PDA

View Full Version : Mac OSX not very secure...Someone tracking my every step and passwords via IP?




thiagos
Aug 6, 2009, 06:41 PM
Ok so this person got a hold of an IP tracker which tracks my every move online, from passwords to websites I visit, what I type. I know nothing was installed in my computer because I recently did a restore and that person did not access my computer.
I need to know how to stop that, Mac OSX doesn't seem very secure if you ask me...



mkrishnan
Aug 6, 2009, 06:44 PM
So, first things first... what evidence, besides the fact that your buddy told you he/she can now track your every online move, do you have that this is actually happening?

thiagos
Aug 6, 2009, 06:46 PM
So, first things first... what evidence, besides the fact that your buddy told you he/she can now track your every online move, do you have that this is actually happening?

Conversations I have had, my passwords explained in detail, anything related to what I do online. Things I never knew someone could get a hold of and I was proven wrong.
I need to know how to stop this...

aristobrat
Aug 6, 2009, 06:48 PM
Ok so this person got a hold of an IP tracker which tracks my every move online, from passwords to websites I visit, what I type. I know nothing was installed in my computer because I recently did a restore and that person did not access my computer..
So describe your home network/Internet connection. Anyone with access to it could easily sniff what's going across it, and that's got nothing to do with what operating system you're using (Windows, Linux, OS X).

Check out the link below. Read the description of the Cain & Able program. It runs on Windows, but when it comes to pulling stuff off the network, it pulls from any OS.
http://www.oxid.it/projects.html

thiagos
Aug 6, 2009, 06:51 PM
So describe your home network/Internet connection. Anyone with access to it could easily sniff what's going across it, and that's got nothing to do with what operating system you're using (Windows, Linux, OS X).

Well this person can track me from their work which is 45 minutes away so I don't think it is a wireless internet issue.
I am using Leopard 10.5.8 and I browse through Safari, I have time capsule as my wireless router and I have it wap protected.

The freaky thing is this person actually was able to track everything I did on my cellphone using my AT&T 3G connection.

Tallest Skil
Aug 6, 2009, 06:53 PM
The freaky thing is this person actually was able to track everything I did on my cellphone using my AT&T 3G connection.

For some reason, I doubt this. A more logical explanation would be that they know your account password and were looking at the history.

thiagos
Aug 6, 2009, 07:02 PM
For some reason, I doubt this. A more logical explanation would be that they know your account password and were looking at the history.

No, that is impossible. What about chat conversations through aim? What about every single website and facebook things I have posted? From what I understand it takes a day or two for this information to come up...
You make me seem like I am some retard. I am a very savvy person, I know how to work around computers but I am stupid when it comes to networking.
From what I understand this is a program for employers and it costs quite a bit of money. I know nothing was installed in my computer. If you are not sure if this exists or not, please let someone who knows about it, answer my questions.
Thank you.

Sehnsucht
Aug 6, 2009, 07:05 PM
Well this person can track me from their work which is 45 minutes away so I don't think it is a wireless internet issue.
I am using Leopard 10.5.8 and I browse through Safari, I have time capsule as my wireless router and I have it wap protected.

The freaky thing is this person actually was able to track everything I did on my cellphone using my AT&T 3G connection.

Does this person work here?

http://upload.wikimedia.org/wikipedia/commons/e/e1/CIA_New_HQ_Entrance.jpg

I think so...:cool:

Tallest Skil
Aug 6, 2009, 07:09 PM
No, that is impossible.

No, it isn't.

What about chat conversations through aim?

Keylogger or being logged in as you.

What about every single website and facebook things I have posted?

Anyone can see anything on Facebook.

From what I understand it takes a day or two for this information to come up...

NO way.

You make me seem like I am some retard.

HOW?!

I am a very savvy person, I know how to work around computers but I am stupid when it comes to networking.

Same here; I can do anything but deal with networks.

If you are not sure if this exists or not, please let someone who knows about it, answer my questions.
Thank you.

I know that everything that I said is possible.

u49aa2
Aug 6, 2009, 07:09 PM
Ok so this person got a hold of an IP tracker which tracks my every move online, from passwords to websites I visit, what I type. I know nothing was installed in my computer because I recently did a restore.

If you did a restore, then whatever hack program was in your system will be restored back. Maybe you should try fresh install and see what happen.

aristobrat
Aug 6, 2009, 07:10 PM
From what I understand this is a program for employers and it costs quite a bit of money.
There are tons of programs like that. They essentially work along the lines of the Cain & Able link I sent you above. For example, they can capture all IM traffic, or every single thing that you post while you're on their network, including Facebook. The only thing they can't easily do is see what you're doing on an encrypted website. If you connect to your bank over https://, they can see that you've connected, but they can't make sense of the encrypted data.

