Mac OPSEC Issue

Security analyst over on F-Secure are reporting a possible OPSEC issue in Yosemite. After copy a file from a Mac to a USB thumb drive, the user discovers that the Spotlight index files , ".store.db", contained e-mail addresses, subject lines, and in a few cases, the opening sentence of the Mac's users messages.
ComputerWorld has a story on this.

Hi Devils,
Answer is in below -
1. Are those MAC addresses actual Wireless Hosts? i.e have you traced them?
= Yes, those are actual wireless MAC add, I have check in zone director controller.
2. Are the SSID's set to tunnel?
=No
3. Do you have one ZoneDirector or two?
=Two, both of them are connected with core switch.
I have been confirmed about that if wireless users are roaming between two AP or more it will appear the same error msg, now what would be the solution. ????
What extly the solution is?>
Where should i implement the solution on switch or zone director?
Please suggest!!!!!

Similar Messages

Mac Enrollment Issue on SCCM 2012 SP1

Hi Guys,
I am working on Mac enrollment(10.7) and facing issue during enrollment. Below is the error message when we try to run the enrollment command on Mac :
“Server connection failed. HTTP Response code is 500 and reason is Internal Server Error"
Below are Log info:
Enrollsrv.log : No error message is highlighted.
Enrollweb.log:
No error message is highlighted.
Enrollservice.log:
[7, PID:7304][10/28/2013 16:40:03] :ConfigManager: ChainStatus error: RevocationStatusUnknown,The revocation function was unable to check revocation for the certificate.
;OfflineRevocation,The revocation function was unable to check revocation because the revocation server was offline.
   at Microsoft.ConfigurationManagement.Enrollment.ConfigManager.SplitCACertChain(String base64cert)
   at Microsoft.ConfigurationManagement.Enrollment.ConfigManager.setCAChain(EnrollmentServiceProfile profile, WindowsIdentity requester)
   at Microsoft.ConfigurationManagement.Enrollment.ConfigManager.RefreshCache(Int32 enrollmentProfileId, EnrollmentRecordType type, String template, WindowsIdentity requester)
   at Microsoft.ConfigurationManagement.Enrollment.RequestHandler.ProcessRequestSecurityToken(RequestSecurityTokenType request, WindowsIdentity caller, ActionEnum action)
   at Microsoft.ConfigurationManagement.Enrollment.RequestHandler.EnrollDevice(Message messageRequest)
   at Microsoft.ConfigurationManagement.Enrollment.DeviceEnrollmentService.RequestSecurityToken(Message messageRequest)
[7, PID:7304][10/28/2013 16:40:03] :FaultCode is: EnrollmentServer and reason is: EnrollmentServerException InitializeFailed
[13, PID:7304][10/28/2013 17:11:01] :EnrollmentService application stop ...
[3, PID:956][10/28/2013 17:45:37] :EnrollmentService application start ...
[3, PID:956][10/28/2013 18:06:38] :EnrollmentService application stop ...
[3, PID:4700][10/28/2013 18:45:39] :EnrollmentService application start ...
[7, PID:4700][10/28/2013 19:06:40] :EnrollmentService application stop ...
[3, PID:5872][10/28/2013 19:45:42] :EnrollmentService application start ...
[13, PID:5872][10/28/2013 20:06:42] :EnrollmentService application stop ...
Can someone shed info on resolution of the above issue?
Also, is there any means by which we can troubleshoot the Mac enrollment issue step by step? Also what entries needs to be checked in all logs for successful enrollment?

the following links may give you some hints:
http://social.technet.microsoft.com/Forums/en-US/48bc7fcc-3d84-4042-abac-67f30d701121/mac-enrollment-issue?forum=configmanagerdeployment
http://www.windows-noob.com/forums/index.php?/topic/7391-mac-enrollment-issue/

Mac System Issue pop up window has disabled Safari. Please help?

