Published: Wed, November 29, 2017
Sci-tech | By Bennie Mills

Surprise, surprise! Security by obscurity fails Apple's MacOS

Surprise, surprise! Security by obscurity fails Apple's MacOS

MacOS users may want to mitigate the issue themselves by assigning a root password or disabling the root account in System Preferences - User Groups on your Mac device. "Twitter user Lemi Orhan Ergin, a software engineer out of Turkey tweeted that there was a "*HUGE*" security issue with High Sierra.

There's a bug in the latest version of MacOS that lets anyone log in to change settings with the username "root" and no password.

Arizona State fires Graham after six seasons
Devils Digest reported Sunday that Graham has been fired following a morning meeting with ASU athletic director Ray Anderson. Graham is in his sixth season at ASU, and he has accumulated a 45-31 record during his tenure with four bowl appearances.

However, The Verge has been able to confirm the major security issue remains present as of MacOS 10.13.1, the current release of High Sierra. Click on the lock in the lower left of the menu to make changes. A recently uncovered bug appears to allow anyone to login as an administrator merely by entering the username "root" and no password.

A demonstration of the security flaw. Apple ID email addresses tied to users on the Mac can be removed and altered, as well. The bug gives anyone unauthorized administration access to a Mac using a very simple trick: logging in as root.

12-year-old boy shot dead, 5 teens wounded in Cleveland
Cleveland police say a man was stabbed Friday night and two more men were shot early Saturday morning in Cleveland. Cleveland Mayor Frank Jackson was also at the news conference, encouraging anyone with information to come forward.

Apple wasn't immediately available to comment on the bug, whether it's working on a fix, or how to protect any computers running High Sierra right now.

Once in the "Join" menu, click on "Open Directory Utility". You can check your version of macOS by clicking on the Apple logo in the upper lefthand corner of your screen and clicking "About this Mac".

Meyer calling for "all-out investigation" after JT Barrett injury
Haskins led Ohio State down the field after Barrett's injury, setting up Dobbins' 1-yard touchdown run with a 22-yard scamper. Mystery surrounds Michigan's game plan, as starting quarterback Brandon Peters is questionable due to an undisclosed injury.

Once a password has been set for the "root" account, the flaw that allows a person to login as "root" with no password will no longer work.

Like this: