Huge security flaw lets anyone log into a High Sierra Mac

Tech Crunch ^ | Nov 28 2017 | Kevin Coldewey

[grey_whiskers]

Update: Apple has acknowledged the issue and is working on it. Statement and workaround below.

Wow, this is a bad one. On Macs running the latest version of High Sierra — 10.13.1 (17B48) — it appears that anyone can log in just by putting “root” in the user name field. This is a huge, huge problem. Apple will fix it probably within hours, but holy moly. Do not leave your Mac unattended until this is resolved.

The bug is most easily accessed by going to Preferences and then entering one of the panels that has a lock in the lower left-hand corner. Normally you’d click that to enter your user name and password, which are required to change important settings like those in Security & Privacy.

[for-q-clinton]

Wow that’s like the 3rd or 4th post in a row what’s you resorted to name calling. I guess you can’t win on the merits so you resort to petty name calling.

[Swordmaker]

Wow that’s like the 3rd or 4th post in a row what’s you resorted to name calling. I guess you can’t win on the merits so you resort to petty name calling.

Just describing you. . . a pipsqueak who has offered nothing truthful in these Apple threads.

Going for a microscope?

[for-q-clinton]

a pipsqueak who has offered nothing truthful in these Apple threads. There you go again... So you're now denying you're an apple fanboy? I think this one line exposes you as the liar. But keep up with the name calling...it just makes you look weaker in your argument (because you don't have one).