Apple’s macOS High Sierra Security Flaw root access without password !

jimmyk
jimmyk
@jimmy
7 years ago
514 posts
APPLE users have noticed a troubling flaw in the company’s Mac operating system which lets people circumnavigate password protocols to gain access to the computer.

Raising alarming privacy concerns, it means anyone with physical access to your MacBook or iMac can create a phantom profile that won’t show up on real admin accounts if the machine is running the new High Sierra operating system.

In the device’s System Preferences, under Users & Groups, you can click on the lock and gain system administrator access by simply entering the username “root” and leaving the password blank. After hitting enter a few times it grants access. Once that is done, the trick can be used to log into the computer at any time.

http://www.news.com.au/technology/gadgets/apples-macos-high-sierra-has-a-simple-security-flaw-that-lets-anyone-log-into-your-mac/news-story/10000a4cd9e86defbaadd3ee643c1dce
updated by @jimmy: 02/28/18 11:27:40PM
brian
@brian
7 years ago
10,136 posts
a bad bug for sure, but also reinforces the idea that without physical security you can't have system security.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
jimmyk
jimmyk
@jimmy
7 years ago
514 posts
Very true.

Tags