News for hackers. Stuff that matters.
Re:If macOS High Sierra shows your password instead of the p... by Dylan16807 on Thursday October 05, 2017 @05:39PM (#15412772)
I reject that comparison. This is not rewriting a core product with tens of millions of lines of code. This is a small utility program. It's very often no problem to just make a new utility program. Especially one that's in the single digits on how many coder-months it costs.
Re:If macOS High Sierra shows your password instead of the p... by Osmium on Thursday October 05, 2017 @06:30PM (#15413058)
Yeah, I can see how a rewrite makes sense. It's not rewriting diskutil itself, it's adding a new UI, that presumably uses newer APIs that will be easier to maintain in the future.

The problem really is that the new Disk Utility is a minimal viable product, rather than an app that can actually do everything the diskutil command line utility can do.

And then you have terrible bugs like this, which is presumably a non-security engineer writing a bit of UI code that they shouldn't be. I doubt this bug actually came from the APFS encryption itself.

Re:If macOS High Sierra shows your password instead of the p... by DonHopkins on Thursday October 05, 2017 @06:33PM (#15413069)
Yeah, I think the problem is that they rewrote everything but the disk utility.
Re:If macOS High Sierra shows your password instead of the p... by eradicatethots on Thursday October 05, 2017 @06:22PM (#15413011)
There are no rules in soft dev
Re:If macOS High Sierra shows your password instead of the p... by j45 on Friday October 06, 2017 @12:20AM (#15414392)
I don't know if a rewrite is about whether it's large or small, it's about the years of hardening many scenarios.
Re:If macOS High Sierra shows your password instead of the p... by Dylan16807 on Friday October 06, 2017 @12:54AM (#15414518)
A simple utility doesn't need that much hardening against corner cases, and in this instance the bug is a main use case.