Collaborate Disseminate
Microsoft today announced the launch of a preview or canary build of its Microsoft Edge browser designed for the macOS operating system. Microsoft Edge for macOS can be installed from the Microsoft Edge Insider site on compatible Macs. MacRumors report… Continue reading Microsoft Launches First Edge Preview Builds For Mac Users
There are built-in functionalities to encrypt a storage on OS X (FileVault) and Android.
On OS X: to enable encryption current user must have a password protected account. After enabling the encryption, recovery key is gener… Continue reading How is it possible for user’s password to be changed after storage was encrypted? (on OS X, Android)
I have an iMac on the same network as my Windows desktop. Both are on the local network at my university.
I am sharing a folder on the iMac using the built-in sharing utility (via SMB) with everyone set to no access and my a… Continue reading Files Accessed over macOS’s SMB Sharing Encryption
I created an installer .mpkg file of my project using packages software on Mac (mojave). Now, what I am supposed to do is, before installing the package, I need to edit a file inside the package.
I tried pkgutil to extract … Continue reading Error on opening mpkg file, packaged with pkgutil via commandline [migrated]
As per iOS Security 12.1 documentation(Page-15), there are individual UID and GID for each processing unit i.e AP(Application Processor) and Secure Enclave.
The application processor and Secure Enclave each have their own… Continue reading iOS Security Architecture-Encryption Keys
Here’s an example request we can make to the GitHub API:
curl ‘https://api.github.com/authorizations’ –user “USERNAME”
This will prompt for the account password, to continue:
Enter host password for user ‘USERNAME’:
If… Continue reading Is it insecure to send a password in a `curl` command?
There are many resources on Linux exploit development, but I cannot find any resources targeting macOS, except for some bad ones on YouTube.
Why are there no write-ups on macOS exploitation techniques, taking into account th… Continue reading Why are there no free resources on exploit development on macOS? [on hold]
I’m running Firefox 65.0.1 and Chrome 72.0.3626.121 on MacOS 10.13.6.
In a terminal window, ran this command to set the SSLKEYLOGFILE environment variable:
$ export SSLKEYLOGFILE=/Users/username/logdir/sslkey1.log
Then … Continue reading Why doesn’t Firefox write to SSLKEYLOGFILE when Chrome does? [on hold]
My elderly parents are receiving chrome notifications from a strange URL on their iMac:
(https://s1.snc.com.ru:443)
Example Messages
• Pending Payment: Paypal Has Sent You $65,900
• Clean your mac. Do not ignore this mess… Continue reading Random Chrome Notifications and Strange Source Code
I have several directories on my Mac, two most popular examples are:
~/.aws
~/.ssh
They can be read by any script file or third-party app in system.
I do not see a way to protect them in macOS (and in Linux). Mechanisms… Continue reading How to protect certain macOS user directory from unauthorized access?