News for hackers. Stuff that matters.
Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by diggan on Thursday March 20, 2025 @01:40PM (#43426334)
> It reminds me of the zero day that Apple tried to cover up somewhat - the "empty password tried twice" root login bypass. This was ca. 2017 or so, maybe 2018.

2017 it seems, submission at the time: "macOS High Sierra: Anyone can login as “root” with empty password" - 3001 points | 1073 comments - https://news.ycombinator.com/item?id=15800676

Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by hunter2_ on Thursday March 20, 2025 @09:06PM (#43430852)
Aside: >1000 comments in 2017 is significant. Is there a straightforward way to list such highly-engaged HN submissions? Ideally sorted by prominence within a short (1yr is fine) time window, but a simpler sort (no regard for prominence, just absolute engagement, which would strongly tilt the results toward the present, due to platform growth) would also be ok.
Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by internetter on Thursday March 20, 2025 @09:22PM (#43430945)
Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by hunter2_ on Saturday March 22, 2025 @09:19PM (#43450199)
Awesome!