News for hackers. Stuff that matters.

A comment on macOS lock screen: “I just sent my session pass to my whole team”. Parent comment

Re:macOS lock screen: “I just sent my session pass to my who... by dingaling on Friday December 08, 2017 @03:00PM (#15881516)
> but it does help me avoid getting compromised

Only by casual hackers. The pros will probably have been exploiting the flaw for weeks or months against gainful targets.

If there is a reasonable end-user workaround against the vulnerability then I'd argue it's more responsible to publish early and widely than to wait for the vendor.

It becomes greyer if there is no workaround. I'm not sure what I'd support in that case.

[ Parent | on HN ]
Re:macOS lock screen: “I just sent my session pass to my who... by daveFNbuck on Saturday December 09, 2017 @02:08AM (#15884670)
The compromise is that I accidentally type my password into Slack and send it out to everyone in the building. There is no hacker involved in this one, and I can fully protect myself by ensuring that my password is going into the password field.
[ Parent | on HN ]