All Questions
456 questions
18
votes
1
answer
13k
views
What encryption method is used by the zip program in macOS?
In order to send a file securely I am going to encrypt/password protect a zip file. (Why I am doing this). I am using macOS Sierra 10.12.6 and through my research I have concluded that encrypting a ...
- 680
2
votes
1
answer
162
views
How save, on a log file, all IP inbound/outbound connected to my Mac under MacOsX 10.9.5?
During its operation, the computer connects and disconnects to and from numerous servers - which are identified by a specific IP address.
Is there a solution to trace the ip addresses of all the ...
11
votes
8
answers
102k
views
gpg: decryption failed: No secret key
I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error:
gpg: decryption failed: No ...
- 361
0
votes
1
answer
659
views
Creating self-signed root CA using MacOS Keychain
I'd like to use MacOS keychain to create a basic Root CA, which will be able to sign CSRs and/or Intermediate CA which will be able to do that.
For knowledge purpose, I'd like to create a Root, and ...
- 195
1
vote
1
answer
134
views
Opened port leads to a collection listing
I've been doing some searching on a macOS server and have noticed that there's an open port that I am able to access outside the network. When I go to this port it will ask for a username and a ...
- 481
2
votes
1
answer
163
views
Named connections all over the world
I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files.
I've come ...
- 481
1
vote
2
answers
481
views
Why does Kaspersky warn me about PHP trojans on a Mac?
I have a question regarding PHP Trojans on a Mac. I have downloaded a website's home directory which has been hacked to my local Mac. On this Mac I am running Kaspersky Internet Security which ran a ...
- 484
0
votes
1
answer
361
views
How to Remotely Retrieve Password Hash from Computer
Just for fun, I wanted to see if I could remotely extract the password hash of my own user account on my own Mac.
Assume that the device is running either the latest version of macOS Sierra (10.12.6) ...
- 111
-1
votes
1
answer
264
views
Wrong user or IP in High Sierra terminal
When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$.
I Googled and found references to WannaCry ...
MacUser
13
votes
1
answer
18k
views
Does karabiner elements on Mac OSX contain, or potentially contain, malware?
I'm using Karabiner elements, an open-source program to remap the keys on my MacBook Air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely.
However, I am ...
- 233
2
votes
2
answers
2k
views
Can visiting Pirate Bay itself give you malware? [duplicate]
So I have a MacBook running High Sierra latest version and I decided to go to the Pirate Bay search engine for the first time just for seeing how it looks and just some research. So I searched for ...
- 133
3
votes
0
answers
150
views
Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?
I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
user115400
3
votes
2
answers
157
views
Testing an untrusted browser extension securely on macOS
I have received a .zip file containg a browser extension for Google Chrome.
How can I test this safely? Current options I consider:
1) Using a VM. Installing VirtualBox on my macos, and then running ...
- 139
2
votes
0
answers
175
views
What potential security issues running sandboxd as root?
I have noticed that MacOS is running its sandbox process under the root user. This implies that any sandboxed process, assuming that it can escape the sandbox, would then have root privileges. Am I ...
user115400
1
vote
0
answers
109
views
Info sources to improve safety on a Mac (OSX) [closed]
I was thinking about buying some crypto currencies, but want to make sure that my computer is safe and secured before that.
Could anyone provide me with some links to some tutorials or best practices?...
- 111
0
votes
1
answer
430
views
Stolen Google OAuth refresh token
I had authorized Google account on my Mac computer. I think my keychain is stolen and google oauth refresh token was stored in it. I removed the OS X app from my Google account.
Is the old OAuth ...
user156092
0
votes
2
answers
569
views
Is there any ways to track which certificate is used for https connection in browsers?
I encounter a strange SSL error messages in Mac laptop with https connections.
It only happens on some websites such as facebook, twitter with Firefox and Chrome and only happens at work. It is ...
- 103
6
votes
2
answers
677
views
What security has OSX and why it does or does not need antivirus [duplicate]
Yes, I know it's a tricky question and a bit personal, but I really don't know much about the security that is in place by default in apple and I don't really know how secure it is and how it would ...
- 159
5
votes
2
answers
1k
views
Entropy on native memorable password on macosX keychain
I have been trying to find information on this. But I haven't found anything online.