I clicked on a video on FaceBook & ended up with a pop up that says I have a serious Mac system issue & I need to call this phone number immediately.
I can't do anything at all with Safari now. Has anyone had this issue? Know how to get rid of it? I

Force quit Safari and relaunch it with the Shift key held down. If that doesn’t work, disconnect the computer from the Internet and try again.
(115087)

MAC Flapping Issue

Dear Folks,
I am working with a IT organization as network administrator, at client site we are getting the MAC FLAPPING issue since 1 month, due to that some time it completely down my whole network. Scenario is like that, we are using Ruckus AP and Zone director as a WLAN controller which is directly conecteted with our core switch. Rest of indoor AP's are connected with Distribute and access switch. Now since 1 month we are getting in core switch below mention notification -
#sh log
Log Buffer (8192 bytes):
889842: Nov 18 13:46:37.182 IST: %SYS-5-CONFIG_I: Configured from console by iympladmin on console
889843: 001585: Nov 18 13:47:09.724 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c4d9.879b.cf99 in vlan 13 is flapping between port Gi1/1/4 and port Gi1/1/3 (nhcin-sjp01-2)
889844: Nov 18 13:49:17.806 IST: %LINK-3-UPDOWN: Interface GigabitEthernet2/0/37, changed state to up
889845: Nov 18 13:49:19.818 IST: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/37, changed state to up
889846: 001586: Nov 18 14:04:57.394 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c4d9.87aa.d584 in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
889847: 001587: Nov 18 14:13:39.784 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 0008.2292.1440 in vlan 12 is flapping between port Gi2/1/2 and port Gi1/1/4 (nhcin-sjp01-2)
889848: 001588: Nov 18 14:15:35.735 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 1c3e.843e.c441 in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
889849: Nov 18 14:23:23.346 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 14f6.5afa.ecb9 in vlan 12 is flapping between port Gi2/0/37 and port Gi2/0/35
889850: 001589: Nov 18 14:23:23.415 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 14f6.5afa.ecb9 in vlan 12 is flapping between port Gi2/0/37 and port Gi2/0/35 (nhcin-sjp01-2)
889851: Nov 18 14:32:33.860 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c0cb.3886.30cb in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35
889852: 001590: Nov 18 14:32:33.954 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c0cb.3886.30cb in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
889853: 001591: Nov 18 14:33:05.755 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 843a.4b15.187a in vlan 12 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
889854: 001592: Nov 18 14:33:07.017 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 6c88.14a0.93d8 in vlan 12 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
nhcin-sjp01#
As mentioned in msg 12 & 13 VLAN is our WLAN.
After getting this msg automatically all network goes down, I need to shut down the associated port winch is directly or indirectly connected with AP, and after some time it will work properly.
Now I need some mechanism which can be block the duplicate source mac address to preventing from this kind of scenario.
Regards,
Shekhar

Hi Devils,
Answer is in below -
1. Are those MAC addresses actual Wireless Hosts? i.e have you traced them?
= Yes, those are actual wireless MAC add, I have check in zone director controller.
2. Are the SSID's set to tunnel?
=No
3. Do you have one ZoneDirector or two?
=Two, both of them are connected with core switch.
I have been confirmed about that if wireless users are roaming between two AP or more it will appear the same error msg, now what would be the solution. ????
What extly the solution is?>
Where should i implement the solution on switch or zone director?
Please suggest!!!!!

MAC address issue----Spearman

Saw your comments on this in the post about the 1.9 bios for neo2platty ....
I can confirm that My MAC address issue was caused by the bios that you sited in your comments....all F's were written to My nvidia lan too...
only solution from what I have read is too rma it...'bummer'
just thought You would like to know.... Your not alone

I had the same problem yesterday and after many hours searching the web I ended up with this post that made me really desperate... But I didn't give up and while trying a new bios flash because of random crashes when in the bios, I noticed the obvious: you can change the MAC address when flashing
use the last version of the dos flasher with the parameters /nvmac:xxxxxxxxxxxx/wb after the name of the bios file; it's explained if you ask the help with the /help parameter. You can find the mac address on a stick on the parallel port.

Thanks bazzardl. I was able to get the MAC Mail issue resolved. Best, glofromkc

Thanks bazzardl. I was able to get the MAC Mail issue resolved. Best, glofromkc

I am having the same problem but cannot get anything but the actual phone to work. I have a unlocked 3GS running 6.0 (what was I thinking?). No data whatsoever, no texting, no visual voicemail. I simply cannot access the APN settings. I have tried sim swap, I have tried APN changers. I have been on the phone with ST tech support for hours and hours. I have tried to get the answers from a "genius". I am stuck and looking at Android devices, but would really like to keep using the iphone with Straight Talk.

Penryn Macs having issues?

