• News
  • Money

How to protect your computer from the macOS High Sierra security flaw

How to protect your computer from the macOS High Sierra security flaw

A crucial flaw was revealed in Apple's macOS High Sierra operating system wherein a password was not needed to gain admin access to it. Scary stuff, but paradoxically you need the superuser access that the root account has in order to set a new root users password. If Guest Accounts are enabled, or if the user has selected to use the old-fashioned username-and-password login screen in place of its icon-based replacement, however, access is possible even from a cold boot.

Click then lock icon in the Directory Utility window, then enter an administrator name and password.

Here is how to change the password of a root account since it appears there already is one being shipped with every Mac without requiring a password. Also, if FileVault (full disk encyrption) is turned on and the Mac is shut down rather than logged off or locked, you have to enter the disk password before you can get at a login prompt at all.

The vulnerability was first discovered by Lemi Orhan Ergin, the founder of Software Craftsmanship Turkey, who tweeted Apple Support Tuesday. However, it appears that a hole in macOS High Sierra's security programming allows pretty much anyone to assume this omnipotent, albeit risky role.

Apple has released instructions prompting users how to login with root and add a password to the username. Are you aware of it @Apple?'

'Then use "root" with no password. And try it for several times.

Apple's official word on the situation is that they're now working on a software update to "address this issue". For years Apple computers were more secure, but that was because their market share was so small that few hackers were interested in writing software to attack the company's userbase. To enable the Root User and set a password, please follow the instructions here: https://support.apple.com/en-us/HT204012M.

The flaw can also been exploited remotely if a user has screen sharing enabled. Then you can go to the terminal to an type "dsenableroot -d" (without quotes) to turn off root access.

Leave Your Comment

Leave Your Comment


Latest News

  • Alabama falls out of top four of playoff rankings

    Alabama falls out of top four of playoff rankings

    When the College Football Playoff rankings come out tonight, there could be a big dog who has been kicked off the porch - Alabama. Clemson still has one hurdle to get to the playoff: a showdown with the Miami Hurricanes in Saturday's ACC Championship team.
    Bendable Samsung Galaxy X's Official Support Page Spotted

    Bendable Samsung Galaxy X's Official Support Page Spotted

    Rumors also suggest that Samsung might launch the smartphone as a limited edition with just 100,000 units up for grabs. This possibly means that the Galaxy X may also come at the same time - which is sometime around the end of February .
    Firefox Quantum Download for Mac, PC and Linux Now Available

    Firefox Quantum Download for Mac, PC and Linux Now Available

    Yahoo and Google aim to recoup placement fees by selling ads alongside search results and collecting valuable user data. Dubbed "Firefox Quantum", the Firefox 57 update brings an entire visual redesign and huge performance improvements.
  • Weather Authority: Light snow and drizzle Friday morning

    Weather Authority: Light snow and drizzle Friday morning

    On Monday temperatures will remain below 40 degrees over the region, and stay around or just under freezing in the mountains. SATURDAY NIGHT: Mostly cloudy skies and cold temperatures will be around, with a low temperature of 32 degrees.
    Churches collecting shoeboxes this week

    Churches collecting shoeboxes this week

    Kramer says she buys the items year round, and gets her daycare kids involved by helping to pack each shoe box. November 13 through 19 is National Collection Week for Operation Christmas Child Shoeboxes.
    Business Agency Offers Tips Ahead For Safe Shopping Season

    Business Agency Offers Tips Ahead For Safe Shopping Season

    Already, we've seen Target Black Friday deals and ad leaks pop up, giving us a great look at what bargains to expect. Stores are opening as early as Thanksgiving afternoon to give deal seekers an early jump on shopping.
  • Geno Smith to start over Eli Manning for Giants Sunday

    Geno Smith to start over Eli Manning for Giants Sunday

    We have a chance to win these five games, and go look at the roster top to bottom. "It's up there", Manning said. Furthermore, it is clear that the Giants issues this season went far beyond their franchise quarterback.
    O Christmas Tree Shortage Hits Northwest Arkansas

    O Christmas Tree Shortage Hits Northwest Arkansas

    Many locals went out to pick up their Christmas tree this weekend as they prepare for the big holiday. But the number of fake trees sold more than doubled from 8 million to nearly 19 million.
    FCC boss Ajit Pai emits his net neutrality extermination plan

    FCC boss Ajit Pai emits his net neutrality extermination plan

    Net neutrality is in danger, as the Federal Communications Commission chairman Ajit Pai has moved to eliminate the regulations. It represents a setback for Google parent Alphabet Inc and Facebook Inc, which had urged Pai not to rescind the rules.
  • Fire departments urge residents to exercise fire safety this holiday season

    Fire departments urge residents to exercise fire safety this holiday season

    Keep children at least 3-feet away from hazards including stoves, hot foods, hot liquids, lighters, matches, candles and knives. Always remain in the home while food is cooking, and set a timer to remind yourself to check-on the items cooking.
    Twitter announces new guidelines and begins verification purge