When you use the password manager on mac, it can provide "memorable" passwords.
For example pick3"enigma. (You ...
- 103
-1
votes
1
answer
307
views
How to tell if window is from system or malicious program on macOS? (slack helper)
On macOS Sierra, I am getting this popup asking me to enter my administrator's username and password in order to install some "Slack helper tool".
How do I know this popup is from my system and not ...
- 964
8
votes
2
answers
1k
views
macOS and .ssh/id_rsa security
My super crucial private key is stored at ~/.ssh/id_rsa
with a chmod of "-rw-------"
I run a lot of applications on my Mac.
For example:
Bash scripts
.app binaries (For example, Sketch.app)
Ruby ...
3
votes
1
answer
291
views
Recommended practice for laptop encryption: nested encryption?
Until now I have used a laptop that has a single folder encrypted (using filevault2)
containing my passwords and bank stuffs.
I am getting a new laptop that encourages full-disk encryption. This ...
- 131
0
votes
0
answers
248
views
MacOS keychain encryption
There has been big media coverage that an application can just go and read the keychain without needing the master password, root access or anything. It just needs to be executed.
But one thing I ...
- 394
0
votes
2
answers
2k
views
Client hacked via ssh session
I was using my Mac's terminal for a ssh connection to a server from a hosting service provider. Sometime right after I finished the session and closed the terminal, my Mac stopped responding and ...
- 113
1
vote
0
answers
198
views
How to set up my machine for Wi-Fi penetration testing correctly? [closed]
I was trying to learn how to attack Wi-Fi encryption protocols and ran into a HUGE amount of different problems. I am pretty frustrated right now, and I would be very grateful if give me some wise ...
3
votes
1
answer
3k
views
Is it always safe (virus/malware/spyware) to download video/music files (torrent, lbry)? [closed]
assume all downloads legal
Spent a long time trying to find an answer, this related question from 2013 (dated) doesn't fully answer my question although I do fear subtitle malware.
LBRY claims to ...
- 147
7
votes
8
answers
16k
views
MacOS Ransomware with EFI Lock
Problem Description
Yesterday my mother called me that she got a message on her iPhone, that it was stolen (iCloud Find My Phone). She then had to enter security codes (two-factor authentication) ...
- 211
0
votes
2
answers
3k
views
Is Mac OSX really more secure than Windows [closed]
For as long as i've been a computer geek there have always been Apple fanboys and girls stating that "Oh Macs are just more secure than Windows" yet they can never provide evidence for it and when ...
- 123
2
votes
3
answers
395
views
How do I secure devices for use on conference wifi?
A family member is traveling to a conference and will need to use the convention hall's wifi on both a macOS Sierra laptop and an Android 6.0 Marshmallow phone for web browsing and WhatsApp. How can I ...
- 121
5
votes
3
answers
1k
views
How can scammers inject pop-ups onto target computers?
My grandfather recently fell for a telephone scam. I won't go into details into how the scam worked; it's sufficient to say that he sent them over $2000 worth of iTunes gift card codes.
The scammers ...
- 975
1
vote
1
answer
2k
views
How to secure your Mac when downloading torrents? [closed]
I need to download some files which are distributed as a torrent. The files aren't pirated / restricted so i dont need to worry about a VPN.
My main concern is securing my computer when downloading ...
- 576
4
votes
1
answer
14k
views
How can trace if someone successfully remotely accessed my Mac?
On my home network, I have a headless mini-mac that I use as a media, plex and security cameras server. I had screen and file sharing enabled, so that I can control it from my regular iMac, since no ...
- 41
1
vote
2
answers
3k
views
OSX can't do passwordless localhost ssh [closed]
I've just searched around and couldn't find any solution so here's my problem:
On my OSX 10.7.4 I'm trying to set up a passwordless localhost ssh by ssh-keygen -t dsa -P '' -f ~/.ssh/id_dsa & cat ...
- 113
6
votes
1
answer
576
views
Is there malware on my mac?
So, a funny thing just happened.
I have my (personal) mac connected to the wired enterprise network and have for several months. Today, a couple of guys from IT came busting through the door saying ...