They key for any program like that to work is that someone needs access to your network. If they're unable to do that, then like others have said, the only other logical explanation is a key logger.

In the case of your iPhone, while on AT&T's 3G network, that's virtually impossible (so long as your iPhone hasn't been hacked).

thiagos
Aug 6, 2009, 07:15 PM
If you did a restore, then whatever hack program was in your system will be restored back. Maybe you should try fresh install and see what happen.

Well I did a 7 pass erase, reset my PRAM and everything else. I just don't understand how that is possible. I have heard of programs being installed in computers but this is beyond freaky. Full conversations I had. My facebook is private and no one can read my messages because I don't post on the wall, only e-mails. Detailed Amazon purchases I have made after I changed my password, every e-mail I have received...I can't explain how that was done but it is being done to me and I can't stop it.

aristobrat
Aug 6, 2009, 07:18 PM
Well I did a 7 pass erase, reset my PRAM and everything else. I just don't understand how that is possible.
After that, did you reinstall all of your programs from scratch, or did you use Migration Assistant to put everything back on?

I think he was saying that if you did any type of restore (other than manually reinstalling), the restore could have put the malware back on (assuming the backup you restored from had the malware).

Tallest Skil
Aug 6, 2009, 07:19 PM
Well I did a 7 pass erase, reset my PRAM and everything else. I just don't understand how that is possible. I have heard of programs being installed in computers but this is beyond freaky. Full conversations I had. My facebook is private and no one can read my messages because I don't post on the wall, only e-mails. Detailed Amazon purchases I have made after I changed my password, every e-mail I have received...I can't explain how that was done but it is being done to me and I can't stop it.

So it's a keylogger of some sort... Are there any dongles plugged in between your keyboard and computer (or what about that new keyboard firmware hack)?

Beaverfish
Aug 6, 2009, 07:20 PM
Just unplug your network cable, or assign a different static IP address

dejo
Aug 6, 2009, 07:20 PM
If your network connection has been compromised, it doesn't matter how many times you reinstall your OS. They could be snooping at every single packet that you send-to / receive-from the internet.

thiagos
Aug 6, 2009, 07:21 PM
After that, did you reinstall all of your programs from scratch, or did you use Migration Assistant to put everything back on?

I think he was saying that if you did any type of restore (other than manually reinstalling), the restore could have put the malware back on (assuming the backup you restored from had the malware).

Everything from scratch, I don't like restoring anything from back-ups. The only things I back up on an external hard drive are my iphone apps and my mp3s..

I will check the Cain & Abel but I know for a fact that this person uses a Mac, no windows, since Cain & able is for windows, I doubt that is the program...

If your network connection has been compromised, it doesn't matter how many times you reinstall your OS. They could be snooping at every single packet that you send to / receive from the internet.

How do I stop that from happening? Firewall, any programs for macosx that will encrypt everything I do online?

u49aa2
Aug 6, 2009, 07:24 PM
Well I did a 7 pass erase, reset my PRAM and everything else. I just don't understand how that is possible. I have heard of programs being installed in computers but this is beyond freaky. Full conversations I had. My facebook is private and no one can read my messages because I don't post on the wall, only e-mails. Detailed Amazon purchases I have made after I changed my password, every e-mail I have received...I can't explain how that was done but it is being done to me and I can't stop it.

I am not just suggesting erasing your drive. I am suggesting fresh installation of leopard. If you are 100% sure nobody but yourself have accessed your mac, then i would do fresh installation of leopard and format the setting of the time capsule and change your password to a new more secure one.

As for your iphone, this is really strange and as one of the guys said, the only way will be if a genius was able to hack your iphone while you left it somewhere or something like that.

Edit: i didn't see aristobrat clarification, yes this is what i meant.

GimmeSlack12
Aug 6, 2009, 07:28 PM
Do you have VNC, FTP, or SSH enabled on your computer? Those could all allow this person to get in. Otherwise I think you are overlooking the problem. I would begin by turning off these network options in System Prefs>Sharing, and then start changing passwords, starting with your user account.

aristobrat
Aug 6, 2009, 07:29 PM
How do I stop that from happening? Firewall, any programs for macosx that will encrypt everything I do online?
FWIW, I was just using Cain & Able as an example of how relatively easy it is to do what someone may be doing to you. There are equivalent tools for virtually every OS out there ... Windows is not required.

If the person is doing this without your consent, they're probably violating some law somewhere.

Instead of playing this cat and mouse game, where you really can't counter what they're doing until you understand what they're doing, why don't you just tell them to knock it the hell off?

thiagos
Aug 6, 2009, 07:35 PM
FWIW, I was just using Cain & Able as an example of how relatively easy it is to do what someone may be doing to you. There are equivalent tools for virtually every OS out there ... Windows is not required.

