Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [macosx]

Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

4
votes
1answer
82 views

How to Best Minimize Damage After Loss of Computer

Myself and the rest of my coworkers on my (former) employer’s dev team were all just laid off from our jobs, and the employer took our MacBook Pros without letting us clear of our personal information ...
0
votes
0answers
3 views

how to enable SMB 2FA on Win2016 [migrated]

I have one question that teases me for about two weeks.... The Setup win2016 AD win206 Fileshares (SMB) Mac Clients Authentication runs via Enterprise Connect and PKI with Ubikey Smartcards. The ...
0
votes
1answer
65 views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
0
votes
1answer
124 views

Local Video Screenshot during Netflix

I was just binge watching Netflix from my MacBook Pro on a TV streamed using HDMI. It automatically started the final episode of the season but about 20 seconds into it, a screenshot from a local ...
3
votes
0answers
103 views

Why is Spotify using my webcam (AppleCamera)

I'm running Mac OS Mojave. I've just run the following command into terminal to see which applications are using my web cam. lsof | grep "AppleCamera" Google and Spotify showed up: Spotify 668 ...
1
vote
1answer
103 views

Metasploit MacOS victim - tools to enable remote desktop / GUI view of the victim

If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface. meterpreter > run getgui -u loneferret -...
0
votes
1answer
229 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
1
vote
0answers
177 views

Weird Python script found on a Mac Os X client machine

I was reviewing a Mac Os X machine (a late 2016 MacBook Pro) and I found some weird scripts in the LaunchAgent folder. 8 -rw-r--r-- 1 XX wheel 500 30 Lug 07:18 com.1e1zq.plist 8 -rw-r--r-- 1 XX ...
2
votes
3answers
320 views

New user with Chinese name appeared on MacOS. Hacker?

I'm the only user on my personal laptop (MacBook Pro) running macOS Sierra. I discovered today that a suspicious user with a Chinese name appeared next to mine in the finder. Please see the attached ...
4
votes
1answer
182 views

How Homebrew may impact your Mac's security [duplicate]

I read (here and here) that Homebrew (the Unix package manager) is a significant Mac security risk. An attack is allowed because Homebrew makes /usr/local/bin writable without root user privilege, ...
1
vote
0answers
39 views

Increase password iterations?

Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
3
votes
1answer
104 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
1
vote
0answers
21 views

Is it possible to open Chrome's databases.db in another MacBook?

According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords ...
5
votes
5answers
177 views

Unix Privilege Escalation: “sudo must be owned by uid 0 and have the setuid bit set”

It seems protections are harcoded into sudo that prevent the binary from executing as a low-privileged user. Running it in Ubuntu as a normal user returns the following error: "sudo must be owned ...
1
vote
2answers
62 views

Home environment for MacOS detection tools

I was recently introduced to a variety of detection/hunting tools for MacOS. Listed below are some of the tools I am interested in learning to broaden my toolkit and better learn Mac security. Google ...
2
votes
0answers
70 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
4
votes
0answers
129 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
3
votes
1answer
126 views

MacBookPro's OSX install.log has entries that predate the initial unboxing

Basically what the title says. I recently had a look at my /var/log/install.log and the earliest entries are from about 2 full months prior to me unboxing the computer. The packaging had cellophane, ...
7
votes
4answers
494 views

Freaked out by “impossible click” in logs

I was staging an isolated production environment and accessing it's remote PHP script from my local mac on http://example.com/XbAM7Kt7SJj3M8ytJfEQZbwcBLzg0gNWGfyCHL2b0f0 I saw my click in the log as ...
-2
votes
1answer
75 views

Security testing alternatives on MacOS [closed]

Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
1
vote
2answers
69 views

Is setting a firmware password on a Macbook enough to prevent cold boot attacks?

I have a Macbook configured with a firmware password required to boot from any media other than the built-in NVMe drive. In theory, this means without my password you can't boot from removable media. ...
2
votes
1answer
827 views

What are the security implications of homebrew and macports?

macports binaries are useable from /opt/local/bin/, i.e. for tesseract bin$ which tesseract /opt/local/bin/tesseract bin$ ls /opt/local/bin/tesseract -rwxr-xr-x 1 root admin 28120 15 Sep 2016 /...
0
votes
0answers
51 views

Capturing Dot11 (802.11) headers on Mac OSX

I'm trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I've heard somewhere that WLAN interface of Mac OSX (en1 interface as ...
1
vote
1answer
122 views

Somebody called a number from a pop-up on their MacOS computer and installed a program called GoToAssist. What is the best course of action now? [duplicate]

Somebody I know saw a pop-up on their iMac running Sierra (10.13.5) that advised them to call 877-336-5833. They called the number and the representative advised that they install a program called "...
0
votes
2answers
92 views

Does installing undercover (macbook theft software) increase risk of attack, privacy breach

http://orbicule.com/undercover/mac/ I stumbled upon this page today and am intrigued by the service, it offers a lot of features that I have been interested in since my last computer was stolen in a ...
1
vote
0answers
41 views

Second User On My Computer Via iCloud? [closed]

Disclaimer: I have tried looking for an answer to this, but I couldn't find anything. I also am learning the basics of internet security and I have recently discovered the Objective See security apps ...
0
votes
2answers
105 views

Is revealing login name of macOS into internet a security risk?

