
vote
0answers
75 views

when/how does an encrypted volume .dmg change to reflect the file system it stores

I'm trying to verify that storing a .dmg file stays encrypted while only the mounted file system is unencrypted (see here). My thought was to create a .dmg containing a text file, make a copy of the ....
0
votes
1answer
102 views

Potential FileVault problems in my setup

After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup: AppleID is connected to local account I don't remember exactly, but I think I have selected option "Allow ...
7
votes
5answers
1k views

VPN with client certificate via managed PKI - where did private key come from?

$company allows Mac users to request a client certificate via Symantec PKI to connect to their SSL VPN server. This process involves going to a specific Symantec website (has some sort of ID to ...
1
vote
0answers
38 views

Why doesn't homebrew fix file access problems by itself?

Before I took ownership of /usr/local, "brew link" caused a "/usr/local/..." not writeable. Is there any particular security reason why the program didn't say something like "The operating system won'...
0
votes
1answer
222 views

Is that possible for Linux and windows machines to be infected with KeRanger ransomware?

According to theguardian The Transmission site offers the open source software that was infected with the ransomware called KeRanger malware, it's programmed to encrypt files on an infected personal ...