All Questions
15 questions
0
votes
1
answer
156
views
MacOS able to access data without password
On a Mac, one can go into recovery mode by turning off the Mac and clicking Command R while turning it on. Then, by typing resetpassword into Terminal, one is able to reset the password without ...
2
votes
1
answer
152
views
Is using numeric passwords on Macs reasonable for average users?
Is using a numeric password (similar to a PIN code on a phone) on Macs reasonable for regular users, considering they are the norm for passcodes on iOS devices?
Traditionally user accounts on Macs ...
28
votes
2
answers
6k
views
How is it possible for user's password to be changed after storage was encrypted? (on OS X, Android)
There are built-in functionalities to encrypt a storage on OS X (FileVault) and Android.
On OS X: to enable encryption current user must have a password protected account. After enabling the ...
4
votes
1
answer
52k
views
hashcat specify number of characters
I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
1
vote
0
answers
172
views
Increase password iterations?
Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
1
vote
0
answers
95
views
Is it possible to open Chrome's databases.db in another MacBook?
According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords ...
10
votes
2
answers
4k
views
Is the macOS Universal Clipboard secure?
Since the introduction of Universal Clipboard on Apple's operating systems, I've found myself increasingly relying on it to paste passwords and authentication codes from my MacBook to my iPhone and ...
0
votes
1
answer
530
views
Can everyone see my Chrome passwords if they boot a live Linux distro?
I have an iMac 27" Late 2012. My browser is Google Chrome and I have a handful of passwords saved in it.
When I come across a website that requires authentication, Chrome automates it without asking ...
1
vote
2
answers
12k
views
How safe are the passwords suggested by Apple keychain?
Safari on recent versions of Mac OSX can suggest passwords on signup forms. These passwords have the a similar form (the alphanumeric characters are separated by dashes: AbC-dEf-941-T3k) and they only ...
2
votes
0
answers
158
views
Under what conditions does Safari have access to the Keychain?
The Keychain is shared among many different apple products and includes asymmetric, symmetric, and other types of security data.
People who use iCloud, and also enable the keychain synchronization ...
3
votes
4
answers
4k
views
I didn't wipe my hard drive before I sold it. How would a criminal take advantage?
I just sold a Mac Mini, and I erased/formatted the hard drive before I turned it over, but I didn't wipe it securely (not wise, I know). How would a criminal take advantage of this fact? What is the ...
3
votes
3
answers
4k
views
Password entry on OS X and keyloggers
There's several places in my ‘personal security infrastructure’ (is there a better phrase for that?) where I find myself typing very important passwords into text-fields on OS X (for instance, dis-...
0
votes
1
answer
264
views
Can any App Store app access all of my passwords?
Whilst researching another question, I've noticed that on OS X 10.9.4 there are many instances of Library/Keychains/login.keychain from ~ within the Data folder of what looks like apps from Apple App ...
1
vote
2
answers
372
views
In what sense is Knock to Unlock safer than a password?
I've recently seen a youtube video, which is advertising an iphone app which will unlock your mac computer by knocking on your iphone. The ad is claiming that it is faster and safer than typing your ...
1
vote
3
answers
2k
views
How to secure data before returning Macbook Air?
I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...