If the person is doing this without your consent, they're probably violating some law somewhere.

Instead of playing this cat and mouse game, where you really can't counter what they're doing until you understand what they're doing, why don't you just tell them to knock it the hell off?

I have but it gets more personal than that. I appreciate the link, I will definitely look into it.. I still don't understand how it works but from what I understand the person is able to see the passwords I type, the websites I visit, my adium chats, my facebook personal emails (not wall posts). I don't know what happened with the 3G phone thing but I know I did connect the phone to my computer, I turned off wireless and I did a 3G tether but the person was still able to track my every move. I know nothing was installed in my computer as I did a 7 pass erase and I resinstalled everything from scratch, nothing was backed up but my mp3s and iPhone apps.
I don't have SSH not FTP enables in my computer. I have reset my time capsule over 5 times, changed my passwords and still. I know this person is accessing this info from anywhere.
I don't know what else to do but I appreciate all the help...

u49aa2
Aug 6, 2009, 07:38 PM
This guy, can he do anything else beside watching you. i.e can he access files, applications, install and uninstall stuff?

thiagos
Aug 6, 2009, 07:42 PM
This guy, can he do anything else beside watching you. i.e can he access files, applications, install and uninstall stuff?

not that I know of, but from what I understand, that track will not work if I use Windows 7 (for now) but supposedly there is a new update coming up soon that will allow that. Also he told me that in this new update, he would be able to see me through my webcam, if I have a webcam hooked up to my computer...

Freaky!

satcomer
Aug 6, 2009, 07:53 PM
Well there is Little Snitch (http://www.obdev.at/products/littlesnitch/index.html). Have you tried to use this to see what is trying to get out onto your Mac. Plus don't relay on the build-in firewall in OS X. Instead use either Noob Proof or WaterRoof (http://www.hanynet.com/comparison.html). These use the BSD firewall that is much more robust.

MWPULSE
Aug 6, 2009, 07:53 PM
this is a bit new lol.. have you tried changing the network password? dunno if thats been suggested yet.. you could also try using a different type of encryption no? as opposed to WPA, try 128-HEX WEP. Just pushing ideas around.

PTP

thiagos
Aug 6, 2009, 07:59 PM
Well there is Little Snitch (http://www.obdev.at/products/littlesnitch/index.html). Have you tried to use this to see what is trying to get out onto your Mac. Plus don't relay on the build-in firewall in OS X. Instead use either Noob Proof or WaterRoof (http://www.hanynet.com/comparison.html). These use the BSD firewall that is much more robust.

I didn't know little snitch did that, I might as well buy it... I know my history stays saved somewhere for months. So I am not sure if the person is actually getting into my computer or not, he can go and see everything I've done for months...

MWPULSE
Aug 6, 2009, 08:32 PM
I didn't know little snitch did that, I might as well buy it... I know my history stays saved somewhere for months. So I am not sure if the person is actually getting into my computer or not, he can go and see everything I've done for months...

Safari history is stored in user>library>safari.. and in one of the files in there. You can change the timeframe it allows stored websites. in safari>preferences. Remove history items after>

Sayer
Aug 6, 2009, 09:45 PM
Sounds like someone put a spy cam in your place pointed at your computer.

If you want to be "secure" then stop using a computer altogether.

Phazotron
Aug 6, 2009, 10:14 PM
I didn't know little snitch did that, I might as well buy it... I know my history stays saved somewhere for months. So I am not sure if the person is actually getting into my computer or not, he can go and see everything I've done for months...

This all sounds very strange. I think you mentioned you've already re-installed your OS, so they must have a keylogger or some other means of observing everything you do.

Lastly, I'd have to think that this qualifies as an unlawful invasion of your privacy and you probably have a good reason to sue this person. I'm no attorney, and I'm not a cop, but this sounds like stalking behavior in the extreme. I'd go purchase a firearm or hire a bodyguard ASAP.

[edit] Also contact your ISP. Also enable private browsing on safari. Couldn't hurt. Better yet go get a cheap used laptop, install ubuntu linux on it and see if they can follow what you do on that. If they can you know it's not your computer but a network / ISP issue.

thiagos
Aug 7, 2009, 12:53 AM
What can I use to detect, remove and block keyloggers?

RKN
Aug 7, 2009, 01:33 AM
Sounds like something along this line of products might be installed on your mac:
http://www.spectorsoft.com/
http://www.actymac.com/

gnasher729
Aug 7, 2009, 03:38 AM
How do I stop that from happening? Firewall, any programs for macosx that will encrypt everything I do online?

