Horrifying macOS Bug Lets Anyone Become Admin With No Password

29 November, 2017, 01:05 | Author: Yolanda Murray
  • A Potential Software Bug Has Been Found On The Latest Apple OS System

Publicly posted to Twitter by Turkish software developer Lemi Orhan Ergin, the risky vulnerability lets anyone using a Mac running macOS 10.13 High Sierra get authenticated into a "System Administrator" account, giving them access to all sorts of private files.

The issue, discovered in the MacOS High Sierra operating system for laptops and desktops that was released in September, allows people to enter the word "root" when prompted for a username, and provide no password when logging on to the device. Apple is aware of the bug and working on a patch. If you have a root account enabled and a password for it set, the above blank password trick will not work. A spokesperson for Apple was not immediately available for comment.

Once someone has root access, there's basically no limitations to what they can do.

Melania Trump Never Thought He'd Win
This year’s official theme "Time-Honored Traditions", is meant to pay homage to over 200 years of White House holiday celebrations.

A user reported the issue earlier today, but initially it wasn't specified which version of Mac OS High Sierra was affected, what machines, or anything other than what the problem was.

A critical security flaw in Apple's latest version of macOS grants intruders access to your computer's settings and data without needing a password. It can also be used at the login screen of a locked Mac to unlock the machine and gain full administrative access.

For now, you can test your Mac by going to System Preferences, choosing Users & Groups then click the lock to make changes.

Miss Universe 2017: India loses, South Africa wins
Several media men also reacted to the Top 10 finish of the Bicolana beauty queen and why she did advance further. South Africa's Demi-Leigh Nel-Peters won the crown while Colombia's Laura González Ospina was first runner-up.

Published to Twitter on Tuesday by software engineer Lemi Orhan Ergin, the vulnerability is alarmingly straightforward.

Once in the "Join" menu, click on "Open Directory Utility".

Click the lock button, then enter your username and password when prompted. The flaw allows someone to create a kind of phantom profile, one that can log into the Mac with admin access, but it won't show up on an real admin accounts.

Trump administration asks Pakistan to re-arrest Hafiz Saeed
The United States on Friday expressed deep concerns over the release of banned Lashkar-e-Tayyiba (LeT) leader Hafiz Saeed from house arrest in Pakistan .

Recommended:

  • SI's parent company Time will be bought by Meredith

    SI's parent company Time will be bought by Meredith

    The primary focus of the Kochs' activism is free market economics, limited government, and lowered taxes. On Friday, Time shares closed at $16.90.
    No ban for petulant Lukaku after Bong kick

    No ban for petulant Lukaku after Bong kick

    United next visit Watford today, who are eighth in the league table after an impressive 3-0 win at Newcastle on Saturday. He accused United's home support of being "a bit soft" in some game this season but not, in his opinion, on Saturday.
    Sindhu loses to Tai in Hong Kong Open final

    Sindhu loses to Tai in Hong Kong Open final

    She has already won the India Open Super Series and South Korea Open Super Series. Marcus Fernaldi Gideon and Kevin Sanjaya Sukamuljo win the men's doubles title.
  • Florida gas prices poised to rise as OPEC considers production cuts

    Florida gas prices poised to rise as OPEC considers production cuts

    The lowest price in Miami-Dade was $2.33 at Marathon on South State Road 7 and Northwest 199th Street in Miami Gardens. This December drivers will not find significant savings at the gas pump but, AAA says, early 2018 looks promising.
    Tennesseans react to potential head coach shift to Greg Schiano

    Tennesseans react to potential head coach shift to Greg Schiano

    He had been out of coaching since 2013, after he was sacked by the Buccaneers following an 11-21 tenure in two seasons. Schiano spent the last two seasons a defensive coordinator at Ohio State , uniting with his old friend Urban Meyer .
    TIME says Trump is 'incorrect' on 'Person of the Year' award process

    TIME says Trump is 'incorrect' on 'Person of the Year' award process

    However, the publication turned down the President's claims, saying the award victor will only be declared on December 6. And it's a very important magazine, and I've been lucky enough to be on the cover many times this year - and last year.
  • Many Clients Claim Sex Abuse At Massage Envy Spas

