Hash Fellow robcat2075 Posted November 29, 2017 Hash Fellow Share Posted November 29, 2017 Unbelievable oversight or most unhidden backdoor ever? Anyone Can Hack MacOS High Sierra Just by Typing "Root" Anyone who hits a prompt in High Sierra asking for a username and password before logging into a machine with multiple users, they can simply type "root" as a username, leave the password field blank, click "unlock" twice, and immediately gain full access. In other words, the bug allows any rogue user that gets the slightest foothold on a target computer to gain the deepest level of access to a computer, known as "root" privileges. ...howeverand other researchers confirmthat it's possible to block the attack by either setting a password for the root user, or disabling root access altogether. If you've installed High Sierra and haven't set a root password or disabled root access, you should do it now. Quote Link to comment Share on other sites More sharing options...
largento Posted November 29, 2017 Share Posted November 29, 2017 Yikes. I don't have High Sierra installed ...and come to think of it, I don't have multiple users, either. Still seems like something Apple needs to fix pronto. Quote Link to comment Share on other sites More sharing options...
nemyax Posted November 29, 2017 Share Posted November 29, 2017 What a royal screw-up. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.