Updating to macOS 10.13.1 Undoes Apple's 'Root' Bug Patch

04 Décembre, 2017, 00:31 | Auteur: Therese Cote
  • A magnifying glass is held in front of a computer screen in this

He added that his intent with yesterday's tweet wasn't to harm Apple or Apple users, but to "warn Apple and say 'there is a serious security issue in High Sierra, be aware of it and fix it".

The issue, discovered in the macOS High Sierra operating system for laptops and desktops that was released in September, would let anyone enter the word "root" when prompted for a username, and provide no password when logging on to the device.

For these users, the security update can be installed again (in fact, it would be automatically installed at some point) after updating to the new version of the operating system.

"Security is a top priority for every Apple product, and regrettably we stumbled with this release of macOS". It seems that Apple was predicting a particular order in which users would do things, and this assumption means the original problem can be reintroduced.

"The Mac OS High Sierra "root" user bug is insane. just tried it for myself & can not believe it actually worked", tweeted programmer William LeGate.

Vermont woman held for 'testing ricin on fellow care home residents'
The FBI is charging Miller with "knowing possession of an unregistered biological agent, where such an agent is a select agent". The alleged poisonings were uncovered earlier this week when Ms Miller drove herself to a local medical centre to be evaluated.

Mixed Sales Bag for "Big 3" in November
There's an exception to the rule that Black Friday deals don't drive traffic to brick-and-mortar stores anymore: auto dealerships. Sales of the recently revamped Impreza sedan more than tripled, offsetting declines for the Outback SUV.

Controversial rapist Brock Turner seeks to overturn conviction
Turner's legal team filed a 172-page appeal on his behalf on Friday to California's Sixth District of Appeals, NBC reports . They further state that they do not believe what happened was a crime. "His conviction will be upheld", he added.

One small bright spot may be that the vulnerability requires local access and appears hard, though not impossible, to exploit remotely. All Macs running High Sierra appeared to be affected.

The company began working on an update to close the security loophole after hearing of the issue on November 29, to which Apple said that it has now patched that security flaw, along with a guide on how to fix it. "Never mind one from a security and privacy-conscious company such as Apple", Steve Troughton-Smith, a Mac software developer, wrote on Twitter. The flaw allowed a user to gain admin access to the PC without the owner's password just by using "root" as the user name and clicking the unlock button two times to get in.

"Oh my god that should not work but it does", another user responded yesterday on the forum.

Several experts have lambasted Apple for allowing the vulnerability in the first place. Those who have Macs running High Sierra 10.13.0, an older version, have found that downloading the security patch solves the critical problem, but when they update to the latest version of High Sierra, 10.13.1, the root bug resurfaces, undoing the patch's effectivity.

Apple seems to be doing badly in ensuring Macs are secure.

Conseillé:

  • Josh Windass delivers Twitter verdict on Rangers team-mate display v Aberdeen

    Josh Windass delivers Twitter verdict on Rangers team-mate display v Aberdeen

    GRAEME Murty said he was proud of the way his players stood up to Aberdeen after snatching six points from the Dons in four days. But the dismissal did not hold the visitors back and they doubled their lead after 63 minutes.
    Le CSA saisi suite à des propos de JoeyStarr dans ONPC

    Le CSA saisi suite à des propos de JoeyStarr dans ONPC

    Pour Yohann Roszéwitch, ex-président de SOS Homophobie, " l'homophobie n'a pas sa place sur le service public ". Une blague à laquelle les personnes présentes autour de la table ont réagi par le rire.
    Man hunted after vehicle  ploughs into pedestrians in NY

    Man hunted after vehicle ploughs into pedestrians in NY

    The remaining five were rushed to Jamaica Hospital Medical Center where one was listed in critical condition early Sunday. They were screaming, it was insane . "There was screaming before the vehicle started driving, by the sidewalk".
  • Washington se retire du Pacte mondial sur la migration

    Washington se retire du Pacte mondial sur la migration

    En cause, son incompatibilité avec la souveraineté des États-Unis, selon le président américain Donald Trump. Dans le viseur de Donald Trump aussi, l'accord international de 2015 sur le nucléaire iranien.
    Pep Guardiola Reveals What He Said In Angry Exchange With Nathan Redmond

    Pep Guardiola Reveals What He Said In Angry Exchange With Nathan Redmond

    He said , "Oriol for me is one of the leaders of the club, of this team, one of the captains too". It's not a problem". " I was telling him how good a player he is ", Guardiola insisted.
    Barça : les plans de Turan pour son avenir

    Barça : les plans de Turan pour son avenir

    Jamais utilisé par Ernesto Valverde cette saison, Arda Turan (30 ans) ne s'accrochera plus au FC Barcelone. Sa venue serait assurément un joli coup pour le club de la Principauté.
  • Chiefs vs. Jets: Marcus Peters leaves game in fourth quarter

