MacOS High Sierra vulnerability publicly disclosed weeks ago
While Apple scrambles to issue a software fix for a major macOS High Sierra vulnerability, astute observers are wondering what took the company so long to react — after all, the problem was known about weeks ago.
It seems that on November 13, a commenter on an Apple developer forum disclosed the very vulnerability that today threw the infosec community into a frenzy. Oh, and it was called out 9 days ago on Twitter as well.
SEE ALSO:How to protect yourself from the massive macOS High Sierra security vulnerabilityAnd just how bad is this security threat? Well, it's not good. Essentially, it gives anyone with access to an unlocked computer the ability to set themselves as the root user — as well as log back in later to the locked computer at a time of their choosing.
To execute the hack, you only needed to go to System Preferences >Users & Groups, then enter "root" as your user name while leaving the password field blank. Try this a few times until you have access. It's that simple. The exploit was first explained by Apple developer chethan177.
Again, chethan177 posted this on November 13. Apple only issued instructions on how to protect yourself against this on November 28.
Tweet may have been deleted
Tweet may have been deleted
Whether or not anyone tried to responsibly disclose the threat with Apple remains unclear. But the fact that this attack — which in some cases can be performed remotely — was known to some developers weeks before Apple issued a statement about it is sure to turn heads.
Mashablehas reached out to Apple for comment and will update the story as soon as we hear back.
Featured Video For You
This eco-friendly fabric can repel stains and odors
-
7 Reasons to Explore Boston’s LesserDP wins resounding majority in crushing defeat for PPPAmazon Smart Thermostat deal: Get it for 20% offPhony originalism could cost Florida women their abortion rights.Tesla considers adding a new ‘stuck detection' feature to Cybertruck. Here’s why.Plunge into an immersive IMAX movie featuring the James Webb Space TelescopeSonos' new app has all your music on the Home screen最新!16家猪企一季度总销量超3580万头!Norris stuns Verstappen at Dutch GPAmazon deals of the day: Tile trackers, Samsung Galaxy S24 Ultra, Google Pixel Watch, and more
下一篇:U.S. Senators call on FTC to investigate the security of drivers' data
- ·I used the Pixel 9 Pro XL in the shower — does the screen work when wet as claimed?
- ·First float of grid
- ·FM Cho discusses cooperation, NK threats with NATO chief
- ·Where do all those colors in space telescope images come from?
- ·Wordle today: The answer and hints for August 29
- ·Opposition wins by landslide
- ·I’ve been forcibly blue
- ·Look out Substack, Ghost will join the fediverse this year
- ·Wordle today: The answer and hints for August 27
- ·Dramatic video shows moment K9 deputies arrest man accused of killing woman and her 4
- ·New York Knicks vs. Philadelphia 76ers 2024 livestream: Watch NBA playoffs for free
- ·Seoul's transit pass hits 1 million issuance milestone
- ·Tesla issues recall for 9,100 Model X cars
- ·NYT's The Mini crossword answers for April 23
- ·重磅!广东能繁母猪保有量目标下调至190万头!
- ·Experts warn of possible terrorist attack by North Korea
- ·护航孩子成长 解决职工后顾之忧
- ·The M3 MacBook Air is on sale for a record low price
- ·12 Places to Enjoy a Retro Movie Experience
- ·The Shark FlexStyle is $60 off at Amazon and Best Buy
- ·The Analog Embrace: How Some Experiences Are Surviving the Digital Age
- ·FM Cho discusses cooperation, NK threats with NATO chief
- ·Get Rid of Windows 10 Ads, Office Offers and Other Annoyances
- ·Where do all those colors in space telescope images come from?
- ·'Hyundai Way': Auto giant's W121tr plan aims to seize mobility market lead
- ·Kate Hudson says her relationship with her father, Bill Hudson, is warming up
- ·World’s first ‘meltdown
- ·严查农村留守儿童入学工作台账!教育部门首次开展义务教育阳光招生专项行动
- ·World's first esports island gets Abu Dhabi's billion
- ·Opposition wins by landslide
- ·Apple Intelligence is now a little easier to get outside the U.S.
- ·Broken moon lander beams back a final poignant photo — of Earth
- ·9 Winter Traditions You Might Not Have Heard Of
- ·Apple’s new AI: 3 ways Siri could beat ChatGPT
- ·The AI stock bubble has burst. Here's how we know.
- ·World's first esports island gets Abu Dhabi's billion