News for hackers. Stuff that matters.

A comment on macOS High Sierra: Anyone can login as “root” with empty password.

Re:macOS High Sierra: Anyone can login as “root” with empty ... by Shank on Tuesday November 28, 2017 @03:03PM (#15800892)
With user switching enabled as a username + password combo, I was able to login to the root account from the login screen with no password on 10.13.1. It's not just a UI bug, it's a full on authentication bypass.
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by coreymayo on Tuesday November 28, 2017 @03:23PM (#15801108)
I'm able to do this as well, login as root with no password from the login screen.
[ Parent | on HN ]