Re:macOS High Sierra: Anyone can login as “root” with empty ...
by saagarjha on Tuesday November 28, 2017 @05:20PM
(#15802410)
You can go about it both ways: file a bug report, put a reasonable date that you want them to fix it by. Then you can disclose it.
[ Parent
| on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ...
by patcheudor on Tuesday November 28, 2017 @09:35PM
(#15804063)
This happens quite often. Report a bug to Apple through CERT as an example and they run with a well known 45 day disclosure timeline. For researchers who don't want to get into vendor conflicts this is a good path because CERT ultimately holds the decision.