    Twitter announces new guidelines and begins verification purge

    Twitter updated its policies Wednesday to allow the company to remove "verified" status for accounts that engage in "hate". Twitter believes this perception was amplified due to verified accounts being given a place of prominence on the platform.
    Duterte serenades Trump during Asia tour

    Duterte serenades Trump during Asia tour

    Earlier this year, the government reduced funding for the country's Commission on Human Rights from about $15 million to just $20. By the time he sat down in Manila today with Indian Prime Minister Narendra Modi, Trump was beginning to take stock.
  • Shop local for the holidays on Small Business Saturday

    Shop local for the holidays on Small Business Saturday

    If you spend the same amount at a large business, only $43 stays in the local economy according to an economic study out of MI . She says she has no doubt small business Saturday is their biggest shopping day of the year.
    Langley grower: Christmas magic starts with choosing just the right tree

    Langley grower: Christmas magic starts with choosing just the right tree

    Trees take around 10 years to grow, so the limited number of trees planted during the recession are the trees available this year. According to the National Christmas Tree Association , there is a national shortage of Christmas trees.
    Samsung Galaxy S9 and Galaxy S9+ to be showcased at CES 2018

    Samsung Galaxy S9 and Galaxy S9+ to be showcased at CES 2018

    The Western version of handset might possibly be powered by Qualcomm's Snapdragon 660 chipset, but that hasn't been confirmed yet. If these information are accurate, the Samsung Galaxy S9 devices are shaping up to be very interesting flagship phones.
  • In Our View: For Shopping, Think Small

    In Our View: For Shopping, Think Small

    Each year the SBA diligently promotes community members to support their local shops and restaurants for Small Business Saturday . Columbia also gets in on the Shop Small movement with stores in Five Points offering sales and specials on Saturday.
    OnePlus 5T first-impressions review

    OnePlus 5T first-impressions review

    The Moto Z2 Force costs an insane £719, the Samsung Galaxy S8 sits at £669 and the HTC U11 is £599. We'll update these initial impressions to a full review with score and verdict in the coming days.
    Salvation Army NWA Kicks Off Red Kettle Campaign

    Salvation Army NWA Kicks Off Red Kettle Campaign

    While there is a Salvation Army of Dane County goal of $525,000 for the Red Kettle Campaign, there is a larger goal, Voeller said. Lieutenant Matt Degonia with the Salvation Army in Cape Girardeau said he hopes to reach as many people in need as possible.

Breaking News



Recommended

What Does It Mean For Electric Cars — Samsung Battery Innovation

To put that in perceptive, graphene is 100x more effective than copper in conducting electricity and 140x faster than silicon. But keeping graphene in its thin, fragile form still proves a hard task, especially for volatile uses such as relaying power.

Shop local for Small Business Saturday

Most importantly, make sure that your business address, contact information, and business hours are accurate. She said several boutique owners chose to give deep discounts the Saturday before Small Business Saturday.

Topeka Community Thanksgiving Dinner celebrates 50th anniversary by serving 2550 meals

We do every year, and one of things I want people to know is that we're feeding people Monday through Friday next week. The church provided all your favorite Thanksgiving fixin's, thanks to donations from area businesses.

Christmas tree shortages continue, signaling a dying industry?

A shortage of local trees in several US states is likely to make prices rise and the window to find a good tree much smaller. Whatever the method, we can all agree that this unique trend is 100 per cent one to try this Christmas.

Google secretly tracks people even after they've explicitly told it to stop

What's more, a Google spokesperson also told Mashable that the Cell ID is encrypted is discarded immediately after receiving it. And, in a curious twist to the tale, a leading security researcher has claimed that Google nemesis Oracle was behind the exposé.

Thanksgiving dinner is served and you are invited to attend

Bishop Brown said this is the seventh year his church has hosted the community Thanksgiving and each year brings about 200 people. Previous year 655 meals were served, with 125 people volunteering from 14 churches. "There are so many people in need", she said.

Star Wars: Battlefront II microtransactions go offline until EA can 'make changes'

For many players, the issue isn't the cost of getting ahead in the game, it's the fact that the option is available at all. A few hours after that call, players are finding out that they can no longer make in-game purchases with real money.

The OnePlus 5T gives you an "all-screen" experience and face unlock

Stock Android requires a swipe even after recognition has been confirmed, and I liked that OnePlus cut that step out entirely. Four months after introducing the OnePlus 5 , the phonemaker is at it again with its latest marquee phone, the OnePlus 5T .

OnePlus 5T Specs, Price, And Release Date Officially Announced

It's quite a dramatic change over the OnePlus 5 , but OnePlus has kept the changes to a minimum elsewhere, physically at least. There are some interesting new features on the software side, like a new face unlock mode that is super interesting to use.

Kim Kardashian West confirms sex of baby

I've had to explain to her: "'When you come into my room in the morning I have to be with baby sister, I have to feed her'". So are we, Kim! "I can be Karla Kardashian and I'll get all the attention", DeGeneres quipped. 'That's kind of my vibe'.