Horrifying macOS Bug Lets Anyone Become Admin With No Password

Credit IDG

"Twitter user Lemi Orhan Ergin, a software engineer out of Turkey tweeted that there was a "*HUGE*" security issue with High Sierra.

This is a critical bug that allows anyone on a Mac to log in and change the admin settings - using just the username "root" with no password.

What makes this flaw so unsafe is people are reporting it also allows for full keychain access and any login where a user name and password is required, even via remote access via OS X screenshare. Enter "root" as the username and leave the password field empty. It's the highest level of access, and the account is normally disabled.

A massive security hole affecting Mac computers running the latest version of MacOS High Sierra has been discovered.

Horrifying macOS Bug Lets Anyone Become Admin With No Password

We can confirm the bug is present in macOS 10.13.1 and for anyone with a Mac in a public office space, you are urged to fix this by yourself, immediately.

Once a password has been set for the "root" account, the flaw that allows a person to login as "root" with no password will no longer work. Those running previous versions of MacOS including Sierra and Yosemite do not appear to be affected by the bug. Apple is generally good about patching issues like this quickly but for now, machines will remain vulnerable until they can push any updates.

Apple is yet to comment, but I suspect a quick trip to the locksmith is in order. The macOS login screen does not let you change the user name. Changing the root password is the workaround for now.

Related News:

Most liked

We Finally Know When Prince Harry and Meghan Markle Are Getting Married
Although Meghan has been married before the Church of England permits divorcees to remarry with a religious ceremony. The American actress, 36, and Harry, 33, will tie the knot at St George's Chapel, Windsor Castle in May.

Pope Francis and Aung San Suu Kyi avoid Rohingya crisis discussion
Her late husband, Mr Michael Aris, was a lecturer there, and the couple lived and raised their two sons in the city. Refugees say the Myanmar's military has murdered children, raped women and razed villages.

First woman with Down syndrome competes in Miss Minnesota USA pageant
Holmgren is a student in the Bethel University Inclusive Learning and Development (BUILD) program. She told People.com , "I said, 'I want to do this.

Bali volcano: Highest-level aviation warning, flights cancelled amid Mt Agung eruption
Bali is a popular tourist destination for many in the region, with thousands traveling to the island for end of year celebrations. However it warned that the movement of ash cloud is highly unpredictable and flights could still be cancelled at short notice.

Manchester City defeat Huddersfield, set record
The victory also sets a new club record for City who have now won in 11 consecutive away matches in all competitions. Former Manchester City boss Roberto Mancini had 35 points at the same stage in the 2011/12 season.

Jeff Bezos Of Amazon Now Worth $100 Billion - Thanks To Black Friday
After the close of trading in NY on Friday, the billionaire's total net worth fell back down to $97.9 billion. By comparison, Bill Gates' current estimated net worth stands at a paltry $86.8 billion (£65.1bn).

Lamar Jackson and Kentucky Player Spark Huge Louisville-Kentucky Fight
Louisville retook the Governor's Cup from United Kingdom , who took it in Louisville last season after a 41-38 win. Unfortunately for United Kingdom , it wasn't enough to overcome the offensive attack Louisville poured on.

Sisi calls emergency meeting after more than 80 killed at Sinai mosque
Will be calling the President of Egypt in a short while to discuss the tragic terrorist attack, with so much loss of life. Officials said militants in four off-road vehicles bombed the mosque and then sprayed worshipers with gunfire.

Jack Maynard Has Apologised To Fans After 'I'm A Celeb' Exit
The woman, who is now 20 years old, told the paper: "I think it was just a rookie error for him, he was very immature then". Growing up online is hard. "All I can do is beg and encourage that you guys don't make the same mistake as well".

Police enter Australia's Manus Island detention centre
Refugees have little or no protection from these attacks except to live inside detention centres. Refugee advocates said 420 men remained.

Nebraska OK's Keystone XL Pipeline, but more obstacles in the horizon
TransCanada wants to build the almost 1,200-mile Keystone XL pipeline from Canada through several states, including South Dakota. Ongoing legal challenges to the project, and the change of route in Nebraska could add further complications.

Apple to miss holiday season with HomePod speaker
The first quarter of 2018 may see the speakers being shipped to the United States , the UK and the Australian markets. But voice control is created to work only with Apple Music, the company's $10 a month subscription service.

Amid uproar: Padmavati makers postpone film's release
Truth is that people have resigned themselves to government inaction in the face of such blatant terror. A new release date will be announced once the "requisite clearances" are in place.

George Clooney Will Star in and Direct 'Catch 22' Series
The episodes for the series have been written by Luke Davies and David Michod, who are also executive producing the project. George Clooney is returning to television, almost two decades since his last appearance on the hit medical drama ER.

Loftus-Cheek feeling less pressurised at Crystal Palace
England are a very strong team with young players, quality players. "A very good player", Willian said. They can improve a lot, like us.