If a Root User is already enabled, to ensure a blank password is not set, please follow the instructions from the ‘Change the root password’ section.” To enable the Root User and set a password, please follow the instructions here. In the meantime, setting a root password prevents unauthorized access to your Mac. “We are working on a software update to address this issue. That root user can see everything on the Mac, delete files, and wreak havoc…Īpple has responded to the revelation about the bug with a note that says: This also works at a Mac login screen, where you can click “Other” to sign in as someone other than the usual user of the Mac, then enter “root” as the user name with no password. The Mac should now give you full access to add a new administrator account, delete an account, and so on… (With this bug, logging in as user “root” with a blank password provides full access to a Mac.) Want to try this on your own Mac? Here’s how (and this works from any Mac account, whether with admin rights or as a guest):ģ) Click the lock icon in the lower left corner to provide access for making changes to a user accountĥ) Move the cursor to the Password field, click on it, but don’t type a password into the blank fieldĦ) Click the “Unlock” button. It works when trying to access an administrator account on an unlocked Mac, but even worse, it lets anyone log into a locked Mac using “root” and the blank password. The bug was discovered by developer Lemi Ergin, who found that anyone could sit down at a Mac and get superuser just by using the username “root” and a blank password. This post is to show you how the bug works and how to quickly enable a fix until Apple is able to send out a macOS High Sierra update. Now the root superuser has ultimate control of any UNIX-based machine, and that’s the case with this bug as root, you can pretty much “have your way” with a Mac. You may have heard rumblings about an incredibly bad bug in macOS High Sierra that allows anyone to walk up to a Mac and log in as a root superuser without needing a password.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |