Security issue! Airport and Keychain

Hi;
I purchased my MacMini in Canada.
About 2 weeks after being back in the UK I noticed two fairly serious problems that were not occuring before. Each time I re-start the following happens:
1) My 'Interference Robustness' is switched off (although I always turn it on).
2) My 'Keychain' is always unlocked (although I always lock it).
I have tested this several times and each time the same thing happens!
I have also noticed today, and yesterday, that when using Safari in Yahoo, when I click on 'In Box' a new window appears sometimes. This appears over the old window. Today I noticed that some e-mails I had not read were opened while I was using the top window. I never set Yahoo or Safari to do this. I have tried re-setting Safari and emptying the cache. This worked yesterday but today the problem seems to re-occur no matter what I do. It does not happen 100% of the time though, which has me even more worried.
Sounds like I may have a serious security problem here.
Can ANYONE help, please???
Cheers

I have contacted Apple regarding this problem. After about 2hrs(!) on the phone they explained that the only way to resolve this is to do an 'Archive and install'. This was about a week ago - still waiting on the promissed e-mail on how to 'Archive and install'. Is it just me or does Apple service seem to be a lot worse since their recent success (I started with an LCII) - Love Apple but they should be a bit more loyal to those who remained loyal through the 80's and 90's!
Cheers.
Mac Mini Mac OS X (10.3.9) Special Editon

Similar Messages

Wrt300n security issue. And Gaming issue.

I have wrt300n router, And when i try to add any of the Security Modes, i can't connect to the internet with my WMP54G. but when i Disable the security mode it connects just fine. So my question is how can i have my WPA2 personal Security mode up (or any security modes up)and connect with my wireless card ?? It connects just fine with my labtop, when the security mode is up, But the Pc downstairs with the Wireless card in it dosnt want to connect.. My pass key works and it connects to the router just fine, but it just dosn't want to allow me to access the internet. Oh and another thing when im playing Online games, As in Counterstike, The wireless connection seems to drop! The computer i game on is connected directly to the router. The wireless drops on the Pc downstairs and on my labtop.
Thanks

Does it work on other security modes? WEP? WPA personal?
The box said windows xp or better... So I installed Linux!

Unexpected restart link with airport and keychain

HI,
I experience some unexpected restart of my Mac book pro when it's inactive (and only when it's inactive). There is not a single line in the system.log or console.log that match the time of reboot. I didn't find a reproducible way of making it happening. Nevertheless, when airport cannot connect to a gateway because the signal is marginal and make an error seems to increase the probability to experience such a feature. I'm of course not talking about a kernel panic. There is not a single clue before the restart! The hardware testing provided by apple on Mac OS X DVD and with the apple care plan does not detect any issue.
On top of that it seems that when it starts to happen, it will happen any time you will reach the screensaver or lock the computer, if the screensaver is password protected. Switching of this option is usually not enought and according an other article of this forum, I added in ~?Library/preferences a com.apple.screensaver.plist with 0 value to askForPassword
Repairing the permission seems to help sometimes as well. But there is no key way of getting rid of it.
Moreover, from time to time the additionnal plist file I said is removed by another process (I'm the only user of my laptop and it happens several time). But still nothing reproducible.
I tried to mesure the temperature and log it, and it's not increasing at the time of the crash, on the contrary.
so any idea to fix, or at least to force a higher level of logging is welcome

OK, I came up with at least a "hack" to get me back up and running for the moment. I have another user account "test" on my powerbook that is pretty much a vanilla new account. Whilst reviewing what files had been changed during the upgrade I became fairly convinced some form of bad XML configuration parameter(s) in file(s) contained in ~user/Library/Preferences were behind the loss of network connectivity. I logged out, then logged back in as my "test" user and networking worked flawlessly which seems to confirm that indeed the problem lies not in shared system directories but in user configuration data. Anyhow I logged into my normal account (top right screen corner) whilst still logged into my test account and now networking remained enabled and operational.
I'll report back if I work out how to clean up this mess properly.
Ian

