There's a bug in Apple's most recent operating system

Lemi Orhan Ergin

In a statement, Apple said it was "working on a software update to address this issue".

So people could replicate this login bypass method Ergin went on to explain that you can access the root login dialogue via System Preferences Users & Groups and then click the lock to make changes.

Apple is actively looking at a fix for the security flaw in its OS but meanwhile it has issued an advisory, or workaround.

Yesterday it emerged it was possible for gain administrator privileges simply by typing the word "root" into user field and hitting login multiple times.

Lemi Orhan Ergin
Lemi Orhan Ergin @lemiorhan

Apple has released a step-by-step support guide to enable password protection on the root user. But considering the fast uptake when it comes to Apple's latest operating systems, we're looking at a majority of vulnerable users who may have already jumped onto High Sierra.

The security flaw affected all Mac devices running the latest version of High Sierra (at least version 10.13.1 - 17B48), according to TechCrunch. That quick reaction time is reassuring, much as I'm sure many developers, testers, and deployment teams at Apple had a truly bad day yesterday. Wardle believes that this bug could be used by an attacker in a multistage attack. It also notes how to set a root password to protect your computer in the meantime. By sending the tweet, I just wanted to warn Apple and say "there is a serious security issue in High Sierra, be aware of it and fix it".

For reasons that aren't yet clear, you could trick macOS into letting you authenticate as root - the all-powerful system administration account that you aren't even supposed to use - with a password of...

Several experts have lambasted Apple for allowing the vulnerability in the first place.

Читайте также: Merkel rules out new elections for Germany; coalition deadlock continues

In a statment, the firm said: "Security is a top priority for every Apple product, and regrettably we stumbled with this release of macOS".

Dear @AppleSupport please immediately close the vulnerability in "High Sierra".

The flaw has since been closed by Apple with an update released Wednesday morning.

При любом использовании материалов сайта и дочерних проектов, гиперссылка на обязательна.
«» 2007 - 2017 Copyright.
Автоматизированное извлечение информации сайта запрещено.

Код для вставки в блог

Related:

  • Greta Gerwig's directorial debut Lady Bird is breaking Rotten Tomatoes

    Greta Gerwig's directorial debut Lady Bird is breaking Rotten Tomatoes

    Director Greta Gerwig's solo directorial debut has a ideal 100 percent score on Rotten Tomatoes with 170 reviews, and counting. Gerwig added that the cast and crew are "using the tomato emoji more than [they] ever thought possible".

    Smartphones sales break all record on Black Friday: Adobe

    Earlier on Friday, Macy's CEO Jeff Gennette told The Associated Press said he was pleased with the kickoff to the season. And apparently those looking for online doorbusters started their shopping spree on Thanksgiving evening.
    Rockin' around the Christmas tree stand

    Rockin' around the Christmas tree stand

    If the base of the tree does dry out and seal up, you will have to re-cut the base to allow it to absorb sufficient water. Another drawback is that their needles are very sharp - this is not a good selection for homes with small children.
  • Harvey Weinstein accused of alleged sex trafficking in new lawsuit

    Harvey Weinstein accused of alleged sex trafficking in new lawsuit

    The civil suit claims the film producer violated US federal trafficking laws during the incident in Cannes back in 2014. Harvey Weinstein's spokesman Holly Baird said: "Mr Weinstein denies allegations of non-consensual sex".
    Trump Reportedly Suggests the 'Access Hollywood' Tape Was Fake

    Trump Reportedly Suggests the 'Access Hollywood' Tape Was Fake

    Certainly I'm not proud of it. "I think if anything that the President questions, it's the media's reporting on that accuracy". He apologized for the vulgarity calling it simply " locker room talk ". "The last thing we need in Alabama and the U.S.
    Miss Universe 2017: Miss South Africa receives the crown

    Miss Universe 2017: Miss South Africa receives the crown

    When Graham asked Peters how she felt about her reception, the 26-year-old model said: "I was a little nervous". She was crowned after beating 91 other contestants from all over the world.
  • Ben Stokes in talks with Canterbury over playing domestic New Zealand cricket

    Ben Stokes in talks with Canterbury over playing domestic New Zealand cricket

    This does mean that the 26-year-old will be only four hours from the England squad when they play the Second Test in Adelaide. European Central Bank confirm aware Ben Stokes on his way to New Zealand to see family.
    Sony Xperia X Performance now receiving Android Oreo update

    Sony Xperia X Performance now receiving Android Oreo update

    If you are using a Xperia XZ or XZs device you can go to settings, about the phone and check for software update. Besides, he also said that the Oreo update for HTC 10 , U11 Life and Ultra will be rolled out soon.
    High school teacher caught on camera doing cocaine in classroom

