Can not reproduce this
macos 10.13 bug isn't limited to root in all circumstances; via ARD, you can log in as any existing user (e.g. _applepay) and share the screen of the logged-in user. also _uucp is allowed to log in
-
-
-
interesting. which part? is "remote management" under "sharing" enabled? are you connecting via the ARD client (in the finder)?
End of conversation
New conversation -
-
-
only if you have allowed the guest user account. If you disable that, and you should, then none of this applies. Mind you though - i'm pissed off that High Sierra has blanked the root password that i set when i bought it in 2015. So yeah i set a new one.
-
nice that the macOS patch for this that i installed this morning meant that the new root password i set above no longer works. So i had to sudo -s and passwd root to set it meh
-
@apple it’s sooo secure (against users who don’t know what they’re doing. The others it just pisses right off)! -
they should have checked if it was set ffs. easily done. Whilst most ppl don't need it a la Ubuntu, i always set the root password in Ubuntu and OSX/macOS because hey i WANT to. anyway as mentioned it wasnt an issue for me as i always switch off the guest user a/c on OSX/macOS.
End of conversation
New conversation -
-
-
Someone at apple going "i suppose a macos bug bounty program doesnt sound like such a bad idea"
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Uucp? "Now that is a name I haven't heard in a long time."
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
And VNC.
- 1 more reply
New conversation -
-
-
what does _uucp do?
-
uucp is Unix to Unix copy, was at one time the way to move data over the network.
- 1 more reply
New conversation -
-
-
Repro after patch?
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
I think I’m done
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
So even setting a root password won't fix it.
@SwiftOnSecurityThanks. Twitter will use this to make your timeline better. Undo
-
-
-
Can you share your settings? Are all users allowed to logon via screen sharing or only selected?
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
What a mess!
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Nice
Thanks. Twitter will use this to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.