macOS High Sierra: Anyone can login as “root” with empty password

Re:macOS High Sierra: Anyone can login as “root” with empty ... by godelski on Tuesday November 28, 2017 @04:00PM (#15801560)

But do they? And what portion of them do? And are they using it? There's a lot of speculation here. But surely the average person doesn't know and with this being public knowledge, AND easy to execute there is a bigger chance for crime of opportunity.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by ben_w on Tuesday November 28, 2017 @05:07PM (#15802305)

It’s always reasonable to assume that black-hats (and… what do you call government hackers — black-suits, helicopter-hats, ???) know everything that white-hats know, and that they either have or are already in the process of selling that exploit to less skilled criminals.

It’s not like being good morally correlates with being good at security.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by godelski on Wednesday November 29, 2017 @11:29AM (#15808058)

But that's not what I'm saying. I'm saying that since this is so easy, a person that is computer illiterate can now gain root access. You definitely don't post those kinds of things on Twitter.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by ben_w on Wednesday November 29, 2017 @05:47PM (#15811626)

Computer illiterate people might now have a new way to shoot themselves in the foot, they won’t be able to exploit it because they won’t know what root is or why it does stuff.

[ Parent | on HN ]