News for hackers. Stuff that matters.

A comment on macOS High Sierra: Anyone can login as “root” with empty password. Parent comment

Re:macOS High Sierra: Anyone can login as “root” with empty ... by thomastjeffery on Tuesday November 28, 2017 @04:43PM (#15802088) 

    sudo passwd
Does that change the password for the current user without authentication, or does it change the password for root without authentication?

I think it would be best to recommend an unambiguous

    sudo passwd root
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by LeoPanthera on Tuesday November 28, 2017 @05:04PM (#15802287)
"sudo foo" with no other arguments runs "foo" as root. "passwd" with no other arguments changes the password of the user it is running as.

"sudo passwd" unambiguously changes the password of root.

[ Parent | on HN ]