For example, sometimes I need to post debug messages to internet like this: No such file : /Users/xxxxx/Documents/test.sh My question is, is forgetting replacing the login name into xxxxx a security ...
1
vote
0answers
57 views

What encryption method is used on macOS Preview.app?

In order to send a file securely, I am going to encrypt/password protect a PDF file with Preview on macOS. Other question(s), such as this one have asked the method of encryption for PDF's in ...
2
votes
2answers
63 views

What format is an decrypted RSA private key in, specifically in OS X Keychain?

I was trying to extract an un-exportable key from OS X Keychain. I used this tool to extract the key. The tool gives me a hexdump of the private key. An RSA 2048 bit key came out to be 2441 bits, ...
2
votes
1answer
74 views

Why does not updating a MacOS keychain password cause applications to become troublesome? [closed]

I've changed my Macbook computer's password in using recovery mode. I'd changed it once normally, then it suddenly "stopped working" (or I started "mis-remembering" it after using it a few times, ...
5
votes
1answer
632 views

What encryption method is used by the zip program in macOS?

In order to send a file securely I am going to encrypt/password protect a zip file. (Why I am doing this). I am using macOS Sierra 10.12.6 and through my research I have concluded that encrypting a ...
-1
votes
0answers
68 views

Opened .dmg file, but didn't click on the application inside. Am I safe?

I downloaded an untrusted .dmg file (that I'm fairly sure was malicious) on macOS High Sierra and double-clicked it to open it, mounting it. I didn't double-click or open the actual application ...
2
votes
1answer
35 views

How save, on a log file, all IP inbound/outbound connected to my Mac under MacOsX 10.9.5?

During its operation, the computer connects and disconnects to and from numerous servers - which are identified by a specific IP address. Is there a solution to trace the ip addresses of all the ...
4
votes
2answers
10k views

gpg: decryption failed: No secret key

I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error: gpg: decryption failed: No ...
0
votes
1answer
138 views

Creating self-signed root CA using MacOS Keychain

I'd like to use MacOS keychain to create a basic Root CA, which will be able to sign CSRs and/or Intermediate CA which will be able to do that. For knowledge purpose, I'd like to create a Root, and ...
1
vote
1answer
50 views

Opened port leads to a collection listing

I've been doing some searching on a macOS server and have noticed that there's an open port that I am able to access outside the network. When I go to this port it will ask for a username and a ...
2
votes
1answer
83 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
0
votes
2answers
153 views

Why does Kaspersky warn me about PHP trojans on a Mac?

I have a question regarding PHP Trojans on a Mac. I have downloaded a website's home directory which has been hacked to my local Mac. On this Mac I am running Kaspersky Internet Security which ran a ...
-1
votes
0answers
131 views

CryptoAPI to CommonCrypto with AES256

I am working on a project in which I have to encrypt the data on Windows using CryptoAPI and decrypt it on macOS using CommonCrypto. When we call CryptDeriveKey function - According to my ...
0
votes
1answer
77 views

How to Remotely Retrieve Password Hash from Computer

Just for fun, I wanted to see if I could remotely extract the password hash of my own user account on my own Mac. Assume that the device is running either the latest version of macOS Sierra (10.12.6) ...
-1
votes
1answer
63 views

Wrong user or IP in High Sierra terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$. I Googled and found references to WannaCry ...
1
vote
1answer
2k views

does karabiner elements on Mac OSX contain or potentially contain malware?

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely. However, I am ...
2
votes
2answers
927 views

Can visiting Pirate Bay itself give you malware? [duplicate]

So I have a MacBook running High Sierra latest version and I decided to go to the Pirate Bay search engine for the first time just for seeing how it looks and just some research. So I searched for ...
3
votes
0answers
64 views

Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?

I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
3
votes
2answers
57 views

Testing an untrusted browser extension securely on macOS

I have received a .zip file containg a browser extension for Google Chrome. How can I test this safely? Current options I consider: 1) Using a VM. Installing VirtualBox on my macos, and then running ...
2
votes
0answers
37 views

What potential security issues running sandboxd as root?

I have noticed that MacOS is running its sandbox process under the root user. This implies that any sandboxed process, assuming that it can escape the sandbox, would then have root privileges. Am I ...
1
vote
0answers
29 views

Info sources to improve safety on a Mac (OSX) [closed]

I was thinking about buying some crypto currencies, but want to make sure that my computer is safe and secured before that. Could anyone provide me with some links to some tutorials or best practices?...
0
votes
1answer
125 views

Stolen Google OAuth refresh token

I had authorized Google account on my Mac computer. I think my keychain is stolen and google oauth refresh token was stored in it. I removed the OS X app from my Google account. Is the old OAuth ...
0
votes
2answers
90 views

Is there any ways to track which certificate is used for https connection in browsers?

I encounter a strange SSL error messages in Mac laptop with https connections. It only happens on some websites such as facebook, twitter with Firefox and Chrome and only happens at work. It is ...
5
votes
2answers
279 views

What security has OSX and why it does or does not need antivirus [duplicate]

Yes, I know it's a tricky question and a bit personal, but I really don't know much about the security that is in place by default in apple and I don't really know how secure it is and how it would ...