Strange networks show up in airport and keychain access

On my macbook, I have my own wireless network that i set up; (password protected). Most times i use my network, but when mine runs slow, i usually use a network called NETGEAR (one of the unprotected networks in my area). Lately I have noticed that under system preferences, under preferred networks, 4chan partyvan is showing up. After looking in my keychain access, this 4chan partyvan also has keys listed under my login and system keychains. I usually delete the keys and the network when i see them, but they keep coming back. What is causing this?
This is totally baffling me because i've never been on 4chan, and from googling the term 4chan partyvan, i get a result that is bothersome; (google says that 4chan partyvan is slang for a fbi surveillance and raid on pedophiles-- of which i'm not) so i don't understand how these keep getting on my computer. Please help!

i found out that this was a network that my son was connecting to when i visited my nephew--who is an avid 4chan fan and that was the name of his wireless network.

Issue Airport TC and Airport Express wifi

Hello,
Any help much appreciated for this configuration that doesn't work:
I have the following conf connected via cable:
ISP modem --> NetGear Router FVS338 --> Airport TC + Airport Express () + NAS (qnap)
The Airport TC is plugged via the WAN port and works has a HD backup.
The Airport Express is plugged via the WAN port and works has primary wifi network (bridge mode + create a wifi network)
Both have automatic DHCP
Both have the Bridge mode ON.
I want to expend my wifi network by:
- turning ON the Aiport TC's wifi (expend the actual wifi network)
- setting up the exact same SSID name + same password as the Airport express.
Once i have done this i completely lose my internet connection, as if turning ON the wifi on the TC was messing with all the configuration.
Once i have turn OFF the wifi, everything goes back to normal !!!!!!
I have than try to connect both the AirPort TC and the AirPort Express via the LAN port, but it doesn't solve my issue.
Once the wifi in ON (on the AirPort TC) i lose my internet connection!!!!
Has anyone got the same issue?
What do i do wrong?
Many thanks for your help

I created a New Network on both the Airport with the same SSID and same password:
It seems to work perfectly.
My LAN network works fine and i can connect via wifi in my house.
Do you think that could solve my issue? Or it is better to have one airport in "Create a Network" and the other Airport (express) in Extend network mode?
Do you think the 2 wifi network (same SSID) can scramble each other?
This is far superior method.. known as roaming. It is where I would have suggested you go.
The extend wireless is only for situation where you cannot run ethernet. It is much poorer.
The 2 wifi networks are fine .. in most cases. They have same name and same security but they should have one difference and that is wireless channels. With both set on auto they simply should sort themselves into using sufficiently different channels to not have a problem (or the distance is so great they literally cannot see each other).
A very good idea to use Apple's wireless diagnostics btw so you can see what channels everything is on.
It is available in Lion (though hidden) and was readily available from Mountain Lion on.
About Wireless Diagnostics
There is a lot more tools if you open the utility.
You can see at a glance all the different AP's in your area by doing a scan and can track performance of what you connect you as well.
I forgot to tell you that i have few Sonos devices (Play1, ...) plugged into my network.
Do you know that system?
Have you ever heard about any issues related to compatibility between Apple Airports and Sonos devices?
Sonos stuff can have issues. I don't use it but some people have posted their problems.. If you run into problems then just post the details.. I would recommend as much detail as possible in a new thread with Sonos in the title.
The new apple routers must be on latest firmware. If you have earlier products then firmware is a problem. It depends. Latest in that case is not always greatest. The particular problem was spanning tree protocol, which is essential to the Sonos but Apple messed up. (since their own products didn't use it).
You can simply do a search here (wireless forum area) for sonos.
here is typical one I handled earlier.
Re: Sonos, Time Capsule and volume permissions
The other thing mentioned in the thread there is Sonos is very much a windows network device.. odd when it is so Apple iTunes orientated. Please do not use Apple type names.. for anything. Use all network names that are short, no spaces and pure alphanumeric. That gets you around most of the problems that Sonos support cannot figure out.

Claims Based Authentication SPSecurityTokenService.Issue() failed: The security token username and password could not be validated.