You know who the person is? Baseball bat. Or call the police.

rccola70
Aug 7, 2009, 06:13 AM
Maybe a physical (hardware) keylogger? check your keyboard to computer plugs to see if there's anything weird there...

or remote desktop?

loveturtle
Aug 7, 2009, 09:04 AM
If someone just had your password and you had vnc or ssh enabled that wouldn't allow them to access your computer on your lan since you would need to forward ports for something like that.

What has most likely happend is that this person has personal information of yours and simply called the companies (facebook, aol, etc) pretending to be you and got your password using the personal information they have.

It's either that or something is installed on your computer that "phones home" letting the person connect. It's not possible for someone on the internet to establish a connection with a computer on your lan that you did not initiate.

Wiss
Aug 7, 2009, 10:33 AM
It's the White house and healthcare reform. What side do you stand on?? You know big-brother IS watching those that don't go along...:p

thiagos
Aug 7, 2009, 10:38 AM
I just installed Norton Internet Security 4, should that work? And I also bought a fingerprint scanner so I wont have to enter passwords for every single website I visit...

loveturtle
Aug 7, 2009, 01:15 PM
I just installed Norton Internet Security 4, should that work? And I also bought a fingerprint scanner so I wont have to enter passwords for every single website I visit...

i highly doubt either of those two things will do anything for you other than waste money....i'm pretty sure you can't log in to hotmail with your fingerprint either..if the item you just wasted money on even has the ability to facilitate your hotmail/whatever logins it's probably going to be by sending the password once you swipe your finger..

FoxyKaye
Aug 7, 2009, 02:55 PM
Maybe you've already done this, but have you turned off all of the "Remote" options in the Sharing preference pane, and enabled the OS X Firewall? I use Apple Remote Desktop at work to monitor systems, but if someone knows your password then can essentially log in to your laptop remotely and watch you work on it in real time without you knowing (by turning off the "show when being watched" options in the advanced area of Remote Management).

Also, have you changed your admin password when you re-installed OS X, and does your laptop boot directly to your user account or the login window? Just a couple of easy security tips - likewise, you can enable a request for password when waking from screen saver/sleep. At least this way, if your laptop is out of sight for a few minutes at work or wherever, it will put a few more obstacles in the path of someone mucking about on your system.

If you're using a wireless network, change the protocol to WPA2 - if you've been using an unsecured wireless network, or for that matter WEP (which was compromised a few years ago), that could be another vector for network access.

Honestly, though, maybe the best thing to do is start changing passwords and admin information on all of your devices and online accounts/services - all the security hoops in the world won't work if someone has your passwords and account access information. Unless someone really wants to spy on you for reasons you haven't explained in this thread, it sounds like someone simply got ahold of your passwords and is using them to collect information for identity theft - it might not be a bad idea to pull a credit report.

uberamd
Aug 7, 2009, 03:03 PM
The freaky thing is this person actually was able to track everything I did on my cellphone using my AT&T 3G connection.

So you mean to tell me that he can view what you are doing on your computer, AND on your iPhone? That makes no sense at all.

As someone who knows networking fairly well, what you are describing seems very hard to believe. Are you a software pirate? Have you installed illegal software that might have a trojan?

Does this person have physical access to your house? Hardware firewalls such as the easy to setup Smoothwall allow for AIM conversation logging, data use logging, and more.

This whole thing just seems fishy. You did a clean install, and yet this person still can see everything you are doing. Clearly, you are compromising your system somehow if this is really the case. This has nothing to do with the OS, and I am directly pointing my finger at you, the end user.

Tallest Skil
Aug 7, 2009, 03:06 PM
I just installed Norton Internet Security 4, should that work?

No. Norton is useless. A fingerprint can be lifted off of a fingerprint scanner. The OS is not at fault. You are.

corbywan
Aug 7, 2009, 03:56 PM
Just to clarify, when you refer to your AT&T 3G connection, are you referring to an iPhone, or simply a 3G phone that's on AT&Ts network. You mentioned tethering which isn't (legitimately) available for the iPhone yet. Are you tethering to a Nokia (or whatever) or a hacked iPhone? That would be an important distinction.

thiagos
Aug 7, 2009, 04:23 PM
So you mean to tell me that he can view what you are doing on your computer, AND on your iPhone? That makes no sense at all.

As someone who knows networking fairly well, what you are describing seems very hard to believe. Are you a software pirate? Have you installed illegal software that might have a trojan?

Does this person have physical access to your house? Hardware firewalls such as the easy to setup Smoothwall allow for AIM conversation logging, data use logging, and more.

This whole thing just seems fishy. You did a clean install, and yet this person still can see everything you are doing. Clearly, you are compromising your system somehow if this is really the case. This has nothing to do with the OS, and I am directly pointing my finger at you, the end user.