    Chiefs vs. Jets: Marcus Peters leaves game in fourth quarter

    While Smith definitely turned in an improved performance compared to his last couple of weeks, he still was not overly impressive. Meanwhile, New York kept its faint playoff hopes alive by snapping a two-game skid and holding on to a fourth-quarter lead.
    Penn State Football Commit Holds Up Wawa Two Weeks After Commitment

    Penn State Football Commit Holds Up Wawa Two Weeks After Commitment

    The police report alleges Young robbed the Wawa with a black revolver on July 30 and took $13,600 from the store's safe. Here are more details Philly.com provided about the alleged incident involving the football recruit and two others.

    CBS Corporation (CBS)- Most Bizarre Stocks for the Day

    Also, CEO Leslie Moonves sold 150,000 shares of the business's stock in a transaction that occurred on Wednesday, September 20th. The target payout ratio for CBS Corporation is now measuring at 97.60%, outlining what size the company's dividends should be.
  • Le leader City l'emporte sur West Ham — Angleterre

    Le leader City l'emporte sur West Ham — Angleterre

    Kevin De Bruyne , averti à la 59e, a disputé l'intégralité de la rencontre alors que Vincent Kompany est resté sur le banc. Le gardien brésilien s'est incliné une première fois sur une reprise de près de Nicolas Otamendi (57e, 1-1).
    Clippers' Austin Rivers fined $25000 for outburst at fan

    Clippers' Austin Rivers fined $25000 for outburst at fan

    The Clippers beat the Lakers 120-115, but Griffin is expected to miss at least eight weeks while recovering. Hopefully Rivers' dad, Clippers head coach Doc Rivers , gave him some fatherly advice after the outburst.
    Harwood Advisory Group LLC Cuts Stake in NVIDIA Corporation (NASDAQ:NVDA)

    Harwood Advisory Group LLC Cuts Stake in NVIDIA Corporation (NASDAQ:NVDA)

    Mizuho restated a "buy" rating and issued a $225.00 target price on shares of NVIDIA in a research note on Tuesday, November 28th. The firm has a market cap of $119,794.08, a PE ratio of 48.69, a price-to-earnings-growth ratio of 4.28 and a beta of 1.18.


Populaire

Rajinikanth, Akshay Kumar's 2.0 release postponed to April 2018
Currently, the team is deliberating various options regarding the new release date, and an official poster will be released soon. The movie, which was supposed to release in December this year, was shifted to a 26 January release due to post-production work.

Russia Says US Media Will Be Banned From Parliament
FARA is aimed at promoting transparency, but does not restrict the television network's operation in the United States, U.S. Ambassador to Russia Jon Huntsman said last week.

Flacco, Collins account for 4 TDs as Ravens rout Lions
He gave the Ravens a 10-0 lead when he found tight end Benjamin Watson alone in the back of the end zone for a 1-yard score. The big play on the 36-yard scoring drive was Flacco's 23-yard back-shoulder completion to Wallace on the far sideline.

Two Georgia players arrested on marijuana charges
Additionally, Patrick was arrested on misdemeanor marijuana charges as a freshman in 2015, which led to a one-game suspension. A little over five hours after that game, one starter on that team would find himself in the back of a squad vehicle .

Britney Spears shares Christmas video with boytoy
BRITNEY Spears gave her fans a look inside her world when she shared a video from her 36th birthday. By the curved staircase is a grand piano which Britney has previously admitted she loves to play.

BDAY! Text messaging turns 25 years old
The first ever text message was sent on the 3rd of December 1992 for Vodafone by an engineer of 22 years named Neil Papworth. While 25 years of texting has made messaging friends and family easier than ever, the SMS has not come without drawbacks.

USA lawmaker: likelihood of 'preemptive war' with North Korea grows
He repeated Kim's warning that the North would respond with the "highest level of hard-line countermeasure in history". Every missile test, every underground test of a nuclear weapon, means the marriage is more likely.

Anthony Davis leaves Pelicans game in wheelchair after groin injury
His ailment was reported as a groin injury, and Davis was described as doubtful to return. Davis has missed plenty of time throughout his career with a multitude of injuries.

Southern Miss set to play Florida State in Walk-On's Independence Bowl
That defeat was part of an 0-2 FSU start - the last time the Seminoles had done that, until this season. Florida State of the ACC finished 6-6 with a 42-10 victory over the ULM Warhawks on Friday.

La photo d'une forme blanche au cœur de l'enquête — Affaire Maëlys
L'histoire de la voiture avec la forme ne tient pas debout. 3h24: Son véhicule et sur le retour et il est seul. Le procureur termine en disant qu'il n'est pas certain "que l'on retrouve l'enfant" .