Friday, 15 December, 2017

Apple Mac Software Has Login Flaw That Puts Data at Risk

Enlarge ImageA demonstration of the security flaw.                  CNET Enlarge ImageA demonstration of the security flaw. CNET
Garry Little | 29 November, 2017, 00:56

A bug in the latest versions of macOS High Sierra allows users to create a root account with no password by repeatedly pressing a button in the preferences panel.

All you need to do to login is go to the login screen, type "root", leave the password box blank, and try to login.

The issue was first discovered by software developer Lemi Ergin and appears to plague MacOS High Sierra.

It gets worse. You can use this programming blunder to disable FileVault. For affected machines, a person can login to the administrator account by simply entering "root" as the username with no password.

We can confirm the bug is present in macOS 10.13.1 and for anyone with a Mac in a public office space, you are urged to fix this by yourself, immediately. Apple is aware of the bug and working on a patch.

Security issues with your products are never a good thing and when you have a user publically Tweet about one, it makes you move.

Currently, there is no official fix from Apple regarding the issue. Edward Snowden, a key voice in the information security community after being the center of many years of National Security Agency leaks, commented on the disclosure.

The exploit can be run in System Preferences. However, there is a workaround that will provide users with some additional security to prevent against unauthorized logins: users can enable a root account that requires a password to gain access. After pressing Enter, they'll be logged in with full system administrator privileges.

Click "Open Directory Utility" and a new window will open. This will prompt for a password for the Root user account.

Now click Edit Enable Root User in the menu bar.

Recommended

  • Epic Sues Fortnite Cheat, Now Dealing With Angry Mother

    Epic Sues Fortnite Cheat, Now Dealing With Angry Mother

    One of the main ones is that the company is trying to use her son and others as scapegoats instead of focusing on stopping cheaters.
    Avengers: Infinity War Directors May Be Teasing Trailer Release

    Avengers: Infinity War Directors May Be Teasing Trailer Release

    The movie debuts May 4, 2018 , to be followed by a fourth - and for some heroes, final - Avengers movie in 2019. We've all been wondering and we've all been asking, but the Avengers: Infinity War trailer comes out tomorrow.
    YouTube goes after child-exploiting channels and videos

    YouTube goes after child-exploiting channels and videos

    Now, in a mad-scramble to avoid yet another major advertiser fallout, YouTube has once again demonetized videos on its platform. Marketers that have frozen spending on YouTube over the issue include Adidas, Deutsche Bank, HP, Mars, Diageo and Cadbury.
  • Stokes to play for Canterbury?

    Stokes to play for Canterbury?

    There was widespread speculation on social media that he was heading to Australia after being pictured at the airport on Monday. New Zealand Cricket spokesman Richard Boock said his organization "has yet to receive a formal request regarding Ben Stokes ".
    Melania Trump unveils White House Christmas decorations to mixed reviews

    Melania Trump unveils White House Christmas decorations to mixed reviews

    The standout feature, however, would have to be the 160-kilogram gingerbread house in the State Dining Room of the White House . A mistletoe hangs over the doorway going from the Green Room into the Blue Room at the White House .
    Memphis Grizzlies' Marc Gasol was 'hurt' by benching in fourth quarter

    Memphis Grizzlies' Marc Gasol was 'hurt' by benching in fourth quarter

    Memphis is 7-12 after losing to the lowly Brooklyn Nets on Monday (AEDT) in a game which saw Gasol benched in the fourth quarter. Last season under Fizdale, the Grizzlies went 43-39 and reached the playoffs before falling to the San Antonio Spurs .
  • Tiger Woods Talks Recovery from Back Surgery, Says This Comeback Is 'Different'

    Tiger Woods Talks Recovery from Back Surgery, Says This Comeback Is 'Different'

    Woods underwent a fourth operation on his back earlier this year and he will now host his own tournament in the Bahamas this weekend.
    Clippers forward Blake Griffin down with injury yet again

    Clippers forward Blake Griffin down with injury yet again

    And this is a team that asks Griffin to play an enormous role and that will find his skill set hard to replicate. However, after the holiday break for the Lakers , they should have had a lot more energy on the defensive end.
    Wilton Speight will transfer from MI

    Wilton Speight will transfer from MI

    MI knows who won't be their starting quarterback next season. "Four years later I leave a Michigan Man". Speight passed for 3,192 yards, 22 touchdowns and 10 interceptions during his MI career.
  • Waymo-Uber trial delayed over new evidence

    Waymo-Uber trial delayed over new evidence

    The ride-hailing service is the most valuable private US company, but its aggressive expansion has been dogged by scandals. District Judge William Alsup said he takes Jacobs' testimony seriously because prosecutors believe it to be credible.
    Barrett wins back-to-back Player of Year awards

    Barrett wins back-to-back Player of Year awards

    Sir Clive commented: "The team winning the Team of the Year award shows how good our it is and honestly they make me look good". Steve Hansen, crowned Coach of the Year four times in the past five years, was beaten to the honor by England boss Eddie Jones.
    United Kingdom  gov launches 'industrial strategy', including auto sector

    United Kingdom gov launches 'industrial strategy', including auto sector

    The UK government also revealed its industrial strategy today, outlining a long-term plan to boost the economy. This could mean an extra £80bn investment in advanced technology, according to government estimates.

A couple area natives nominated for 60th annual Grammy Awards A couple area natives nominated for 60th annual Grammy Awards At the 2017 awards, for example, the awards were criticized when Adele beat Beyoncé for all three top trophies. The album's title track and "The Story of O.J." songs were nominated in song and record of the year .

Arsenal legend fears Ozil's move to Manchester United Arsenal legend fears Ozil's move to Manchester United The German worldwide is inside the final year of his Gunners contract at present, and is strongly linked with the exit door. Will they stay longer? They then host Manchester United on Saturday, a fixture on which Wenger said he now has "zero eyes".

Conservative Group Linked to Woman Who Falsely Accused Moore Conservative Group Linked to Woman Who Falsely Accused Moore McCrummen asked Phillips to "explain" the GoFundMe campaign, and told her she was being "recorded and video recorded". That information shows Phillips says she worked as a loan partner at NFM Lending in Smyrna for a few months in 2016.