Please excuse the lousy table...Its late :-)
I have a multi-server SP2010 farm. Patched up to
Configuration database version: 14.0.6106.5002
My goal is to have a claims based web application that authenticated to ADAM for Extranet. I have configured the servers exactly to MSDN and technet specs (following this spec to the
letter (
http://technet.microsoft.com/en-us/library/ee806882.aspx) to allow the forms side of the web app to authenticate to ADAM.
IT WORKS IN DEV!!! , which is a single server farm. However, it does not work in production. I get the following:
Claims Auth log entries:
1:06:25 AM
w3wp.exe (0x0EDC)
0x1790
SharePoint Foundation
Claims Authentication
f2ut
Verbose
Authenticated with login provider. Validating request security token.
1:06:25 AM
w3wp.exe (0x0EDC)
0x1790
SharePoint Foundation
Claims Authentication
0
Verbose
Using membership provider 'ADAMProvider'.
1:06:25 AM
w3wp.exe (0x0EDC)
0x1790
SharePoint Foundation
Claims Authentication
0
Verbose
Doing password check on '[email protected]'.
1:06:46 AM
w3wp.exe (0x0EDC)
0x1790
SharePoint Foundation
Claims Authentication
0
Verbose
Failed password check on '[email protected]'.
1:06:46 AM
w3wp.exe (0x0EDC)
0x1790
SharePoint Foundation
Claims Authentication
0
Unexpected
Password check on '[email protected]' generated exception: 'System.ServiceModel.FaultException`1[Microsoft.IdentityModel.Tokens.FailedAuthenticationException]: The security
token username and password could not be validated. (Fault Detail is equal to Microsoft.IdentityModel.Tokens.FailedAuthenticationException: The security token username and password could not be validated.).'.
1:06:46 AM
w3wp.exe (0x0EDC)
0x1790
SharePoint Foundation
Claims Authentication
fo1t
Monitorable
SPSecurityTokenService.Issue() failed: System.ServiceModel.FaultException`1[Microsoft.IdentityModel.Tokens.FailedAuthenticationException]: The security token username and password
could not be validated. (Fault Detail is equal to Microsoft.IdentityModel.Tokens.FailedAuthenticationException: The security token username and password could not be validated.).
1:06:46 AM
w3wp.exe (0x1B34)
0x08A0
SharePoint Foundation
Claims Authentication
fsq7
High
Request for security token failed with exception: System.ServiceModel.FaultException: The security token username and password could not be validated.
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message response)
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr)
  at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst)
at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo)
1:06:46 AM
w3wp.exe (0x1B34)
0x08A0
SharePoint Foundation
Claims Authentication
8306
Critical
An exception occurred when trying to issue security token: The security token username and password could not be validated..
1:06:46 AM
w3wp.exe (0x1B34)
0x08A0
SharePoint Foundation
Claims Authentication
f2un
Verbose
Form authentication failed.
I have tried EVERYTHING (well, nt everything, I don’t have the fix I suppose).
I found plenty out there and nothing directly correlates with this issue.
I searched on all parts of the errors I got.
This contains an interesting blurb about setting up access for the apppool id correctly.
That’s not the case for me. It works in dev and the same id are used there.
http://sharepoint-2010-world.blogspot.com/2011/03/adam-forms-based-authentication-in.html
This was good but it doesn’t give specs on what the environment looks like:
http://social.msdn.microsoft.com/Forums/en/sharepoint2010general/thread/557143a6-4b36-4939-bb7f-d62a9335fd18
The was interesting…but I am patched up beyond the June 2011 CU so it’s a moot point:
http://social.technet.microsoft.com/Forums/en-US/sharepoint2010setup/thread/9b8368ef-c5e5-4ead-b348-7b2b5587cfc8
Any and all help would be greatly appreciated!

Hi.
You say its a multiserver farm, do you have more than one web server then?
If thats the case, have you tried accessing the site on each server directly?
Found this for you, maybe that can help?
Troubleshooting Exceptions: System.ServiceModel.FaultException`1
http://msdn.microsoft.com/en-us/library/bb907220.aspx
and this:
SharePoint 2010 Claims Authentication - The security token username and password could not be validated reoccurring every morning
http://social.technet.microsoft.com/Forums/pl-PL/sharepoint2010setup/thread/383f1f9b-5c4a-4e19-b770-2a54b7ab1ca1
and
This seems to be a good guide:
http://donalconlon.wordpress.com/2010/02/23/configuring-forms-base-authentication-for-sharepoint-2010-using-iis7/
Good luck
Thomas Balkeståhl - Technical Specialist - SharePoint - http://blksthl.wordpress.com

I updated some security issues and suddenlly my gmail does not open. it shows 75% of the procees and does not go on

I updated automatically some security issues in my computer (I don't remember which) and now my gmail will start opening until it reaches 75% and it will not go on opening.
I can open it Internet explorer but not in Mozila fireworks

Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Other web browsers and security issues?