No everything I buy i legit, I don't download illegal programs... I have hired a computer guru here in NYC, he is coming tomorrow, I will find out exactly what happened....Thank you for all your help...

cantthinkofone
Aug 7, 2009, 05:01 PM
Does this person work here?

http://upload.wikimedia.org/wikipedia/commons/e/e1/CIA_New_HQ_Entrance.jpg

I think so...:cool:

I was going to ask where that was but then i saw the wiki link when i quoted you :p

I would change all your passwords, router, laptop, AIM, facebook, etc etc from another computer outside your network. Unplug your DSL or cable modem when your change your router and laptop passwords.

How do you know this person? Is he or she bigger than you?

Phil A.
Aug 7, 2009, 05:02 PM
I notice you said your wireless network is WEP protected. That in itself is a massive security risk as it takes about 45 minutes at most to brute force a WEP password and connect to your wireless network. It could be that this person has a snooping device connected to your network that is relaying everything that happens back to them (although that doesn't explain the iPhone when not connected via WiFi)
I would recommend you change the security on your wireless router to WPA straight away and then have a look for physical bugs around your computer (Such as hidden cameras, etc)

I think the big question though is why is this person doing this to you? It's almost certainly illegal and if it continues, I'd go to the authorities...

Gelfin
Aug 7, 2009, 05:08 PM
this is a bit new lol.. have you tried changing the network password? dunno if thats been suggested yet.. you could also try using a different type of encryption no? as opposed to WPA, try 128-HEX WEP. Just pushing ideas around.

PTP

"Somebody's cut a duplicate of your housekey. Have you tried changing the lock? You could also try using a different type of security mechanism. As opposed to a deadbolt, try taping some tissue paper over the doorway. Just pushing ideas around."

No one should ever use WEP these days. No one should have used it to begin with, but there's hardly any excuse now.

Incidentally, state of the art in attacks demands a very strong password even for WPA2. Attackers can observe a single handshake (which they can force by spoofing a disconnect) and acquire enough information to perform an offline dictionary attack to recover your password. If your password cannot be guessed in reasonable time then WPA2 is currently secure.

Feel free to use Keychain Access to generate and/or evaluate your password. On Leopard, use File/New Password Item… and click the button with the key icon on the right side of the password field to access the Password Assistant. You can generally trust the password strength feedback Keychain Access provides. Provided you are not compromised in some other way, such as a keylogger, an "Excellent" password should be uncrackable without an effort that is asymptotic to impossible.

angelwatt
Aug 7, 2009, 05:31 PM
You can encrypt all of your network traffic for web browsing. Life Hacker provides a write describing how. (http://lifehacker.com/237227/geek-to-live--encrypt-your-web-browsing-session-with-an-ssh-socks-proxy) Adium supports encryption as well through Off-the-Record Messaging. Doing this should reduce the possibility of network snooping.

Billy Boo Bob
Aug 7, 2009, 09:16 PM
I didn't know little snitch did that, I might as well buy it... I know my history stays saved somewhere for months. So I am not sure if the person is actually getting into my computer or not, he can go and see everything I've done for months...

Little Snitch will alert you when any program or process wants to make a connection to the outside. When you first install it there will be a bunch of things popping up that are normal, like apps checking for updates when you launch them, and if you use MobileMe there'll be a bunch related to that.

Some will come up that actually are normal, but will look foreign to you. In your case you may end up spending some time in Google finding out what certain process names are that are trying to connect to make sure if they're legit or not. But maybe you'll come across, in those searches, the key to this clown's trickery. That is, IF the data's getting to him from your Mac and not (as mentioned possibly) the network.

foshizzle
Aug 7, 2009, 10:43 PM
what about when you use your computer on another network? Do you still have the issue? If not, try calling your ISP and having them give you a new public IP. Then restore your time capsule to default settings (do it from another computer) and assign a new WPA2 password, with lower/upper/numbers/special chars. Set it up so that your internal IP addresses are not 192.168.x.x, but instead 10.0.x.x or something else. This can be done in the internet tab, DHCP.

Do the above if you're worried that he has your IP address. If you've already wiped and reinstalled (turned on firewall im assuming) then i cant think of what else it'd be. Make sure nothing is open on your machine, like SSH or VNC.

scottintosh
Aug 8, 2009, 01:42 AM
When you use WPA encryption you should use a super random password. https://www.grc.com/passwords.htm

Any password you use should ideally be very random though.

Furi Kuri
Aug 8, 2009, 02:38 AM
This whole thing is incredibly hard to believe...

chrono1081
Aug 8, 2009, 11:16 AM
If this whole thing is true it sounds simply like someone is sniffing your network.

