Apple Mac Software Has Login Flaw That Puts Data at Risk

A bug in macOS High Sierra Read more hereApple

Without explaining what the actual bug is (we don't want to make it any easier for potential hackers than this already is, and you can find it on Twitter pretty easily), someone can login to a Mac by typing a word in the login field, leaving the password field blank, and attempting to log in several times.

Indeed, we tested this out on a Mac running 10.13.2 High Sierra - although it should work on the current 10.13.1 build - and it works quite easily. Root is a "superuser" account with read and write privileges over the entire system, including other user accounts. There are likely many more ways that someone taking advantage of the issue could wreak havoc on a Mac desktop or laptop. The company didn't immediately respond to a request for comment.

A bug in macOS High Sierra Read more hereReuters
A bug in macOS High Sierra Read more hereReuters

That's not all. If your Mac displays the name and password fields on the login window, instead of a list of users, you can also log into the entire Mac as root, without a password. Those running previous versions of MacOS including Sierra and Yosemite do not appear to be affected by the bug.

Until Apple releases a new version of the software or patches the flaw, users can fix the issue by assigning their own password to the root account. Lemi Orhan Ergin, the founder of Software Craftsmanship Turkey, discovered the security flaw and tweeted it out to Apple Support on Tuesday.

Читайте также: Man Utd striker Lukaku escapes ban after Bong ruck

The exploit can be run in System Preferences.

Go to System Preferences then click Users & Groups (or Accounts).

При любом использовании материалов сайта и дочерних проектов, гиперссылка на обязательна.
«» 2007 - 2017 Copyright.
Автоматизированное извлечение информации сайта запрещено.

Click the lock button, then enter your username and password when prompted. Click Login Options then click Join (or Edit). Users can prevent an attacker from exploiting a bug by creating a "root" account themselves and giving it a custom password. It's simple enough. Open up a Terminal (in the Spotlight search box just type "terminal") and type "sudo passwd root".

Код для вставки в блог

Related news:

Hot News

isis-killer-beheading-video-story-top Melania Trump Never Thought He'd Win
Ноя 29, 2017 - 01:09
Meanwhile, Donald Trump has sparked outrage at an event honouring Native American war veterans by using the term "Pocahontas". "The President, Barron, and I are very excited for our first Christmas in the White House ", she said in a statement .

isis-killer-beheading-video-story-top 180+ sexual assaults reported against spa chain Massage Envy
Ноя 29, 2017 - 01:06
Citing court records, BuzzFeed said "two of those women had tried to warn the spa about Deiter before Ingram had". Ingram is suing Massage Envy and taking other steps to make sure spa companies do the right thing.

isis-killer-beheading-video-story-top Meghan Markle Peace Out, 'Suits' ... I'm a Royal Now!!!
Ноя 29, 2017 - 01:04
The American actress, who will become a senior HRH on marrying into the royals, also intends to become a British citizen . Harry's great-grandparents, King George VI and Queen Elizabeth , the Queen Mother, are buried at the chapel.

isis-killer-beheading-video-story-top Purdue volleyball reacts to NCAA tournament draw
Ноя 28, 2017 - 01:18
The tournament's semifinals and finals will be held December 14 and 16 at the Sprint Center in Kansas City, Missouri. The victor of Friday's match between Kansas (22-7) and Missouri (20-11) faces the victor of Wichita State (28-3) vs.

isis-killer-beheading-video-story-top Idaho gas prices rise, delaying seasonal trends
Ноя 28, 2017 - 01:17
Gas prices in the region are volatile - increasing, stabilizing and decreasing - throughout the Great Lakes and Central states. The national average has gone up 37.6 cents since a year ago and is also up 3.5 cents since last month.

isis-killer-beheading-video-story-top European Union condemns Russian 'foreign agent' media law as 'threat'
Ноя 28, 2017 - 01:15
Russian officials have called the new legislation a "symmetrical response" to what they describe as US pressure on Russian media. Russian President Vladimir Putin passed a law that would designate global media outlets as foreign agents.

isis-killer-beheading-video-story-top Battle of top seeds as PV Sindhu faces Tai Tzu Ying
Ноя 27, 2017 - 01:53
But, Intanon fight-back was not enough as Sindhu eventually won the second game 21-17, thus wrapping up the match in 43 minutes. But a string of errors and a flawless display by Tai lead to Sindhu losing 5 straight points and the match itself.

isis-killer-beheading-video-story-top Pep Guardiola: "The Premier League is so tough"
Ноя 27, 2017 - 01:51
The win set a new club record of 11 consecutive league wins and Guardiola reckons his men showed the sort of spirit needed to be crowned champions next May.

isis-killer-beheading-video-story-top Jurgen Klopp Not Intrested In Catching Premier League Leaders Manchester City
Ноя 27, 2017 - 01:46
Lewis Dunk's 66th-minute own goal separated the teams, after Ashley Young's shot took a big deflection off the Seagulls defender and looped into the far corner of the net.

isis-killer-beheading-video-story-top Brawl in Oakland: Crabtree, Talib ejected from game after fight
Ноя 27, 2017 - 01:32
Oakland added another touchdown on a 1-yard run by Marshawn Lynch with 2:49 remaining in the first half. As players on both teams fought, Lynch walked back to the Raiders sideline with his arms in the air.

isis-killer-beheading-video-story-top Greg Schiano under fire from Tennessee fans: Politicians, coffee house, protestors object
Ноя 27, 2017 - 01:31
Currie reportedly targeted Mississippi State coach Dan Mullen before turning his attention to Schiano, according to reports. USA Today Sports first reported that Tennessee and Schiano were working to finalize a deal .

isis-killer-beheading-video-story-top A 38 Year Old Unfinished 'Doctor Who' Episode Finally Gets Completed
Ноя 27, 2017 - 01:24
My real life was really rather drab compared with the life of Doctor Who when we were making it". It will be his first return as the Time Lord since a brief cameo for Children in Need.

isis-killer-beheading-video-story-top Get the Best Nintendo Deals this Black Friday
Ноя 26, 2017 - 01:47
Once again, this slightly lower price will only be available for a very limited time with on Amazon's United Kingdom site. If you're looking to join the elite ranks of the 4K gaming club, perhaps this weekend would be a good time?

isis-killer-beheading-video-story-top Shimonek Rallies Texas Tech Past Texas
Ноя 26, 2017 - 01:34
Later in the 3rd quarter, Reggie Hemphill Mapps muffed a punt to give Texas Tech great field position again. Linebacker Naashon Hughes is one of the few seniors still left from the team that played in a bowl game.

isis-killer-beheading-video-story-top UP train derailment: Yogi announces Rs 2 lakh compensation
Ноя 26, 2017 - 01:30
Vasco da Gama Express: A Passenger Train derailed in Uttar Pradesh's Chitrakoot early this morning 4.20 am. Rail Minister Piyush Goyal has announced Rs 5 lakh compensation for the kin of the deceased.