Skip to main content

Posts

Showing posts with the label mac os high sierra bug

Apple flaw allows MacOS High Sierra logins without passwords

The latest version of Apple’s software has a glaring hole in it: You can log in with just the username "root." It turns out you don't need a password to log in to a locked Apple device using MacOS High Sierra -- just the username "root." By heading to your device's System Preferences, under Users & Groups, you can click on the lock and get hit with a prompt asking for a username and password to change settings. Then, instead of entering a password, you can type in "root" for the username and leave the password field empty. Demonstration After clicking unlock several times, it should eventually open up, no passwords necessary. Lemi Orhan Ergin, the founder of Software Craftsmanship Turkey, discovered the security flaw and tweeted it out to Apple Support on Tuesday. "We are working on a software update to address this issue," an Apple spokesperson said. "In the meantime, setting a root password prevents unauthorized access to your ...