• News
  • Money

How to protect your computer from the macOS High Sierra security flaw

How to protect your computer from the macOS High Sierra security flaw

A crucial flaw was revealed in Apple's macOS High Sierra operating system wherein a password was not needed to gain admin access to it. Scary stuff, but paradoxically you need the superuser access that the root account has in order to set a new root users password. If Guest Accounts are enabled, or if the user has selected to use the old-fashioned username-and-password login screen in place of its icon-based replacement, however, access is possible even from a cold boot.

Click then lock icon in the Directory Utility window, then enter an administrator name and password.

Here is how to change the password of a root account since it appears there already is one being shipped with every Mac without requiring a password. Also, if FileVault (full disk encyrption) is turned on and the Mac is shut down rather than logged off or locked, you have to enter the disk password before you can get at a login prompt at all.

The vulnerability was first discovered by Lemi Orhan Ergin, the founder of Software Craftsmanship Turkey, who tweeted Apple Support Tuesday. However, it appears that a hole in macOS High Sierra's security programming allows pretty much anyone to assume this omnipotent, albeit risky role.

Apple has released instructions prompting users how to login with root and add a password to the username. Are you aware of it @Apple?'

'Then use "root" with no password. And try it for several times.

Apple's official word on the situation is that they're now working on a software update to "address this issue". For years Apple computers were more secure, but that was because their market share was so small that few hackers were interested in writing software to attack the company's userbase. To enable the Root User and set a password, please follow the instructions here: https://support.apple.com/en-us/HT204012M.

The flaw can also been exploited remotely if a user has screen sharing enabled. Then you can go to the terminal to an type "dsenableroot -d" (without quotes) to turn off root access.

Leave Your Comment

Leave Your Comment


Latest News

  • What Does It Mean For Electric Cars — Samsung Battery Innovation

    What Does It Mean For Electric Cars — Samsung Battery Innovation

    To put that in perceptive, graphene is 100x more effective than copper in conducting electricity and 140x faster than silicon. But keeping graphene in its thin, fragile form still proves a hard task, especially for volatile uses such as relaying power.
    Thanksgiving dinner is served and you are invited to attend

    Thanksgiving dinner is served and you are invited to attend

    Bishop Brown said this is the seventh year his church has hosted the community Thanksgiving and each year brings about 200 people. Previous year 655 meals were served, with 125 people volunteering from 14 churches. "There are so many people in need", she said.
    The OnePlus 5T gives you an

    The OnePlus 5T gives you an "all-screen" experience and face unlock

    Stock Android requires a swipe even after recognition has been confirmed, and I liked that OnePlus cut that step out entirely. Four months after introducing the OnePlus 5 , the phonemaker is at it again with its latest marquee phone, the OnePlus 5T .
  • Bendable Samsung Galaxy X's Official Support Page Spotted

    Bendable Samsung Galaxy X's Official Support Page Spotted

    Rumors also suggest that Samsung might launch the smartphone as a limited edition with just 100,000 units up for grabs. This possibly means that the Galaxy X may also come at the same time - which is sometime around the end of February .
    Salvation Army NWA Kicks Off Red Kettle Campaign

    Salvation Army NWA Kicks Off Red Kettle Campaign

    While there is a Salvation Army of Dane County goal of $525,000 for the Red Kettle Campaign, there is a larger goal, Voeller said. Lieutenant Matt Degonia with the Salvation Army in Cape Girardeau said he hopes to reach as many people in need as possible.
    Duterte serenades Trump during Asia tour

    Duterte serenades Trump during Asia tour

    Earlier this year, the government reduced funding for the country's Commission on Human Rights from about $15 million to just $20. By the time he sat down in Manila today with Indian Prime Minister Narendra Modi, Trump was beginning to take stock.
  • Zimbabwe's Mugabe speech was meant to sanitise army intervention

    Zimbabwe's Mugabe speech was meant to sanitise army intervention

    However, a complicating factor in finding a way forward is the internal political situation in the ZANU-PF party. The once mighty Grace was also expelled for "spreading hate speech and exercising powers she did not have".
    OnePlus 5T launched - here's how much it will cost in India

    OnePlus 5T launched - here's how much it will cost in India

    Smart Text Selection has also received some improvements alongside Bluetooth performance as well as an update for the Gallery app. For the 5T's build, the company brings back ergonomics in the mix, as the smartphone features a slight curve for easy holding.
    Churches collecting shoeboxes this week

    Churches collecting shoeboxes this week

    Kramer says she buys the items year round, and gets her daycare kids involved by helping to pack each shoe box. November 13 through 19 is National Collection Week for Operation Christmas Child Shoeboxes.
  • Alabama falls out of top four of playoff rankings

    Alabama falls out of top four of playoff rankings

    When the College Football Playoff rankings come out tonight, there could be a big dog who has been kicked off the porch - Alabama. Clemson still has one hurdle to get to the playoff: a showdown with the Miami Hurricanes in Saturday's ACC Championship team.
    Star Wars: Battlefront II microtransactions go offline until EA can 'make changes'