Since even an Apple KB article recognizes the need for an additional browser and because of Safari's limitations and problems, I'm going to try switching to another browser (most likely OmniWeb and am looking at Firefox, Shira and Opera also though perhaps not as a primary browser) but I'm wondering about their ability to keep on top of any security issues for Mac? (and how do you keep up with security updates?)
Though perhaps unfounded, at least with Safari, I feel that Apple has a vested interest in keeping on top of security issues (for Safari and Java) and I can readily find out about security updates via software updater.

Most of the other Mac browsers have their adherents. They are all good browsers (I have 7 browsers installed to test various web sites and for change-of-pace usage). They all have their strengths and they all have their weaknesses. Only iCab and OmniWeb are still shareware, the rest are now or always have been free (Opera just recently stopped charging for its browser).
I have settled on Firefox as my alternate browser and I use it maybe just a tad more than Safari, but I do switch back and forth between them. The Mozilla foundation is good at getting security updates out when needed. Firefox has a button on the toolbar to check for updates. One nice thing about Firefox is that you can install free extensions which enhance the features available. I have one to supplement tab features, one to control iTunes from Firefox's status bar, one to help me format messages in discussion forums, and one to block ads.
I prefer OmniWeb for doing intensive research because of the way it handles tabs in its sidebar, showing me which ones I've looked at and which ones I haven't, and giving me great flexibility in rearranging tabs, which are viewable as thumbnails or text names (I have had up to a hundred or so tabs open in OmniWeb.
Shiira is good and its fast. I have not checked for updates for a while, but the last time I updated there was still a problem with Shiira kicking you out of logged-in sites when you moved from page to page with in web site. This may have been fixed by now - they were aware of the problem back then.
Camino is a native OS X cousin of Firefox and is also fast, but is not updated as often.
I would stay away from Mozilla or Netscape unless you need all the additional modules they have and which take up hard disk space. Firefox and Camino represent the browser module of Mozilla/Netscape. Mozilla and Netscape have modules for email, irc chat, newsgroups, and for creating and editing web pages. Netscape is a branded and slightly customized version of Mozilla and is not updated as often.
Opera is a nice browser and some use it as their main browser, but I have not seen anything that really stands out for me, but that does not mean it is not worth a look.
I would stay away from abandonware Internet Explorer.
As for checking for updates, several of them, as with many Mac programs, now have a menu item that allows you to check for updates. Most of them also announce their updates on both VersionTracker and MacUpdate.
Happy Exploring.

My account was deleted for security issues. I made a new account, but I can't syncronise my apps with this new account. I bought a new Iphone and would like to transfer the apps ans music on this new one. Can somebody help me?

My account was deleted for security issues. I made a new account, but I can't syncronise my apps with this new account. I bought a new Iphone and would like to transfer the apps ans music on this new one. Can somebody help me?

Why would you make a new account? This will likely cause many problems. Just get you old account enabled.
Apple ID: "This Apple ID has been disabled for security reasons" alert appears
Frequently Asked Questions About Apple ID
Everything you purchased with the old account will always be tied to that account. You will have to authorize the computer for that account and you will have to update the apps from that account.

Using latest version of fireFox to access Think Central, pages will not load and they say that this is a security issue with FireFox?

Teachers in our district are supposed to use www.thinkcentral.com with FireFox.
Some have no problem accessing the lesson plans.
Most when they login click on a lesson plan and an icon shows up that says loading but never does.
If you reboot the computer and login you can open a page once but not a second time and no other lessons will open.
Think Central support says this is a security issue with Firefox.
I have updated FireFox, all the Adobe, Reader, Flash, Air and Shockwave. As well as Java.
I have allowed the pop ups to the think Central web site.
Any help would be appreciated

Are there any notification icons on the left end of the address bar? If so, please click them to see whether they related to security issues (such as blocked content - shield icon: [[How does content that isn't secure affect my safety?]]) or a plugin requiring permission (Lego-like icon).
Does Think Central have any help pages about this issue? Without an account, it is difficult to explore the issue first-hand.

