You can access it via System Preferences>Users & Groups>Click the lock to make changes. Then use "root" with no password. And try it for several times. Result is unbelievable!pic.twitter.com/m11qrEvECs
Show this thread
Dear @AppleSupport, we noticed a *HUGE* security issue at MacOS High Sierra. Anyone can login as "root" with empty password after clicking on login button several times. Are you aware of it @Apple?
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Let's take a closer look at what's happening together. Send us a DM that includes your Mac model along with your macOS version. We'll meet up with you there.https://twitter.com/messages/compose?recipient_id=3309375033 …
-
I mean, the whole internet kinda wants to know now, so maybe meet us here?
- 4 more replies
New conversation -
-
-
Pretty sure
@Apple announced the OneClick BlankRoot feature during their macOS High Sierra reveal. Here is the clip from the WWDC 2017 Keynote:
pic.twitter.com/y2WSoXI6Hw - 3 more replies
New conversation -
-
sure, resetting SMC is exactly the user friendly fix we all expect from Apple.
-
Reset your expectations.
- 4 more replies
New conversation -
-
-
I fully support
@Apple suing you for this. Learn how to disclose security bugs before you call yourself a "Software Craftsman". -
Apple is going to sue someone for their own software flaws? That's rich. Exposing it publicly lights a fire under Apple, forcing them to prioritize a fix. Private disclosure lets them drag their feet.
- 19 more replies
New conversation -
-
-
Probably more effective if you had used their bug bounty program for reporting. Apple Support = tech support, not security vulnerability reporting: https://developer.apple.com/bug-reporting/
-
always go directly to the company via private channels before publicly disclosing massive vulnerabilities like this.
- 17 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.