News for hackers. Stuff that matters.

A comment on macOS High Sierra: Anyone can login as “root” with empty password. Parent comment

Re:macOS High Sierra: Anyone can login as “root” with empty ... by zach43 on Tuesday November 28, 2017 @04:52PM (#15802181)
Maybe something like this was added to make debugging/testing of the OS easier? maybe they just forgot to remove it before shipping the new macOS
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by fattire on Wednesday November 29, 2017 @03:51AM (#15805546)
Apparently it is not just enabling root, but setting the password the first time you do it (in other words, the blank value has nothing to do with it). Then the subsequent times it'll use the pw you set the first time.
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by princekolt on Tuesday November 28, 2017 @06:37PM (#15803081)
That seems the only probable cause I've come across so far. It doesn't seem to be a backdoor because it would be more of a back-spillway-gate.
[ Parent | on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ... by mk89 on Tuesday November 28, 2017 @05:44PM (#15802606)
That could be the case - I can't find any other possible logical explanation, because it doesn't make any sense.
[ Parent | on HN ]