Airport problems after 8/12 airport and security update

My MacBook Pro which had been working flawlessly since I got it last year received the airport and security updates distributed today. After the reboot my airport turns itself off after a few minutes and will not come back on and the computer seems to be running hotter than usual. Booting from a recent clone of the drive without the updates did not fix the problem and the card turned itself off a few minutes after the reboot and will not come back on.
Anyone having similar problems after the update?

Does your problem occur only when unplugged. If so, then maybe this update is for you: http://support.apple.com/downloads/AirPortClient_Update_for_MacBook_and_MacBookPro. Check it out, but use your own judgment in installing; not much info is provided.

HT1338 There is a lot of talk about the Java security issues and the ability to download a patch fix, do i need to do this or will software update pick this up for me?

There is a lot of talk about the Java security issues and the ability to download an apple patch fix, do i need to do this or will software update pick this up for me?

Thanks for that, how do I establish if I have Java installed as on Safari preferences it indicates the following
Web content - Enable Java
- Enable JavaScript

When opening safari i get a message that says major security issue please contact apple immediately suspicious activity might have been detected. what is this and how do i get rid of it so i can use my internet?

when opening safari i get a message that says major security issue please contact apple immediately suspicious activity might have been detected. what is this and how do i get rid of it so i can use my internet?

A misleading and malicious popup. Launch Safari with the Shift key held down; if that doesn't work, temporarily disconnect the computer from the Internet.
(121307)

HT201210 you are running the latest version of iTunes, have no other USB devices attached, have no security software installed, and are directly connected to your ISP source, simply restarting the computer and the iOS device can clear up certain issues th

you are running the latest version of iTunes, have no other USB devices attached, have no security software installed, and are directly connected to your ISP source, simply restarting the computer and the iOS device can clear up certain issues that could prevent you from restoring. After restarting the computer and iOS device, attempt to restore again.

How big is your library? I would recommend the following troubleshooting steps:
- Backup your library. Always a good idea before messing with things.
- Create a new library.   Refer to this article for details: http://support.apple.com/kb/HT1589. This won't delete your old library, you're just creating a new empty one. Also refer to this article to get back to your old library later.
- Add a few albums into this new library. Not everything, just a small sampling, as a test.
- Activate Match on this new library. You shouldn't have to re-pay, it should just say "Add Computer" or similar.
- At this point, Match should run again. With just a few albums it should complete in just a few minutes.
If iTunes doesn't crash at this point, then likely there's something about your original library that Match doesn't like - what that is I don't know, but at least you'll know it's not your PC.   If iTunes still crashes, then if could be a number of other things, but probably not your library.   My next suggestion (if you haven't already done this) is to uninstall / reinstall iTunes.   If that doesn't work, then my next ideas you won't like.

About "kernel.exec-shield" and "because they will bring security issue" for linux ASE

In " ASE Quick Installation Guide for Linux", "kernel.exec-shield=0" and “kernel.randomaize-va-space=0” should be set.
But SuSE engineers say that “kernel.exec-shield=0”and “kernel.randomaize-va-space=0” will bring the OS security issue.
Customer want to know why ASE need the above parameters ?
Has anybody the idea for customer's question?

If the parameters are not set as documented, attempts to start additional engines beyond the first one will fail, generating stack traces.
ASE acts in many ways like it's own operating system, scheduling individual user connections (spids) to actively run (note that ASE was developed well before native threading was commonly available). Each spid has it's own stack information that gets swapped in when it is set to "running" state on the engine and swapped out when it yields the engine. The mechanics of this is not that different from the buffer overrun exploits described in the Red Hat document linked to by the
install guide, http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf
and the exec-shield mechanics definatately interfere ASE's operations when ASE is using multiple dataserver processes (engines) that swap spids around.
-bret

Security issue! Airport and Keychain

Similar Messages

Maybe you are looking for