News for hackers. Stuff that matters.
Re:macOS High Sierra: Anyone can login as “root” with empty ... by beedogs on Tuesday November 28, 2017 @06:17PM (#15802914)
There is nothing irresponsible about disclosing huge vulnerabilities in software by any means necessary.

Edit: as usual, downvotes but no response. I miss when this place was decent.

Re:macOS High Sierra: Anyone can login as “root” with empty ... by deathanatos on Tuesday November 28, 2017 @08:52PM (#15803792)
> as usual, downvotes but no response

The very comment you are replying do lists a reason why disclosing huge vulnerabilities without providing upstream time to patch is irresponsible: "because it puts millions of Apple customers at risk in the process."

Your comment doesn't refute the reasoning the comment you are replying to provides, and it also doesn't tell us anything about why you think "There is nothing irresponsible about disclosing huge vulnerabilities in software by any means necessary." You state your position, but offer no rationale, no reason for it; why should I accept your position as the correct or ethical thing to do?

Re:macOS High Sierra: Anyone can login as “root” with empty ... by rched on Tuesday November 28, 2017 @08:00PM (#15803559)
Why not? The end goal is protecting users. If disclosing a vulnerability before a company has a chance to fix it puts more users at risk than waiting how is that not irresponsible?
Re:macOS High Sierra: Anyone can login as “root” with empty ... by beedogs on Tuesday November 28, 2017 @11:58PM (#15804679)
Considering the vulnerability was supposedly brought to Apple's attention a month earlier via the "proper" channels, and considering Apple's history of repeatedly ignoring and dismissing said disclosures, I'd say this was the only correct action to take.