Just for fun I set up some programs I downloaded that sniffed my home network. I sat horrified watching passwords, IM's, websites etc scroll through this program. Worst of all the program was free and readily available online! (Not going to mention it here I dont know if that goes against forum rules)

cbblucky
Aug 8, 2009, 06:55 PM
Maybe, I m just guessing, he just know all of ur passwards, if all ur passward are all the same. Let say msn, facebook, etc...
Therefore he can log in as u and view all ur activities logged in as u.
And he migh somehow use that and install whatever program on to ur mac.
Just guessing here

Les Kern
Aug 8, 2009, 07:12 PM
This whole thing is incredibly hard to believe...

I too, smell fish.
My first thought was "this guy has no idea what he's even looking at". My second is more fishy smelling. But I am enjoying all the "help" for a "problem" that keeps evolving. :)

killerrobot
Aug 8, 2009, 07:41 PM
I've figured it out.

The op has schizophrenia.
cue music
dum dum dum...
/music
:eek:

thibaulthalpern
Aug 8, 2009, 08:45 PM
I didn't know little snitch did that, I might as well buy it... I know my history stays saved somewhere for months. So I am not sure if the person is actually getting into my computer or not, he can go and see everything I've done for months...

From this very comment of yours (see aboe), I will 95% bet that you are actually NOT THAT SAVVY of a computer user. You are indicating that you do not know where Safari stores its history and further more you are implying that you do not know how to erase your web history.

Now, don't get offended, and allow me to explain first by giving you a little background of myself and my background is nothing that spectacular.

I would consider myself a power user of Macs but certainly not a programmer and certainly not a hacker because even if I wanted to hack I wouldn't really know how. But, I am a savvy user of Macs and know enough about firewalls, routers, caches, Time Machine, networks and so forth to give myself fairly good protection.

Your comment indicates that you don't know how to erase your web browser history and you don't know too much about where OS X stores things. And, there is a chance that you have left some setting open (VNC? SSH Remote access? etc) without knowing it. Any power user would know how to check to see that the basics are locked and that web browser history is erased and caches deleted too.

Given all of this, I would suggest you one thing and do it quickly: ask a knowledgeable tech friend to come to your house and help you lock down everything securely or turn things off or on (firewall, VNC, Apple Desktop remote, etc.) and reset all passwords of your router, network, OS X user passwords, OS X master passwords, etc. etc. I wouldn't trust yourself to know what you're fully doing and it is possible one lapse in protocol has led to this stranger knowing everything you're doing on your computer.

One other thing: it is possible that this person has gained entry to your house and has set up a hidden camera somewhere to track your computer usage etc.

Peace
Aug 8, 2009, 08:49 PM
This whole thing is a load of crap. A complete waste of time,a fantasy for someone and a waste of internet ink.

thibaulthalpern
Aug 8, 2009, 08:51 PM
I'm really curious to see the conclusion to this story.

I'm betting 95% chance or even 99% chance that the original poster is, unfortunately, not as savvy about computers as he or she makes himself or herself to be.

thibaulthalpern
Aug 8, 2009, 08:51 PM
This whole thing is a load of crap. A complete waste of time,a fantasy for someone and a waste of internet ink.

This is another possibility where we the readers are the ones being duped. That's another great possibility.

OttawaGuy
Aug 8, 2009, 08:52 PM
This thread would be a useful tool to help someone find out how to do what the OP is complaining about.

MikhailT
Aug 8, 2009, 09:01 PM
This thread would be a useful tool to help someone find out how to do what the OP is complaining about.

It's not that hard.

Sniffing an internal network is not even that hard. Just connect to that wireless router, have wireshark running and it'll see all the traffic going in that network. A lot of stuff are sent in clear text, including user/passwords. There are tools like nmap, netcat, backtrack, helis and so on that can do many of the things that the OP is complaining about.

kellen
Aug 8, 2009, 10:06 PM
Sounds like the person who is doing this to you is has some small information and is making it sound like they are some extreme hacker.

Let us know what the computer expert says though.

MKSinSA
Aug 8, 2009, 10:21 PM
... the person is able to see the passwords I type, the websites I visit, my adium chats, my facebook personal emails (not wall posts). I don't know what happened with the 3G phone thing but I know I did connect the phone to my computer, I turned off wireless and I did a 3G tether but the person was still able to track my every move. ...

I don't know where you live or how your computer room is set up, but try thinking outside the box here. Check to see if there is a spy camera of some sort in the room. This person might have put one there while visiting your residence (or had a mutual friend do it) and is seeing everything from outside the computer ... which might account for him being able to track your non-computer activities.

