Re:macOS High Sierra: Anyone can login as “root” with empty ...
by michaelmcmillan on Tuesday November 28, 2017 @05:21PM
(#15802428)
"Apple root bug appears to be triggered only by logins coming from com.apple.loginwindow.
Running "su" with a blank password won't get you a root shell." [1]
As for your subsystem argument, explain this: https://www.youtube.com/watch?v=OobLb1McxnI&feature=youtu.be...
Re:macOS High Sierra: Anyone can login as “root” with empty ...
by mikeash on Tuesday November 28, 2017 @07:41PM
(#15803467)
There are a bunch of replies to that tweet saying that it does work, you just have to do it a certain way.
That video is explained by using the infotainment systems as a bridge, exactly as I described in my previous comment.
In any case, in a desktop system you shove everything together and then try to modularize it with good design and weak tools like UNIX processes. In a car, the safety-critical systems are literally running on separate hardware with limited communication over a specialized data bus. Of course it's still possible for them to have bugs or even exploits, but the complexity of the infotainment system is irrelevant, aside from making it a potential jumping-off point for using an exploit in the safety-critical systems.
Counting the infotainment system here makes about as much sense as counting the number of lines in Windows when talking about a Mac vulnerability because a Windows machine could be used to launch an attack.