macOS High Sierra: Anyone can login as “root” with empty password

Re:macOS High Sierra: Anyone can login as “root” with empty ... by reitanqild on Tuesday November 28, 2017 @06:04PM (#15802799)

Shouldn't matter as long as the password is strong?

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by saagarjha on Tuesday November 28, 2017 @06:12PM (#15802870)

Making it difficult to access something is always worse than not having anything to access. Plus, the average person will set their root password to something like 123456 or qwerty, which is clearly insecure.

[ Parent | on HN ]

Re:macOS High Sierra: Anyone can login as “root” with empty ... by reitanqild on Tuesday November 28, 2017 @06:32PM (#15803035)

> Making it difficult to access something is always worse than not having anything to access.

Not a choice now. If people have physical access to Macs at the moment then it seems to me there are two options right now: either 1) you have changed the root password, hopefully to a strong password or 2) they'll be able to login as root.

Right now you can expect the participants in this thread to be a little smarter than the average computer user.

[ Parent | on HN ]