macOS High Sierra: Anyone can login as “root” with empty password

Re:macOS High Sierra: Anyone can login as “root” with empty ... by swat535 on Tuesday November 28, 2017 @03:42PM (#15801312)

This is comical at this point. I have no idea how such vulnerable software makes it to production.

It is really ironic that a company, making billions of dollars and branding itself as the leaders of quality, stability and so on, to have this kind of vulnerability.

I have truly lost faith in Apple.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by gluestic on Tuesday November 28, 2017 @05:11PM (#15802339)

Agreed.

iOS 11 was the tipping point for me (can't delete photos using trash icon, wrong orientation when unlocking phone, random lag/freezes etc).

Apple just doesn't care any more.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by piyush_soni on Wednesday November 29, 2017 @03:45AM (#15805525)

Unless you buy Apple Care, of course.

(Sorry, couldn't resist writing :) )

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by gluestic on Wednesday November 29, 2017 @08:23PM (#15812593)

I chuckled.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by rimliu on Wednesday November 29, 2017 @04:14AM (#15805605)

   > and branding itself as the leaders of quality, stability
   > and so on

The days of Mac vs. PC guy are long over. Apple usualy compares their products only to their other products now (best iPhone ever, not best smartphone ever, etc.) Alas if you look around such vulnerable software makes it to production now and again, there is nothing new. Hindsight is 20/20.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by kayoone on Wednesday November 29, 2017 @04:19AM (#15805630)

i am not saying something like this will always happen, but it can happen. No matter what kind of testing and QA you employ (and i bet it's gigantic in Apples case), not having critical bugs in something as complex as an OS every few years is kind of impossible.

Should it happen ? Obviously not. But even popular open source software used by millions and developed by hundreds is not free of issues like this, like Heartbleed showed.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by ag_47 on Wednesday November 29, 2017 @12:56AM (#15804921)

FWIW, as a mostly Android user, the latest Oreo update was pretty terrible as well. Its all about adding new "features" just for new features sake isnt it.

[ Parent | on HN ]