Okay,
I have finally decided to move to Mac OS and buy a MacBook Pro.
* iWork '08 preinstalled
* Accessory Kit
* MacBook Pro 15-inch Widescreen Display
* 2.4GHz Intel Core 2 Duo
* 200GB Serial ATA Drive @ 7200 rpm
* Backlit Keyboard/Mac OS - U.S. English
* SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)
* 2GB 667MHz DDR2 SDRAM - 2x1GB
* Apple Remote
* NVIDIA GeForce 8600M GT with 256MB
I am extremely exited. But before i order, i was wondering if I should expect allot of problems? About 2 years ago, my friend bought a macbook and had to have it replaced 5 times. How have the Penryn macs been?
This will l be my first Mac ever so I am hoping to have a good transition to the mac world:)
Thanks,
Mac Zac.

Hi Zac.
Let me be the first to say, welcome to the light side!
Regarding the Penryn Macs: No, there are not so many issues that you should hold off buying one. If you browse the forums here you'll find lots of people running into problems. But remember that all the millions of people that DON'T have problems don't come here to tell you everything's working fine. For the vast majority of people, Macs work seamlessly, day in and day out.
Of course, like all technology products, sometimes Macs have issues. They are made out of the same silicon and chips as other computers and, like those other computers, components can fail or go bad. That's just life. The good news is: it's rare.
Likewise, Leopard is running extremely well for the vast majority of people. To be sure, there are a few small issues affecting small groups of people. Some folks are having wireless troubles, others are seeing some typing issues after a keyboard firmware update, for some folks iTunes is locking up while browsing cover flow. But, again, these issues don't appear to be too widespread and I would certainly not hold off buying a Mac because of them. You can bet that Apple engineers are all over the issues and they'll be resolved soon.
To sum up: the state of the Mac world is fantastic. Like everything else in life, it's not perfect. But it's as close as you'll get with a computer! My advice is to pull the trigger and enjoy the switch! And I'll put my money where my mouth is as well: my $3,000 Penryn MacBook Pro arrives tomorrow morning.

Spanning Tree and Admin mac address issues srw2048

Ok, I have a somewhat complex problem and hopefully someone may shed some light or have an idea as to whats wrong.
First the scenario:
I have two Cisco Cat 6509's etherchanneled to each other via two fiber cables. One of these is the STP/RSTP root. I have two SRW2048's.. one trunked to each of these 6509 switches. There is also a trunk between the SRW2048's. All this is to create a redundant topology so that if one of the switches fail's the others can still forward packets to each other. Of course the scenario described is in fact a loop that should be handled by STP/RSTP. I have RSTP enabled on all the switches in the scenario (PV RSTP on the cisco switches as they only do Cisco's brand of per vlan spanning tree). There are 3 vlan's configured on each of the srw2048's (2,55,96). There are corresponding vlan's also on the 6509's. I have put the srw2048's management interface into vlan 2.
The problem:
I need to forward packets between the srw2048's primarily and only use the 6509 that is not the root when a failure happens. I have configured the non-root 6509's spanning tree cost on the etherchannel to be higher then the alternate path through the srw's to the root. I can hook everything up and view the spanning tree and see that the srw2048's interface that goes to the non-root 6509 is blocked, and all other interfaces on the other switches are forwarding. I can in fact ping and get to the admin interface on all the switches. Then for some strange reason the admin interface of the srw2048 plugged into the non-root 6509 stops responding. If I disable either the interface its plugged into on the 6509 or the other srw2048 everything starts working again. Sometimes it responds after many failures for no apparent reason. I looked into the mac-address table on the 6509's and they are conflicting, pointing to each other for the mac-address of the broken srw2048. When I clear the mac-table the admin port comes back for about 5 seconds then again goes dark. When reviewing mac-table on the 6509's they are back to pointing to each other. The odd thing (although I haven't confirmed this completely) is that hosts placed into vlan 2 on that same srw2048 seem to work fine. If there was an STP loop or something misconfigured, I would expect it to effect any host in vlan 2 or the other vlan's for that matter on the srw2048 that stops responding. Alas, I am stuck because I need to manage this switch remotely. My only thought is that for some reason even when the STP status is blocked the broken srw2048 is still sending out arp's of its admin interface and bypassing the STP protocol. I have no way to confirm this, but maybe someone has an idea as to what I'm doing wrong, or otherwise offer a solution. For now, I simply removed vlan 2 from the 6509 that the broken srw2048 is plugged into and everything seems fine.
My apologies for such a long post, but this is somewhat complicated. Thanks in advance for any info.
-Geoff
Message Edited by gmyers on 08-19-2008 10:35 PM

To follow up, I had a ticket open with Linksys about this for about 3 months with no resolution. I submitted packet captures, stp outputs, etc and no luck. I gave up and basically had to revert to a manual failover for redundancy. It's no perfect or fast, but it works every time.
Unless linksys issues a firmware upgrade with this as a fix, I doubt we will be able to ever resolve this on our own.

