Apple security blunder exposes Lion login passwords in clear text

Re:Apple security blunder exposes Lion login passwords in cl... by Osiris on Sunday May 06, 2012 @04:58PM (#3936295)

But it does appear to affect anyone that does NOT use full disk encryption. If I were to venture to guess, I would estimate that the vast majority of Mac OS Lion customers do not use full disk encryption.

For those that do, you're lucky. For everyone else, this is horrible.

I agree with the comments that if this type of issue was found in a Microsoft product, I suspect there would have been a patch issued in less than a month and probably much sooner. Is Apple just sticking is head in the sand or do they just hope that no one notices the problem while they (slowly) work on getting a fix into a future release?

Or is it that having to do a special patch for this means that Apple has to admit that they have security issues like Microsoft has had to deal with? I'd love to know the reasoning at Apple about why this wasn't fixed as soon as they found out about it.

[ Parent | on HN ]

Re:Apple security blunder exposes Lion login passwords in cl... by fishtoaster on Sunday May 06, 2012 @05:21PM (#3936369)

Are you saying that this affects anyone not using filevault? If so, I think you are mistaken- looking at the original post(http://cryptome.org/2012/05/apple-filevault-hole.htm), it appears to be only those using filevault on Lion, and of those, only the people using the legacy mode thereof.

[ Parent | on HN ]