macOS High Sierra: Anyone can login as “root” with empty password

Re:macOS High Sierra: Anyone can login as “root” with empty ... by wuliwong on Tuesday November 28, 2017 @06:03PM (#15802790)

Seems like you are splitting hairs here. Clearly, the point the commenter was making is that people that have now set the root password as a result of the tweet are more secure than they were before the tweet.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by saagarjha on Tuesday November 28, 2017 @06:16PM (#15802898)

In a week they will be less secure, because they will forget to remove their root account and Apple will have push out a fix.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by reitanqild on Tuesday November 28, 2017 @06:34PM (#15803052)

That's a whole week where they can get owned by any kid with physical access to the machine. In some settings (schools, libraries) this might be a huge issue.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by saagarjha on Tuesday November 28, 2017 @06:42PM (#15803120)

Which comes back to another point I made in this thread: there should have been responsible disclosure of the issue.

[ Parent | on HN ]