News for hackers. Stuff that matters.

A comment on macOS High Sierra: Anyone can login as “root” with empty password. Parent comment

Re:macOS High Sierra: Anyone can login as “root” with empty ... by glhaynes on Tuesday November 28, 2017 @03:26PM (#15801145)
As someone who tries to do risk analysis, the prospect of sticking with human drivers because of fear of software bugs (which inevitably will kill, just in much smaller numbers) terrifies me.
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by jtbayly on Tuesday November 28, 2017 @03:42PM (#15801308)
The fear is not of bugs killing people. The fear is of bugs allowing people to kill people.

If ISIS was able to hack a major fleet through one such bug, do you think for a single moment they wouldn't make use of it to kill many people?

[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by ovao on Tuesday November 28, 2017 @04:09PM (#15801673)
Which is a legitimate fear, and substantial effort should go into preventing such bugs, but any sufficiently determined person doesn't need to exploit a software bug to be able to kill others. ISIS appears to be quite effective at simply convincing its members to directly and voluntarily engage themselves in such acts.
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by jtbayly on Wednesday November 29, 2017 @09:26AM (#15806970)
Yeah, but we're dealing with an order of magnitude difference if we give them control over > 1Million mobile bombs (ie 1 large self-driving car network).
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by ovao on Wednesday November 29, 2017 @12:08PM (#15808525)
Unless it was somehow possible to remotely trigger a battery explosion, no, we would not be giving anyone control over “mobile bombs”.
[ Parent | on HN ]