Anyone can unlock your Mac by typing "root"

Post Reply
ttf_robcat2075
Posts: 0
Joined: Sat Mar 31, 2018 11:58 am

Anyone can unlock your Mac by typing "root"

Post by ttf_robcat2075 » Tue Nov 28, 2017 5:09 pm

Unbelievable oversight or most unhidden backdoor ever?

Anyone Can Hack MacOS High Sierra Just by Typing "Root"

QuoteAnyone who hits a prompt in High Sierra asking for a username and password before logging into a machine with multiple users, they can simply type "root" as a username, leave the password field blank, click "unlock" twice, and immediately gain full access.

In other words, the bug allows any rogue user that gets the slightest foothold on a target computer to gain the deepest level of access to a computer, known as "root" privileges.
Quote...however—and other researchers confirm—that it's possible to block the attack by either setting a password for the root user, or disabling root access altogether. If you've installed High Sierra and haven't set a root password or disabled root access, you should do it now.
ttf_Matt K
Posts: 0
Joined: Sat Mar 31, 2018 11:53 am

Anyone can unlock your Mac by typing "root"

Post by ttf_Matt K » Tue Nov 28, 2017 10:30 pm

Interesting. Mac is an UNIX and that's *sort of* the standard for other UNIX machines. Except when you setup those operating systems, normally you are required to set a password for root and cannot continue unless you set one or go through a mildly tedious process to disable the password. I've never even tried to not set a root password on any machine I've setup but I imagine if you went through the process, you'd end up with a 'null' password, and have the same 'bug' even though it is technically intended in that circumstance.
ttf_anonymous
Posts: 0
Joined: Thu Apr 05, 2018 10:09 pm

Anyone can unlock your Mac by typing "root"

Post by ttf_anonymous » Thu Nov 30, 2017 2:38 pm

It's already patched.
ttf_M.R.Tenor
Posts: 0
Joined: Sat Mar 31, 2018 12:01 pm

Anyone can unlock your Mac by typing "root"

Post by ttf_M.R.Tenor » Sat Dec 02, 2017 5:49 pm

Quote from: RabidDolphin on Nov 30, 2017, 02:38PMIt's already patched.

If everyone's done the updates...
ttf_Todd Jonz
Posts: 0
Joined: Sat Mar 31, 2018 11:53 am

Anyone can unlock your Mac by typing "root"

Post by ttf_Todd Jonz » Sun Dec 03, 2017 6:16 am


sudo passwd root
ttf_SilverBone
Posts: 0
Joined: Sat Mar 31, 2018 11:59 am

Anyone can unlock your Mac by typing "root"

Post by ttf_SilverBone » Sun Dec 03, 2017 10:08 pm

Quote from: Todd Jonz on Dec 03, 2017, 06:16AMsudo passwd root

Nooooooooooooo.............

sudo is supposed to be a secret reserved for computer high priests.

 Image
ttf_Todd Jonz
Posts: 0
Joined: Sat Mar 31, 2018 11:53 am

Anyone can unlock your Mac by typing "root"

Post by ttf_Todd Jonz » Mon Dec 04, 2017 7:59 am


robcat2075 writes:

> Unbelievable oversight or most unhidden backdoor ever?

Apple reached new heights of sheer sloppiness last week.  I suspect there were some personnel changes in Apple's release management group.  Let's review:

1. A bad macOS release goes out allowing anyone to login as root without a password.

2.  Apple releases a patch without adequate testing and unwisely decides to have Software Update install it on customer devices without user intervention.  The patch fixes the root login problem but breaks File Sharing.  Apple develops and releases yet another patch.

3.  A crash loop reported by numerous iOS 11.1.x users does not appear to affect 11.2 beta testers, so Apple decides to rush 12.2 out the door.  The release notes announce the availability of Apple Pay Cash (person-to-person transfers) but it doesn't work because the backend won't be turned on for another week.


ttf_BGuttman
Posts: 0
Joined: Sat Mar 31, 2018 12:15 pm

Anyone can unlock your Mac by typing "root"

Post by ttf_BGuttman » Mon Dec 04, 2017 8:04 am

Wonder if this applies to Linux as well...
ttf_Todd Jonz
Posts: 0
Joined: Sat Mar 31, 2018 11:53 am

Anyone can unlock your Mac by typing "root"

Post by ttf_Todd Jonz » Mon Dec 04, 2017 8:30 am


Bruce writes:

> Wonder if this applies to Linux as well.

No.



ttf_Driswood
Posts: 0
Joined: Sat Mar 31, 2018 12:00 pm

Anyone can unlock your Mac by typing "root"

Post by ttf_Driswood » Thu Jan 25, 2018 4:41 am

Another reason for me to stay with El Capitan.

Jerry Walker
ttf_Driswood
Posts: 0
Joined: Sat Mar 31, 2018 12:00 pm

Anyone can unlock your Mac by typing "root"

Post by ttf_Driswood » Thu Jan 25, 2018 4:41 am

Another reason for me to stay with El Capitan.

Jerry Walker
Post Reply

Return to “Technology”