Cheers! :confused:

thiagos
Aug 9, 2009, 12:10 AM
I too, smell fish.
My first thought was "this guy has no idea what he's even looking at". My second is more fishy smelling. But I am enjoying all the "help" for a "problem" that keeps evolving. :)

Why would I make something like this up? Just because none of you know the answer to my problem, does not mean that it does not exist.
No one knows my passwords because I changed them 3 times in the past 3 weeks. I am not that stupid to not change my passwords after my accounts have been hacked. The problem is here that I know I take every precaution there is, I know there has to be something else besides keyloggers but by asking for help, all I get are people who tend to change the subject to their personal complaints. Please stick to the subject, if you don't know the answer, don't reply. All the people who are trying to be helpful with ideas, I truly appreciate your input.
Thank you.

Furi Kuri
Aug 9, 2009, 12:59 AM
Well the reason I find it so hard to believe is this

The freaky thing is this person actually was able to track everything I did on my cellphone using my AT&T 3G connection.

But anyway, what did your computer expert say?

thiagos
Aug 9, 2009, 01:25 AM
Well the reason I find it so hard to believe is this


But anyway, what did your computer expert say?

He said that there were no keyloggers installed in my computer, that's all I got out of him, he said he wasn't a network expert. Told me to reset my router (which I had done before) and to call Time Warner and ask them to change my IP Address but since it is static, they said for me to turn off my modem and that should do it. Let's see what happens now...
Well the only thing I could really think of my 3g connection issue is that I was tethering from my iPhone using my laptop (for those of you who say it is not possible, it is) and I went to those websites using my laptop instead of wifi.
Maybe somehow after I logged in my wifi the info transfered to the person who is hacking my computer.

To be honest with you I am as lost as all of you are but from all the 7 pass erase I have done, installing the OS as a fresh install, I know it is not a keylogger unless it is being installed through my wifi while I am using the internet... I don't know what else to think...

cbblucky
Aug 9, 2009, 07:36 AM
Why would I make something like this up? Just because none of you know the answer to my problem, does not mean that it does not exist.
No one knows my passwords because I changed them 3 times in the past 3 weeks. I am not that stupid to not change my passwords after my accounts have been hacked. The problem is here that I know I take every precaution there is, I know there has to be something else besides keyloggers but by asking for help, all I get are people who tend to change the subject to their personal complaints. Please stick to the subject, if you don't know the answer, don't reply. All the people who are trying to be helpful with ideas, I truly appreciate your input.
Thank you.

how about taking legal steps?? we are all here trying to help you, if we can't provide enough info, dont be mad ok??

xlii
Aug 9, 2009, 08:03 AM
This person has proved to you they can monitor your every move on your computer. You know who this person is. You know where they work. Why don't you just ask this person to show you how they do it? Ask them the name of the software they use... ask them the details... tell them they are so smart... Ask how you can prevent his seeing your every computer move.

Of course if they are monitoring your every computer move... they know you have opened this thread on macrumors and are asking for help. He might not like that.

PS: Where do they work? Why the mystery? If they are doing this from their workplace that is a violation of their companies policies. Contact their company and tell them what is going on. That guy will be fired so quick. If he can do this to you... his company can monitor his every move. Time for you to get smart and fight back.

xlii
Aug 9, 2009, 08:27 AM
If you have even one email or voicemail from him, sent from his workplace, telling you that he is watching you... you've got him. That is harassment and you can take it to his company and the police. Tell them you want it stopped. If it isn't stopped, you can bring charges against the individual and sue the company because the company knew about it ( you just told them ) and did nothing to stop it.

Companies don't fool around with this stuff anymore. You send even one suggestive email or photo to someone else using the companies email or even gmail sent from their computers... that person will be fired.

What is this person's relationship to you? Former friend, boy friend / girlfriend? This kind of an obsession with you is not healthy. They sound very unstable.

If they can see your every move, they know you created this thread and they may create an account here and reply to you. Don't want to get you paranoid or nothing... just something to think about.

Tallest Skil
Aug 9, 2009, 08:36 AM
7 pass erase... ..installing the OS as a fresh install... ...not a keylogger... I don't know what else to think...

NOW it's impossible. Get Little Snitch, make sure there is no network traffic out that you don't know about, and don't LET anything out that isn't part of the OS.

If you come back here after all of this and say that things are still happening, you're either wrong or letting them into your house to see your computer.

wywern209
Aug 9, 2009, 02:30 PM
OP i have a suggestion, check ur room for bugs. check vents, imperfections in the walls etc. Also think about it. if u were going to place a bug in ur room somewhere, where would you put it. then check there. If worst comes to worst, get a cheap netbook and try using the network. if the "mastermind-hacker" still is able to get ur info from the netbook, then its a network problem.if there are still problems, PM me and send me the location and description of the guy that's hacking u. i shall "fix" the problem. :D

chown33
Aug 9, 2009, 02:46 PM
No one knows my passwords because I changed them 3 times in the past 3 weeks. I am not that stupid to not change my passwords after my accounts have been hacked.

