High Sierra vulnerability exposes the password of an encrypted APFS container

Re:High Sierra vulnerability exposes the password of an encr... by jmdocherty on Thursday October 05, 2017 @09:54AM (#15409119)

Glass half-full: "Oops! They missed this because they were busy making all the other stuff super-secure."

Glass half-empty: "Oh-my-goodness...what would Steve say? FFS. We can't trust anyone any more!"

I'm inclined to be half-full.

[ Parent | on HN ]

Re:High Sierra vulnerability exposes the password of an encr... by tinus_hn on Thursday October 05, 2017 @10:40AM (#15409525)

Glass completely empty: why is the system storing your password when the volume is not mounted so it can be revealed by the dialog?

[ Parent | on HN ]

Re:High Sierra vulnerability exposes the password of an encr... by psychometry on Thursday October 05, 2017 @11:01AM (#15409702)

Someone probably just mixed up the hash keys for the password field and the hint field. The hint needs to be stored unencrypted so that it can be displayed.

[ Parent | on HN ]

Re:High Sierra vulnerability exposes the password of an encr... by _jn on Thursday October 05, 2017 @11:31AM (#15409978)

Agree. It's probably an issue with the form, nothing underlying. (which means encrypted containers created via the command line should be safe from this vulnerability?)

[ Parent | on HN ]