- 161
0
votes
0
answers
125
views
Recent persistent popups on Chrome trying to get me to download "Flash" [duplicate]
EDIT: I don't think this is 100% a duplicate, so if you've recently (around May 9th 2017) been seeing popups telling you to download Flash, I'd read on before following the link.
It appears my Mac ...
- 109
0
votes
0
answers
551
views
Can a mac carry viruses that could infect a pc via usb stick?
It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
- 215
1
vote
2
answers
564
views
Where am I most vulnerable when running Mac OS 10.6.8 Snow Leopard?
I have a challenge at work, one of our computers is running Mac OS 10.6.8 Snow Leopard. We have legacy software that's required to run the business, and so we have to have it online and on our network....
- 1,771
90
votes
1
answer
12k
views
Mac OS X terminal prompt displaying foreign hostname (or: What is Stacey's iPhone doing in my Terminal?)
I opened my Terminal today and saw this:
StaceysiPhone6s:~ jcz$
Who is Stacey?
Why is she in my Terminal?
What happened?
What should I be worried about?
How do I fix it?
- 963
0
votes
1
answer
2k
views
Sniffing the whole traffic within a network range
How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope?
For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
- 246
8
votes
1
answer
4k
views
How does "Unlock your Mac with Apple Watch" work? What should I consider in the Enterprise?
MacOS on 2013 and newer Macs have the following setting at the bottom in system preferences:
Question
How does "Allow your Apple Watch to unlock your Mac work?
From what I've seen, it has a ...
- 51.1k
1
vote
1
answer
3k
views
Exporting non-exportable private keys in Mac
How would one extract a non-exportable private key in Mac OS X 10.12.4?
- 645
1
vote
0
answers
38
views
How to remove a keylogger from MAC/how to reformat MAC to get rid of it? [duplicate]
I signed up to be a usability tester on a European site. I had to install software on my mac to complete a test. I had to use Disk Utility to install the dmg because just clicking it won't install. I ...
6
votes
0
answers
112
views
Weird behaviour of `zip` utility on OSX? [duplicate]
Today, I was reviewing someone's Python code, and while I was testing it, I spotted a weird / unsafe behaviour (bug?!).
I've created a password-protected zip file, by issuing the following commands ...
- 161
1
vote
0
answers
58
views
Webcam on MacBook Pro turned on randomly, and wouldn't turn off. What spyware/malware to look for? [duplicate]
I have a 2015 MacBook Pro, and tonight when I opened my laptop, FaceTime was open and my webcam light was on. I never open FaceTime on my laptop, and I know for sure that the last time I closed my ...
- 11
4
votes
1
answer
3k
views
Simple buffer overflow on mac El Capitan?
I am trying to do a simple buffer overflow that just calls /bin/sh but can't seem to get it to work, it just segfaults. This same exploit worked on a linux vm that I ported over to my mac. As far as I'...
- 199
1
vote
0
answers
249
views
Is the recent version of Google Chrome still compromised by Vault 7? [closed]
On Wikipedia page about Vault 7 we can read that Google Chrome (including other browsers) has been recently compromised (as of March 2017) by intelligence agencies.
Has the exploit already been ...
- 839
1
vote
0
answers
620
views
What do "Mac Ads Cleaner" and "Mac App Cleaner" do while installed? [closed]
Recently I responded to a suggestion that I "upgrade Flash" on my macOS system only do end up with several applications running, and intruding into my browser and desktop that I did not (mean to) ...
- 333
1
vote
0
answers
479
views
Setup a meterpreter session trough a vpn
this is my first post here.
I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working.
I downloaded openVPN config files from vpnbook.com and ...
- 111
4
votes
0
answers
318
views
Doing builds in a sandbox
I'm keen to start allowing people to build Electron apps on my cloud infrastructure.
On Linux the security I'm employing is with throwaway Docker containers. I know it's not 100% secure but it's ...
- 91
0
votes
1
answer
858
views
Clicked a shortened link in a phishing email in Mac [duplicate]
Today, I got a fake email that says it's from Amazon and I clicked a shortened url link in that email in both Google Chrome and Firefox. I noticed that the url it redirected to was not of Amazon's, so ...
- 11