It looks like you're using an Ad Blocker.

Please white-list or disable AboveTopSecret.com in your ad-blocking tool.

Thank you.

 

Some features of ATS will be disabled while you continue to use an ad-blocker.

 

Critical: Apple High Sierra ... root account have no password.

page: 1
7

log in

join
share:

posted on Nov, 28 2017 @ 03:12 PM
link   
For those who upgraded their Apple Computer to High Sierra you should set a password for root manually ("sudo passwd -u root"). As the time of this post High Sierra's root account have no password. This is a major security flaw. root access will allow anyone to access your computer with the highest level of privilege.

You can read more about it at The Register ,
9to5Mac and Business Insiders
edit on 28-11-2017 by joemoe because: (no reason given)




posted on Nov, 28 2017 @ 03:31 PM
link   
a reply to: joemoe

The root password?

"Holey fuk! We too hi, sum ting wong..."

(Let's not notice the Asian workers throwing themselves out of buildings while working to make this junk!)



posted on Nov, 28 2017 @ 03:49 PM
link   
If you are reading and thinking "what?", root is the the administrator account in Linux (and therefore Apple OS (Darwin?)) I may also have been a little too quick with my Apple joke....ahem!



posted on Nov, 28 2017 @ 04:05 PM
link   
Jebus! Now that is messed up!

I am halfway there to upgrading to the latest OS. Thanks for the warning.

History: Apple kicked Steve Jobs out back in the 90s (?? maybe late 80s). He went and founded NeXT Computers that ran on a version of UNIX that they called NEXTStep. After a few CEO iterations, Apple saw the error of its ways while floundering behind business machines like IBM and Toshiba. In the mid 1990's Jobs came back as CEO armed with his proven UNIX variant. The iMac was born and at its heart was NeXT's UNIX variant now called OS X.

Root is the highest privilege account in a UNIX system (some systems have a "god" account but that practice is frowned upon by sys admins). Not having a password allows one to execute commands without being asked permission!

Just wow!




posted on Nov, 28 2017 @ 05:16 PM
link   
a reply to: joemoe

Thankyou...


DISABLING GUEST USER ON MACOS HIGH SIERRA

Step 1 | Launch System Preferences

Step 2 | Select Users & Groups

Step 3 | Select Guest User

Step 4 | Uncheck Allow guests to log in to this computer

Back door closed NSA , ya creeps.



posted on Nov, 29 2017 @ 07:15 AM
link   

edit on 29-11-2017 by GreenGunther because: (no reason given)



posted on Nov, 30 2017 @ 09:20 AM
link   
a reply to: joemoe

At least they're on top of it.

Ap ple fixes macOS High Sierra security flaw


Apple released a security update Wednesday to fix a major bug that allowed anyone to bypass security protocols and act as a computer's administrator.

"Security is a top priority for every Apple product, and regrettably we stumbled with this release of macOS," a spokesperson for Apple said in a statement. "When our security engineers became aware of the issue Tuesday afternoon, we immediately began working on an update that closes the security hole."



new topics

top topics



 
7

log in

join