News for hackers. Stuff that matters.

A comment on High Sierra vulnerability exposes the password of an encrypted APFS container. Parent comment

Re:High Sierra vulnerability exposes the password of an encr... by tinus_hn on Thursday October 05, 2017 @10:40AM (#15409525)
Glass completely empty: why is the system storing your password when the volume is not mounted so it can be revealed by the dialog?
[ Parent | on HN ]
Re:High Sierra vulnerability exposes the password of an encr... by psychometry on Thursday October 05, 2017 @11:01AM (#15409702)
Someone probably just mixed up the hash keys for the password field and the hint field. The hint needs to be stored unencrypted so that it can be displayed.
[ Parent | on HN ]
Re:High Sierra vulnerability exposes the password of an encr... by _jn on Thursday October 05, 2017 @11:31AM (#15409978)
Agree. It's probably an issue with the form, nothing underlying. (which means encrypted containers created via the command line should be safe from this vulnerability?)
[ Parent | on HN ]