    High school teacher caught on camera doing cocaine in classroom

    Dyer Police Chief David Hein said in a statement that the Dyer Police Department K-9 narcotics unit was requested to assist St. One of the videos appears to show a woman - later identified as Cox - being escorted out of the building by police.
  • Project Veritas founder James O'Keefe to speak at SMU

    Project Veritas founder James O'Keefe to speak at SMU

    Moore before they posted a groundbreaking article earlier this month: They checked it out. The Post staff did the same thing it did with previous claims made by women about Mr.
    YouTube removes ads from 2 million inappropriate children's videos

    YouTube removes ads from 2 million inappropriate children's videos

    If you don't know, YouTube Go is a lightweight version of the YouTube with more features such as video downloading and more. In related news, Google has also released an updated version of Duo video chat application in Google Play .
    Meredith Corp. acquires Time Inc. in $2.8 billion Koch-backed deal

    Meredith Corp. acquires Time Inc. in $2.8 billion Koch-backed deal

    Meredith will pay $18.50 per share in cash for Time's almost 100 million outstanding shares. Meredith will pay $18.50 per share of the publicly traded Time Inc .

Comments

Latest news

Uber breach affected 2.7 million Britons
It has also placed an information page within the Accounts and Payment Options menu within the Help section of the Uber app. IL is suing Uber over a year-old data breach that affected millions of users and drivers, NBC Chicago reported .

'Jersey Shore' cast reuniting for new series
This, for sure, will bring fans a trip down memory lane as their favorite reality stars will be once again reunited. There's no news yet about why Sammi "Sweetheart" Giancola's name has been left off the cast list.

Victor Moses Needs Time To Rebuild Fitness - Antonio Conte
Since then, he's trained alone, been left out of the squad for the home game against Manchester United and has been on the bench for the trips to West Brom and Liverpool .

LeBron James shades Grizzlies for firing David Fizdale
Fizdale was fined $30,000 by the National Basketball Association for a rant over officiating after a loss in Game 2. Fizdale has recorded a 50-51 mark since being named the 13th head coach in franchise history on May 29, 2016.

Jay-Z, Kendrick Lamar lead Grammy noms
Those voting members, who number around 13,000, are "professionals who listen objectively to music and make a judgment", he added. Record Of The YearRedbone, Childish Gambino Despacito , Luis Fonsi & Daddy Yankee Featuring Justin Bieber The Story Of O.J.

At The GES Summit Ivanka Trump Heaps Praises On India, PM Modi
In many countries, women are not allowed to own property, travel freely or work without the consent of their husbands, Trump said. Now her company, Terra Blue, aims to make specialty healthcare accessible in even the most remote places in India.

The 2017 White House Christmas Decorations
But Melania Trump's vision didn't quite capture the traditional holiday spirit she was hoping for, according to Twitter . President Donald Trump's third wife has decorated the White House for the holidays, The Hill reported Monday morning.

Uber-Waymo trial delayed as USA judge raises prospect of 'cover-up'
District Judge William Alsup described the allegations that surfaced in a Justice Department investigation as "scandalous". The trial was originally scheduled to begin on December 4, but Waymo filed a last-minute motion to postpone on Monday.

Miss Universe Falls to Second-Lowest Numbers Ever in the Ratings
She had come up just short of the honour in 2014 and persevered despite chatter in some corners that she should give up. The Miss Universe Organization implemented a new mechanics for the coronation event, selecting the top 16 per continent.

Here's How Much Meghan Markle's Engagement Ring Is Worth, According to Experts
The pair dated for almost a year and their wedding will occur sometime in the spring of 2018, royal officials announced. Ms Markle said: "Not being able to meet his mother, it's so important to me to know that she's a part of this with us".

Two injured, reports of shots fired at NY mall
Shoppers were evacuated from a bustling mall in Middletown, New York, Sunday after reports of shots fired, CBS New York reports . We will continue to follow this story and provide updated as they become available.

CNN Set Itself Up for Trump's Weekend Attack — WashPost
Since the tape's publication, Trump has been accused of sexual assault by several women, NY magazine reports. President Donald Trump continues to go after media outlets that aren't Fox News.

Donald Trump on Ivanka's Roy Moore response: 'Do you believe this?'
John Conyers, two powerful congressional Democrats who have been snared in the national dragnet of sex abuse claims. In the wake of the allegations, Republican leaders scrambled to find a way to block Mr Moore as a candidate.

Tennessee finalizing deal with Greg Schiano to become head coach
This hire likely won't do much to inspire a fan base in Knoxville that has not had a lot to cheer about recently. Tennessee fired Butch Jones on November 12 after they dropped to 0-6 in SEC play.

Aqib Talib, Michael Crabtree Ejected After Brawl Between Raiders and Broncos
After Crabtree threw a punch at Talib, a whole bunch of Raiders and Broncos players started going at it on the sideline. We remember Talib acting like Deebo from "Friday" and snatching Crabtree's chain during a game last season.

Other news