Outlook 2011 for Mac / Synching issues

Hi there,
it seems that I'm not alone with 'issues' in synching Outlook for Mac 2011 with mobile devices..
The setup I am trying to arm wrestle into submission is
MacBook Air (brand new) Mavericks 10.9.3
iPhone 5 iOS 7.1.1.
Outlook 2013 (brand new)
I've been able to succesfully import all of my email (from a previous version in windows) as well as get the contacts and the calendars imported onto Outlook for Mac, but am at my wits end to get them all talking to each other.
Outlook won't sync to the iPhone for mail, contacts and or calendar, nor visa versa.
I've read literally thousands of posts all suggesting this fix and that fix to no avail. I'm now reading that perhaps mavericks is not compatible with outlook synching services or outlook synching services isn't compatible with mavericks. I'm not trying to lay blame to either side as I'm simply looking for a solution.
Any ideas?
Thanks,
Paul
oh - Apple Migration Tool.... is appalling in my opinion, it did sweet bugger all.

Minor correction. It's Outlook 2011, Outlook 2013 is the Windows version.
Sync Basics
CalDAV & CardDAV are protocols used by Apple, Google, Yahoo and others to sync contacts and calendars. Neither Entourage 2008 nor Outlook 2011 support CalDAV or CardDAV.
You can no longer sync with any third-party apps running on your Mac that use Sync Services, like Entourage or Outlook.
If you want to stick with Outlook, I suggest you look at Office 365 Exchange. Otherwise, moving to Apple Mail, Contacts and Calendar with iCloud might be a better option for you.
Until Microsoft adds CalDAV and CardDAV support to Outlook, there is no way to sync other than get an Exchange account. It's $4/month Exchange Online.
http://office.microsoft.com/en-us/exchange/microsoft-exchange-online-email-for-b usiness-FX103739072.aspx

Outlook 2011 for Mac Sync issue with Calendar

Does anybody know if there is an issue with the Calendar not syncing with iCloud. Everything in Outlook will sync using iCloud except the Calendar.iCal has no issue, just Calendar from Outlook.

Hi Robert,
I found a KB for your reference:
Sending email error "Authentication failed. Error 17897" in Outlook 2011 for Mac
http://support.microsoft.com/kb/2492901
If it not matches to yours, please paste the details without sensitive information.
Thanks
Mavis
Mavis Huang
TechNet Community Support

Mac boot issue; gray screen, spinning wheel, and progress bar

Recently I shut down my Mac only to find when I tried turning it back on it was very slow and unresponsive. I proceeded to shut down a couple more times and this resulted in a gray screen upon startup with a spinning wheel, apple logo, and a progress bar. The progress bar did not fill at all at first, and as I left my laptop for about 40 minutes, it still hadn't moved. I proceeded then to boot in recovery and tried to repair my disk. This resulted in another issue, and would not repair, so I decided to just erase my HD, since there was not anything important on it anyways. I really just wanted my laptop to turn on so I could start my paper. Well it wouldn't erase my hard disk and this led to me becoming very impatient and just quitting the process. On the next attempt to boot in recovery, the hard disk doesn't even show up. Only the recovery disk (previously there were two disks as options, as well as the wifi selection). I'm now using safari through the recovery option. I'd like to simply get my computer back. If i can't get anywhere on here, i'm just going to bring it to the apple store and return it, most likely, as i've had nothing but problems with this thing. I've had it since the middle of September, and I can't hardly believe i've already encountered such an issue. Any help is much appreciated. Thanks.

I'd make a trip to the Apple Store - your hard disk may be dying (the Recovery partition is very small) or there might be something corrupt in your system. They'll be able to evaluate it.
Clinton

Problem with a Dell Monitor - stopped working yesterday, just a flashing orange light. Monitor or Mac Mini issue?

I've been using an old Dell monitor with my Mac Mini ever since I got it, however yesterday evening my monitor stopped working - however I'm not sure whether the issue is with the monitor or the Mac Mini. It just doesn't seem to respond when I try to bring the Mac Mini out of sleep. I can hear that the Mini is responding to the keyboard - I hear the right noise for pressing return on the password box without entering anything.
I've made sure all the cables are plugged in properly (power & connection to the Mini), but all I'm getting is a flashing orange light on the monitor.
I don't have anything else to test the monitor on, nor do I have access to another monitor to plug into the Mac Mini - I only have an old iBook G4, so don't have the right adaptors to plug the VGA from the monitor into that.
So before I run out and buy a new monitor, what is the best way to determine where the problem lies.

