Anyone can unlock your Mac by typing "root"

[robcat2075]

Unbelievable oversight or most unhidden backdoor ever?

 

Anyone Can Hack MacOS High Sierra Just by Typing "Root"

 

Anyone who hits a prompt in High Sierra asking for a username and password before logging into a machine with multiple users, they can simply type "root" as a username, leave the password field blank, click "unlock" twice, and immediately gain full access.

 

In other words, the bug allows any rogue user that gets the slightest foothold on a target computer to gain the deepest level of access to a computer, known as "root" privileges.

...howeverand other researchers confirmthat it's possible to block the attack by either setting a password for the root user, or disabling root access altogether. If you've installed High Sierra and haven't set a root password or disabled root access, you should do it now.

[largento]

Yikes. I don't have High Sierra installed ...and come to think of it, I don't have multiple users, either. Still seems like something Apple needs to fix pronto.

[nemyax]

What a royal screw-up.