    Many Clients Claim Sex Abuse At Massage Envy Spas

    Massage Envy , the nation's largest massage spa chain is facing allegations it ignored reports of sexual assault. Another woman in OR said that her massage therapist also sexually assaulted and ejaculated on her.
    CNN Slams Donald Trump Following His

    CNN Slams Donald Trump Following His "Fake News" Comment

    Some see the move as an effort to hand the network over to a conservative buyer, like Rupert Murdoch. From the looks of Trump's Twitter, it's been a busy weekend for the president. "That's yours.
    Tom Baker returns to Doctor Who role for newly-released episode

    Tom Baker returns to Doctor Who role for newly-released episode

    Filmed at the BBC Television Centre earlier this year on the set of the original Tardis from 1979, it combines... However, it will include footage of Baker as he is today, filmed using 1970s cameras.
  • United States  plane INTERCEPTED by fighter jet close to Russian border

    United States plane INTERCEPTED by fighter jet close to Russian border

    P-8A Poseidon aircraft over the Black Sea by crossing in front of it from right to left while engaging its afterburners. Martinez said the P-8A was " conducting a routine operation in worldwide airspace" at the time of the intercept.
    Amazon Debuts Sumerian To Help Developers Make VR, AR, 3D Apps

    Amazon Debuts Sumerian To Help Developers Make VR, AR, 3D Apps

    Amazon said Sumerian is available in preview starting today, accessible via its AWS Management Console. Additionally, if an app needs a map embedded, Amazon Sumerian supports location platform Mapbox.
    Best Black Friday US games deals

    Best Black Friday US games deals

    Unfortunately, Nintendo doesn't have as much Black Friday deals as Xbox, PlayStation, and PC but it has a fair amount. Amazon.com, for example, has plenty of great games deals, on disc copies and digital downloads.


Popular

Prince Harry and Meghan Markle to Wednesday at Windsor Castle
The bride-to-be will also become a United Kingdom citizen but the process could take a number of years. He said when she visited Buckingham Palace to meet the queen, "the corgis took to her straight away".

With Expectations Low, Retailers See Victory On Black Friday
But much depends on whether people are buying or just looking, and if they're buying things that aren't on sale as well. Online purchases continue to steal a bigger slice of the holiday shopping pie.

Christmas trees: real vs. fake
This article from Penn State Extension has some great tips on selection and care of Christmas trees . Make sure part of the trunk is cut off before you take it home.

Navy's stunning claim: Missing submarine crew 'may still be ALIVE'
Relatives of the crew had arrived at Mar de Plata on Monday, filled with an optimism that had all but disappeared by Friday. "It's a hard moment for all, but obviously, especially for the families of the 44 crew members".

Arsene Wenger: 'Arsenal back three remarkable against Burnley'
It was deja vu for the home side who were beaten by the Gunners in the dying seconds of the same fixture last season at Turf Moor. Arsene Wenger believes Arsenal will proceed with a renewed sense of confidence following their late 1-0 victory at Burnley .

Trump renews support for embattled Senate candidate
He repeated several times outside the White House that the GOP candidate has denied any wrongdoing. Trump told several aides "in the hours after" Ivanka Trump's comments, the Times reported.

Chip Kelly Finalizing Deal With UCLA To Be Next Head Coach
He won 12 games in each of his last three years with OR and went 10-3 in his first season with the school in 2009. The University of Florida had been pursuing Kelly, but the Gators chose to move in another direction this week.

See What Nigerians Did To Atiku Abubakar After His Defection From APC
The party said this on Friday in reaction to the resignation of the former vice president from the All Progressives Congres (APC). President to run for a second term".

Man accused of killing deputy charged with premeditated murder
Berak's probable cause conference has been scheduled at the District Court in Clarkston on December 4, at 9 a.m. A court-appointed attorney said Berak has a history of mental health problems and is under psychiatric care.

MI to start QB John O'Korn against No. 8 Ohio State
Barrett had different reactions to an incident that injured the Ohio State quarterback as he was warming up to enter the MI game. The Wolverines also finish the regular season without beating a team with a winning record.