News for hackers. Stuff that matters.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by pcwalton on Tuesday November 28, 2017 @03:43PM (#15801337)
The problem with that analogy is that the probability that the "bad guys" already know about this vulnerability is vastly higher than the probability that thieves know about how well some random house in the neighborhood is secured.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by godelski on Tuesday November 28, 2017 @04:00PM (#15801560)
But do they? And what portion of them do? And are they using it? There's a lot of speculation here. But surely the average person doesn't know and with this being public knowledge, AND easy to execute there is a bigger chance for crime of opportunity.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by ben_w on Tuesday November 28, 2017 @05:07PM (#15802305)
It’s always reasonable to assume that black-hats (and… what do you call government hackers — black-suits, helicopter-hats, ???) know everything that white-hats know, and that they either have or are already in the process of selling that exploit to less skilled criminals.

It’s not like being good morally correlates with being good at security.

Re:macOS High Sierra: Anyone can login as “root” with empty ... by godelski on Wednesday November 29, 2017 @11:29AM (#15808058)
But that's not what I'm saying. I'm saying that since this is so easy, a person that is computer illiterate can now gain root access. You definitely don't post those kinds of things on Twitter.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by ben_w on Wednesday November 29, 2017 @05:47PM (#15811626)
Computer illiterate people might now have a new way to shoot themselves in the foot, they won’t be able to exploit it because they won’t know what root is or why it does stuff.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by tn_ on Tuesday November 28, 2017 @04:37PM (#15802024)
How many more people now know about this vulnerability cause of this knuckle-head tweeting it? At least 100k impressions? Now think of how many more "bad guys" have access to this hack that are going to abuse it.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by sooheon on Tuesday November 28, 2017 @07:41PM (#15803468)
And how many people and companies are now empowered to fix this issue for themselves, immediately.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by COMMENT___ on Wednesday November 29, 2017 @01:40AM (#15805081)
Not immediately.