    Star Wars: Battlefront II microtransactions go offline until EA can 'make changes'

    For many players, the issue isn't the cost of getting ahead in the game, it's the fact that the option is available at all. A few hours after that call, players are finding out that they can no longer make in-game purchases with real money.
    Firefox Quantum Download for Mac, PC and Linux Now Available

    Firefox Quantum Download for Mac, PC and Linux Now Available

    Yahoo and Google aim to recoup placement fees by selling ads alongside search results and collecting valuable user data. Dubbed "Firefox Quantum", the Firefox 57 update brings an entire visual redesign and huge performance improvements.
  • Geno Smith to start over Eli Manning for Giants Sunday

    Geno Smith to start over Eli Manning for Giants Sunday

    We have a chance to win these five games, and go look at the roster top to bottom. "It's up there", Manning said. Furthermore, it is clear that the Giants issues this season went far beyond their franchise quarterback.
    Weather Authority: Light snow and drizzle Friday morning

    Weather Authority: Light snow and drizzle Friday morning

    On Monday temperatures will remain below 40 degrees over the region, and stay around or just under freezing in the mountains. SATURDAY NIGHT: Mostly cloudy skies and cold temperatures will be around, with a low temperature of 32 degrees.
    Business Agency Offers Tips Ahead For Safe Shopping Season

    Business Agency Offers Tips Ahead For Safe Shopping Season

    Already, we've seen Target Black Friday deals and ad leaks pop up, giving us a great look at what bargains to expect. Stores are opening as early as Thanksgiving afternoon to give deal seekers an early jump on shopping.
  • Shoppers head to Holyoke Mall this Black Friday

    Shoppers head to Holyoke Mall this Black Friday

    It's busy, it gets you moving. "It's like the new trend item these days because everyone has a crock pot and a grill", she said. The corridors and many stores were crowded, but many people carried only one shopping bag, and even more carried none.
    Samsung Galaxy S9 and Galaxy S9+ to be showcased at CES 2018

    Samsung Galaxy S9 and Galaxy S9+ to be showcased at CES 2018

    The Western version of handset might possibly be powered by Qualcomm's Snapdragon 660 chipset, but that hasn't been confirmed yet. If these information are accurate, the Samsung Galaxy S9 devices are shaping up to be very interesting flagship phones.
    OnePlus 5T first-impressions review

    OnePlus 5T first-impressions review

    The Moto Z2 Force costs an insane £719, the Samsung Galaxy S8 sits at £669 and the HTC U11 is £599. We'll update these initial impressions to a full review with score and verdict in the coming days.

Breaking News



Recommended

Shop local for the holidays on Small Business Saturday

If you spend the same amount at a large business, only $43 stays in the local economy according to an economic study out of MI . She says she has no doubt small business Saturday is their biggest shopping day of the year.

Langley grower: Christmas magic starts with choosing just the right tree

Trees take around 10 years to grow, so the limited number of trees planted during the recession are the trees available this year. According to the National Christmas Tree Association , there is a national shortage of Christmas trees.

Liverpool Team News: Injuries, suspensions and line-up vs Chelsea

Liverpool have enjoyed an extra day of preparation for this encounter and it will need to show at Anfield. Expect Alvaro Morata to return to the starting XI and partner Eden Hazard in the strike-force.

Topeka Community Thanksgiving Dinner celebrates 50th anniversary by serving 2550 meals

We do every year, and one of things I want people to know is that we're feeding people Monday through Friday next week. The church provided all your favorite Thanksgiving fixin's, thanks to donations from area businesses.

FCC boss Ajit Pai emits his net neutrality extermination plan

Net neutrality is in danger, as the Federal Communications Commission chairman Ajit Pai has moved to eliminate the regulations. It represents a setback for Google parent Alphabet Inc and Facebook Inc, which had urged Pai not to rescind the rules.

Christmas tree shortages continue, signaling a dying industry?

A shortage of local trees in several US states is likely to make prices rise and the window to find a good tree much smaller. Whatever the method, we can all agree that this unique trend is 100 per cent one to try this Christmas.

Google secretly tracks people even after they've explicitly told it to stop

What's more, a Google spokesperson also told Mashable that the Cell ID is encrypted is discarded immediately after receiving it. And, in a curious twist to the tale, a leading security researcher has claimed that Google nemesis Oracle was behind the exposé.

Twitter announces new guidelines and begins verification purge

Twitter updated its policies Wednesday to allow the company to remove "verified" status for accounts that engage in "hate". Twitter believes this perception was amplified due to verified accounts being given a place of prominence on the platform.

OnePlus 5T Specs, Price, And Release Date Officially Announced

It's quite a dramatic change over the OnePlus 5 , but OnePlus has kept the changes to a minimum elsewhere, physically at least. There are some interesting new features on the software side, like a new face unlock mode that is super interesting to use.

Kim Kardashian West confirms sex of baby

I've had to explain to her: "'When you come into my room in the morning I have to be with baby sister, I have to feed her'". So are we, Kim! "I can be Karla Kardashian and I'll get all the attention", DeGeneres quipped. 'That's kind of my vibe'.