Re:macOS High Sierra: Anyone can login as “root” with empty ...
by bambax on Tuesday November 28, 2017 @06:42PM
(#15803117)
If you sell locks and those locks can be opened by pulling on them twice, the reasonnable course of action is to make that fact known to every buyer ASAP, not tell you privately and wait for you to maybe issue a recall.
[ Parent
| on HN ]
Re:macOS High Sierra: Anyone can login as “root” with empty ...
by hunter2_ on Tuesday November 28, 2017 @09:53PM
(#15804153)
Locks don't nag you to decommission them quite as aggressively as OS X asks you to patch it. And an OS update was going to happen anyway, so including this patch doesn't really burden the user with an extra task they wouldn't already be subject to. Therefore, coordinated disclosure has a lot of value in the OS update ecosystem and very little in the physical lock ecosystem.