Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [macosx]

Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

0
votes
0answers
13 views

Does malware can enter into Iphone or Mac os from chrome/safari in incognito mode [duplicate]

Every day I will open hundreds of websites some of them are SPAM, some of the fake, some sites may have malware content also but I will not download any files from those. After using that sites if I ...
1
vote
1answer
85 views

Metasploit MacOS victim - tools to enable remote desktop / GUI view of the victim

If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface. meterpreter > run getgui -u loneferret -...
0
votes
1answer
57 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
0
votes
0answers
42 views

Why does Mac OS have many strange ports open and what do they do? 50323, 50334, 50641,57621, 57650, 64448 [migrated]

I did an nmap scan for my private IP address nmap -p- 192.168.1.123 and got the following open ports back: 50323/tcp open unknown 50334/tcp open unknown 50641/tcp open unknown 57621/tcp open ...
0
votes
0answers
16 views

Why does launchctl allow to create files/directories anywhere on the file system?

If you have a .plist file for the launch daemon and you launch it via the launchctl load command, you can specify the StandardErrorPath and StandardOutPath tags, which can be used to have the standard ...
1
vote
0answers
123 views

Weird Python script found on a Mac Os X client machine

I was reviewing a Mac Os X machine (a late 2016 MacBook Pro) and I found some weird scripts in the LaunchAgent folder. 8 -rw-r--r-- 1 XX wheel 500 30 Lug 07:18 com.1e1zq.plist 8 -rw-r--r-- 1 XX ...
2
votes
3answers
300 views

New user with Chinese name appeared on MacOS. Hacker?

I'm the only user on my personal laptop (MacBook Pro) running macOS Sierra. I discovered today that a suspicious user with a Chinese name appeared next to mine in the finder. Please see the attached ...
4
votes
1answer
116 views

How Homebrew may impact your Mac's security [duplicate]

I read (here and here) that Homebrew (the Unix package manager) is a significant Mac security risk. An attack is allowed because Homebrew makes /usr/local/bin writable without root user privilege, ...
1
vote
0answers
38 views

Increase password iterations?

Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
3
votes
1answer
101 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
1
vote
0answers
21 views

Is it possible to open Chrome's databases.db in another MacBook?

According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords ...
5
votes
5answers
171 views

Unix Privilege Escalation: “sudo must be owned by uid 0 and have the setuid bit set”

It seems protections are harcoded into sudo that prevent the binary from executing as a low-privileged user. Running it in Ubuntu as a normal user returns the following error: "sudo must be owned ...
1
vote
2answers
50 views

Home environment for MacOS detection tools

I was recently introduced to a variety of detection/hunting tools for MacOS. Listed below are some of the tools I am interested in learning to broaden my toolkit and better learn Mac security. Google ...
2
votes
0answers
57 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
4
votes
0answers
111 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
3
votes
1answer
101 views

MacBookPro's OSX install.log has entries that predate the initial unboxing

Basically what the title says. I recently had a look at my /var/log/install.log and the earliest entries are from about 2 full months prior to me unboxing the computer. The packaging had cellophane, ...
7
votes
4answers
485 views

Freaked out by “impossible click” in logs

I was staging an isolated production environment and accessing it's remote PHP script from my local mac on http://example.com/XbAM7Kt7SJj3M8ytJfEQZbwcBLzg0gNWGfyCHL2b0f0 I saw my click in the log as ...
-2
votes
1answer
67 views

Security testing alternatives on MacOS [closed]

Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
1
vote
2answers
64 views

Is setting a firmware password on a Macbook enough to prevent cold boot attacks?

I have a Macbook configured with a firmware password required to boot from any media other than the built-in NVMe drive. In theory, this means without my password you can't boot from removable media. ...
2
votes
1answer
529 views

What are the security implications of homebrew and macports?

macports binaries are useable from /opt/local/bin/, i.e. for tesseract bin$ which tesseract /opt/local/bin/tesseract bin$ ls /opt/local/bin/tesseract -rwxr-xr-x 1 root admin 28120 15 Sep 2016 /...
0
votes
0answers
48 views

Capturing Dot11 (802.11) headers on Mac OSX

I'm trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I've heard somewhere that WLAN interface of Mac OSX (en1 interface as ...
1
vote
1answer
114 views

Somebody called a number from a pop-up on their MacOS computer and installed a program called GoToAssist. What is the best course of action now? [duplicate]

Somebody I know saw a pop-up on their iMac running Sierra (10.13.5) that advised them to call 877-336-5833. They called the number and the representative advised that they install a program called "...
0
votes
2answers
83 views

Does installing undercover (macbook theft software) increase risk of attack, privacy breach

http://orbicule.com/undercover/mac/ I stumbled upon this page today and am intrigued by the service, it offers a lot of features that I have been interested in since my last computer was stolen in a ...
1
vote
0answers
38 views

Second User On My Computer Via iCloud? [closed]

Disclaimer: I have tried looking for an answer to this, but I couldn't find anything. I also am learning the basics of internet security and I have recently discovered the Objective See security apps ...
0
votes
2answers
104 views

Is revealing login name of macOS into internet a security risk?

For example, sometimes I need to post debug messages to internet like this: No such file : /Users/xxxxx/Documents/test.sh My question is, is forgetting replacing the login name into xxxxx a security ...
1
vote
0answers
54 views

What encryption method is used on macOS Preview.app?