Hi, I've actually never had any issues waking this monitor from sleep, this is the first time that it has been unresponsive and I've had it for years - probably over 10! (E151FP) so probably overdue for replacement.
To be honest I'd rather not just switch the Mini off unless it's a last resort given that other than the lack of a picture everything else seems to be working ok - still hearing all the normal noises of Skype, Mail and TimeMachine etc.

TV as monitor for mac mini issue

I need some help. I've been using a 42" 1080p TV as a monitor for my Mac mini via HDMI input for years with no issue. I had set the display to 720p and never had a problem.
Tonight I bought a new 60" 1080p TV and proceeded to plug everything as normal via HDMI, turned everything on and it was working fine. I am 99% sure that when I went to display preferences it said 720p still, so I decided to try 1080p as the TV is so much larger. The TV screen went black and there was no way to revert back to 720p since I couldn't see the settings box anymore.
The TV screen is fine when using xbox and blu ray player and i've tried all the factory resets for the TV. I've hooked the old TV back up and have played around with the display preference settings and then reconnecting to the new TV @ each one but no luck. I'm not sure at this point if it's a Mac issue or not but I'm wondering if anyone has any suggestions?
Any help is much appreciated
Thanks
Erin

The old TV works no problem -- at 420p, 720p, 1080i & 1080p. I've got overscan turned off now, but didn't when I first attached the new TV. Again, it's fine on the old TV with overscan on or off. No matter what I do I get this black screen of death but sound on the new TV. So that's why I'm thinking it might be the TV causing the problem. But thought I'd post here to see if anyone else has encountered the same problem.
BTW it's a Sharp Aqous 60" TV. The old TV is off-brand, Dynex.

Brand new 2010 Mac Mini issues....

I took delivery of my 2010 Mini this morning.
After initial set up I first noticed the clarity on the text is very poor compared to the AppleTV it has replaced? I also find the WiFi streaming of audio and SD video to be terrible, where the ATV which it has replaced was perfect, even when streaming HD!
Lastly, I find it very slow, having the "spinning disc" show up whenever I try and do something? Not what you want from a fresh machine which only has Firefox installed on it so far?
Has anyone else experienced these issues and can I rectify them? I feel like sending it back, the performance is awful for the cost of the machine.

David.Austin.Allen wrote:
Also, a few folks have mentioned that the cable plugged into the antenna was a bit loose. You might try opening the bottom, and making sure that the cable is properly seated.
http://www.ifixit.com/Guide/Repair/Installing-Mac-mini-Model-A1347-Antenna-Plate /3111/1
Thanks for that link.
May be coincidence, but having tried the Mini upstairs where another AppleTv was sited it crept up to 54Mbps.
Should've tried it downstairs again where it was only getting 11Mbps to see if that was still the case, but decided to check the connector - you can see the gold/brass coloured connector through the grill - using a blunt probe I touched it and it wasn't loose, but I applied some gentle downward pressure didn't seem to move, but now getting 54Mbps in the original site. Perhaps coincidence, maybe as I've disconnected the other wireless device, who knows.
Will see how it goes for a few days but if performance falls off may take it in to be looked at.

Which is better for solving Mac G5 issues

I have been experiencing Kernel Panics and program crashes. I want something that is good for testing hardware and OS issues. Can either of these find corrupted data files? I am looking at two utilities for purchase. Which is better for solving Mac Issues?
TechTool Pro
or
Disk Warrior?

Hi! Both and neither. Diskwarrior is the undisputed king of disk drive directory repair (which is the leading cause of drive problems)but that's all it does. TTP does directory repair although not as good as DW but TTP has a hardware test suite to test the components and can test a disk for bad blocks. I recommend both although you'll find yourself using DW the most. If you bought your machine new you should have a hardware test disk. It could be a separate disk or on one of the restore disks. As for your KP's start by disconnecting everything except the keyboard and mouse. Ram is also a likely culprit as can be a video card. The console log file will often give you a hint of the offending item. DR SMOKES article on KP's will also help. Tom

Mac OPSEC Issue

Similar Messages

Maybe you are looking for