macOS High Sierra: Anyone can login as “root” with empty password

Re:macOS High Sierra: Anyone can login as “root” with empty ... by patcheudor on Tuesday November 28, 2017 @05:26PM (#15802462)

> Apple only responds reliably to PR storms

They've been quick (within 45 days) to patch every major bug I've reported to them and where the bugs were cross platform, impacting Windows, Android, etc., they've consistently been amongst the quickest to issue a patch so I'm not sure how you qualify that statement.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by bangonkeyboard on Tuesday November 28, 2017 @06:08PM (#15802839)

I qualified it with "reliably". Major bugs reported by you, a security researcher, may be bucketed differently than those deemed less serious or filed by others. As a recent example, a minor bug like the iOS 11 calculator ignoring keypresses had reports filed since Beta 1, but only after it made headlines and caused Apple public embarrassment will it be addressed in the upcoming 11.2, six months later.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by briandear on Tuesday November 28, 2017 @06:50PM (#15803179)

A calculator bug is hardly in the same ballpark.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by MikusR on Tuesday November 28, 2017 @08:21PM (#15803647)

It's worse. It shows nobody at Apple even tried to use app they are shipping.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by tytso on Wednesday November 29, 2017 @12:57PM (#15809105)

Sorry. 45 days is not quick.

[ Parent | on HN ]