In order to send a file securely, I am going to encrypt/password protect a PDF file with Preview on macOS. Other question(s), such as this one have asked the method of encryption for PDF's in ...
2
votes
2answers
56 views

What format is an decrypted RSA private key in, specifically in OS X Keychain?

I was trying to extract an un-exportable key from OS X Keychain. I used this tool to extract the key. The tool gives me a hexdump of the private key. An RSA 2048 bit key came out to be 2441 bits, ...
2
votes
1answer
72 views

Why does not updating a MacOS keychain password cause applications to become troublesome? [closed]

I've changed my Macbook computer's password in using recovery mode. I'd changed it once normally, then it suddenly "stopped working" (or I started "mis-remembering" it after using it a few times, ...
4
votes
1answer
382 views

What encryption method is used by the zip program in macOS?

In order to send a file securely I am going to encrypt/password protect a zip file. (Why I am doing this). I am using macOS Sierra 10.12.6 and through my research I have concluded that encrypting a ...
0
votes
0answers
67 views

Opened .dmg file, but didn't click on the application inside. Am I safe?

I downloaded an untrusted .dmg file (that I'm fairly sure was malicious) on macOS High Sierra and double-clicked it to open it, mounting it. I didn't double-click or open the actual application ...
2
votes
1answer
34 views

How save, on a log file, all IP inbound/outbound connected to my Mac under MacOsX 10.9.5?

During its operation, the computer connects and disconnects to and from numerous servers - which are identified by a specific IP address. Is there a solution to trace the ip addresses of all the ...
1
vote
1answer
7k views

gpg: decryption failed: No secret key

I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error: gpg: decryption failed: No ...
0
votes
1answer
124 views

Creating self-signed root CA using MacOS Keychain

I'd like to use MacOS keychain to create a basic Root CA, which will be able to sign CSRs and/or Intermediate CA which will be able to do that. For knowledge purpose, I'd like to create a Root, and ...
1
vote
1answer
50 views

Opened port leads to a collection listing

I've been doing some searching on a macOS server and have noticed that there's an open port that I am able to access outside the network. When I go to this port it will ask for a username and a ...
2
votes
1answer
82 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
0
votes
2answers
146 views

Why does Kaspersky warn me about PHP trojans on a Mac?

I have a question regarding PHP Trojans on a Mac. I have downloaded a website's home directory which has been hacked to my local Mac. On this Mac I am running Kaspersky Internet Security which ran a ...
0
votes
0answers
126 views

CryptoAPI to CommonCrypto with AES256

I am working on a project in which I have to encrypt the data on Windows using CryptoAPI and decrypt it on macOS using CommonCrypto. When we call CryptDeriveKey function - According to my ...
0
votes
1answer
77 views

How to Remotely Retrieve Password Hash from Computer

Just for fun, I wanted to see if I could remotely extract the password hash of my own user account on my own Mac. Assume that the device is running either the latest version of macOS Sierra (10.12.6) ...
-1
votes
1answer
62 views

Wrong user or IP in High Sierra terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$. I Googled and found references to WannaCry ...
1
vote
1answer
1k views

does karabiner elements on Mac OSX contain or potentially contain malware?

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely. However, I am ...
2
votes
2answers
723 views

Can visiting Pirate Bay itself give you malware? [duplicate]

So I have a MacBook running High Sierra latest version and I decided to go to the Pirate Bay search engine for the first time just for seeing how it looks and just some research. So I searched for ...
3
votes
0answers
60 views

Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?

I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
3
votes
2answers
57 views

Testing an untrusted browser extension securely on macOS

I have received a .zip file containg a browser extension for Google Chrome. How can I test this safely? Current options I consider: 1) Using a VM. Installing VirtualBox on my macos, and then running ...
2
votes
0answers
35 views

What potential security issues running sandboxd as root?

I have noticed that MacOS is running its sandbox process under the root user. This implies that any sandboxed process, assuming that it can escape the sandbox, would then have root privileges. Am I ...
1
vote
0answers
29 views

Info sources to improve safety on a Mac (OSX) [closed]

I was thinking about buying some crypto currencies, but want to make sure that my computer is safe and secured before that. Could anyone provide me with some links to some tutorials or best practices?...
0
votes
1answer
95 views

Stolen Google OAuth refresh token

I had authorized Google account on my Mac computer. I think my keychain is stolen and google oauth refresh token was stored in it. I removed the OS X app from my Google account. Is the old OAuth ...
0
votes
2answers
88 views

Is there any ways to track which certificate is used for https connection in browsers?

I encounter a strange SSL error messages in Mac laptop with https connections. It only happens on some websites such as facebook, twitter with Firefox and Chrome and only happens at work. It is ...
5
votes
2answers
241 views

What security has OSX and why it does or does not need antivirus [duplicate]

Yes, I know it's a tricky question and a bit personal, but I really don't know much about the security that is in place by default in apple and I don't really know how secure it is and how it would ...
4
votes
2answers
306 views

Entropy on native memorable password on macosX keychain

I have been trying to find information on this. But I haven't found anything online. When you use the password manager on mac, it can provide "memorable" passwords. For example pick3"enigma. (You ...
0
votes
1answer
172 views

How to tell if window is from system or malicious program on macOS? (slack helper)

On macOS Sierra, I am getting this popup asking me to enter my administrator's username and password in order to install some "Slack helper tool". How do I know this popup is from my system and not ...