Well this isn't good. A bug in Apple macOS High Sierra can Too Naughty to Say No (1985) - Remasteredlet anyone gain admin access to a Mac. To make matters worse, once that access has been gained, an attacker can later log back into the locked device anytime.
Published to Twitter on Tuesday by software engineer Lemi Orhan Ergin, the vulnerability is alarmingly straightforward. The flaw allows someone to create a kind of phantom profile, one that can log into the Mac with admin access, but it won't show up on a real admin account.
Once the phantom account is created, a user simply needs to enter "root" as a username and, without entering a password, hit enter to unlock. Importantly, the hacker first has to have access to a unlocked computer to be able to pull this off. But still, it's bad.
Mashable confirmed this security flaw exists on macOS High Sierra 10.13.0.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
Anyone looking to exploit the flaw would in most cases first need physical access to the machine while an admin is logged in. They would only need access for a few seconds, though, and then could return anytime to log in as an admin.
However, should a vulnerable machine also happen to have screen sharing turned on, it is reportedly remotely vulnerable as well.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
"We are working on a software update to address this issue," explained Apple when reached for comment. "In the meantime, setting a root password prevents unauthorized access to your Mac."
Instructions to do so can be found on an Apple support page.
This story has been updated with information about remote exploitation, as well as a statement from Apple.
Topics Apple Cybersecurity
A Brief, Cheesy Interlude
Steelers vs. Browns 2024 livestream: How to watch Thursday Night Football for free
Best Black Friday Fire Stick deal: Save $28 on the Fire TV Stick 4K
'Alien: Romulus' has a great Easter egg: The drinking bird
Trump’s Family Leave Shell Game
How to update your Apple product to avoid a potential cyberattack
Best Black Friday PS5 deal: Save $75 on PS5 console
Best Black Friday Fire Stick deal: Save $28 on the Fire TV Stick 4K
Techies and Tankies
Best Black Friday AirPods Pro deal: Save $90 on Apple AirPods Pro 2
The Secret Policeman at the Marathon
Best kitchen deal: Save 57% on the Cuisinart Indoor Pizza Oven at Amazon
Amazon's new Echo Show has a massive, 21
When do Black Friday sales start? Early holiday deals are already here.
Battle of the Brands
Best Black Friday earbuds deal: Save $69 on Beats Studio Buds
Best Black Friday Samsung OLED TV deal: Get the 65
OpenAI releases free ChatGPT course for teachers
Shave the Billionaire
Best Black Friday Kindle deal: Get $20 off the 2024 Kindle
Someone helpfully rearranged a bookstore's Ivanka Trump displayPorn streamed on a train station video display and commuters definitely noticedHow to transform your car into an officeApple is launching a big, celebAn iPad mini with a larger display might be coming and I'm very excitedYour internet provider is full of it on net neutrality. Now with proof.IRS announces May 13 deadline for direct deposit of stimulus checksOmar the long cat is really, really, really longRIP Google Play Music: Users told to migrate to YouTube MusicFacebook is part of a group that will reportedly run ads to fight Silicon Valley regulationsDave Chappelle takes back what he said about Donald TrumpElon Musk: We're reopening the Fremont Tesla factory, arrest me if you wantMegan Rapinoe wants your Zoom calls to be about changing the worldHere are the best cheap headphones for working out and daily lifeHere's Celine Dion in a 'Bye Felicia' hoodieLiv Little on galRazer is deploying free mask vending machines in SingaporeUse these five free Google Meet features to get the best video callsAll the outlandish things Trump said in his commencement speech for the Coast GuardThe internet points out the many, many politicians who've had it worse than Donald Trump The iPhone was the world's bestselling smartphone in Q1 2017 'American Gods' is blessed with a Season 2 renewal after two episodes Everything is totally fine at Fyre Festival HQ Snap CEO Evan Spiegel is here to lose money and earn your trust UK startup Improbable just raised half a billion dollars to build the Matrix This phone has a big red button for emergencies Become your mom's favorite child with the gift of a flower doughnut Prepare to have your face scanned at airports across America When did laptops become such a danger on planes? Photographer accidentally captures the wrong couple's engagement Man demonstrates precisely why you shouldn't climb the barriers at a rail crossing Blizzard's 'Overwatch' League is scaring off esports teams Microsoft unveils the next version of Windows 'Wonder Woman' box office predictions are all over the place. It's complicated. Elon Musk cries for help with the name for his first Boring machine Snapchat blew its first First Hydra took Captain America, now they're taking the White House Woman does solo wedding shoot after she finds out she has terminal cancer I went to a rage room and smashed up a bunch of stuff and it was amazing NES Classic is dead, but there's a new way to play Nintendo in HD
2.8413s , 8199.09375 kb
Copyright © 2025 Powered by 【Too Naughty to Say No (1985) - Remastered】,Charm Information Network