Well this isn't good. A bug in Apple macOS High Sierra can knihy o eroticelet anyone gain admin access to a Mac. To make matters worse, once that access has been gained, an attacker can later log back into the locked device anytime.
Published to Twitter on Tuesday by software engineer Lemi Orhan Ergin, the vulnerability is alarmingly straightforward. The flaw allows someone to create a kind of phantom profile, one that can log into the Mac with admin access, but it won't show up on a real admin account.
Once the phantom account is created, a user simply needs to enter "root" as a username and, without entering a password, hit enter to unlock. Importantly, the hacker first has to have access to a unlocked computer to be able to pull this off. But still, it's bad.
Mashable confirmed this security flaw exists on macOS High Sierra 10.13.0.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
Anyone looking to exploit the flaw would in most cases first need physical access to the machine while an admin is logged in. They would only need access for a few seconds, though, and then could return anytime to log in as an admin.
However, should a vulnerable machine also happen to have screen sharing turned on, it is reportedly remotely vulnerable as well.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
"We are working on a software update to address this issue," explained Apple when reached for comment. "In the meantime, setting a root password prevents unauthorized access to your Mac."
Instructions to do so can be found on an Apple support page.
This story has been updated with information about remote exploitation, as well as a statement from Apple.
Topics Apple Cybersecurity
'Quordle' today: See each 'Quordle' answer and hints for August 28, 2023The M2 MacBook Air is on sale for a recordApple sends invites for iPhone 15 launch on Sept. 12The Morning News Roundup for September 9, 2014Staff Picks: Catharsis, Consumed, Containers,How to save videos on SnapchatWalking and TalkingAs Dolls to Wanton KidsWordle today: Here's the answer and hints for August 27Wordle today: Here's the answer and hints for August 29How to use an Instant PotLelo Ina Wave 2 review: The best rabbit vibrator out thereI can't stop sliding into my own DMsCollages by Artist Steve GreeneGoogle launches SynthID, an AI image watermark that's invisible to the naked eyeThe Morning News Roundup for September 17, 2014The Morning News Roundup for September 9, 2014Pastless Futureless ManTeens are apparently stealing soap dispensers and urinals from school for the devious lick trendAt the Drive 'To me, they're not even people:' Eric Trump attacks his dad's critics 'The Twilight Zone' Season 2 brings twists with a deep cut throwback Ivanka Trump's 'US Weekly' cover is so dumb, it had to be memed 12 free and printable Black Lives Matter posters from Black artists Curatio wants to be Tinder plus Facebook for health and disease communities Desperate to find Wonder Woman porn? Join the club. 'Binge': The eating disorder comedy helping viewers through quarantine A guide to the James Comey hearing, for normals Verizon decides Facebook doesn't need its ad money after all TLC confirms that their zero tolerance policy for scrubs remains firm Trump's legal team apparently doesn't know how to use spell Surprise, surprise: Betsy DeVos will not commit to protecting LGBTQ students from discrimination Facebook will warn you when you share old news We turned the key UK election figures into glorious Top Trump cards Americans have slower mobile internet speed than Estonia Your next iPhone may not come with earbuds or a charger Once upon a time Apple made sneakers and they could cost you $15K There's a Twitter campaign to get Trump out of office using your spare change Ivanka Trump's Starbucks order is the well 'Lunar Loo' challenge asks people to help astronauts poop on the Moon
3.5499s , 10169.8515625 kb
Copyright © 2025 Powered by 【knihy o erotice】,Prosperous Times Information Network