If you changed your passwords using the compromised computer, then your new passwords are compromised. You have to assume that everything you do on or with the compromised computer will be visible to the attacker.

To be honest with you I am as lost as all of you are but from all the 7 pass erase I have done, ..

A 7-pass erase is useless. All it does is erase the unused areas of the disk. If you had deleted some files (or reinitialized the disk) and needed to make sure all deleted data was actually erased, then 7-pass erase would be useful. It does absolutely nothing to remove or disable any malware.

Chris.L
Aug 9, 2009, 05:52 PM
A 7-pass erase is useless. All it does is erase the unused areas of the disk. If you had deleted some files (or reinitialized the disk) and needed to make sure all deleted data was actually erased, then 7-pass erase would be useful. It does absolutely nothing to remove or disable any malware.

Clearly you misunderstand what a 7-pass erase is and should confirm your facts before trying to pass them on to someone else

Erase Option (http://support.apple.com/kb/TA24002)

If it's good enough for the DoD, it's good enough for you and me!:cool:

OP, clearly the guy doing this is a waste of space. If he is doing this from his employers computer/network/property, and it's not his job, tell him to knock it off, if he doesn't contact his employer. No job and criminal record! Bonus

Oh BTW, this whole thing sounds fake, you're more worried about fixing your computer, rather than fixing the guy doing it.

Anyway, that's enough fish for today...

MWPULSE
Aug 9, 2009, 06:23 PM
the plot, story and complexity thickens :s

hmmm

PTP

milk242
Aug 9, 2009, 07:30 PM
Maybe he's hijacking your DNS and whenever you go to website that you think are secure its actually a fake website setup for redirection and he gets your passwords and other information that way. That would make sense for him to tell you to reset your router.

You said he does this from work... he could have a computer near by sniffing your network.. If so I would try directly pluggin into your router via cable and turning off all your wireless settings in OSX and on your router.

ntrigue
Aug 9, 2009, 07:43 PM
Chuck Palanuik called he said you're Brad Pitt and Edward Norton.

Mac Kiwi
Aug 9, 2009, 10:17 PM
Sorry to go a bit Secret Squirrel here - Any hints on this dudes background/his computer abilities? {the hacker} Could he get hold of high end software that Joe average would definitely not be allowed to purchase......I mean like possible Gov secretive?

munkees
Aug 9, 2009, 10:50 PM
Does this person work here?

http://upload.wikimedia.org/wikipedia/commons/e/e1/CIA_New_HQ_Entrance.jpg

I think so...:cool:

what building is that

boast
Aug 9, 2009, 10:52 PM
what building is that

read the pics name. http://upload.wikimedia.org/wikipedia/commons/e/e1/CIA_New_HQ_Entrance.jpg

killerrobot
Aug 10, 2009, 02:29 AM
read the pics name. http://upload.wikimedia.org/wikipedia/commons/e/e1/CIA_New_HQ_Entrance.jpg

LOL. I knew that because I watch American Dad, not because of the pics name.:D

chappy87
Aug 10, 2009, 12:32 PM
I would really love to know what's going on here, it sounds absolutely mental!

boast
Aug 10, 2009, 01:09 PM
I'm curious about the iphone bit. Has he found a simple way to crack the KASUMI crypto?

rdowns
Aug 10, 2009, 01:33 PM
Surprised no one has suggested the obvious.



http://mattnelsoninfo.files.wordpress.com/2008/04/ceiling_cat1.jpg

surripere
Aug 10, 2009, 08:03 PM
Ah, macrumors. Sweet, naive, gullible macrumors.

Yeah, my first means of attacking this "problem" would be to post about it on an apple rumors forum. That makes sense. OP, if this is true, what the hell are you still doing farting around on the interwebs and not filing a police report? If you're not taking the forum for a ride, you definitely seem like the type that might be easily taken.

MWPULSE
Aug 10, 2009, 09:04 PM
Ah, macrumors. Sweet, naive, gullible macrumors.

Yeah, my first means of attacking this "problem" would be to post about it on an apple rumors forum. That makes sense. OP, if this is true, what the hell are you still doing farting around on the interwebs and not filing a police report? If you're not taking the forum for a ride, you definitely seem like the type that might be easily taken.

yea.. OP sort it out mate, we would quite like to help ya, but we can only be of so much assistance.. Whats gonna happen? its like an episode of eastenders, or lost or sommat! lol :p

PTP

killerrobot
Aug 10, 2009, 09:15 PM
Surprised no one has suggested the obvious.


Aaarrrggghhh ... ceiling cat is blackmailing me with a vid he's threatening to post on youtube.

That pic's freaking hilarious.