Apple Mac High Sierra

by Jonathan Nicholas on November 29th, 2017
in News, Background, Apple OSX

A flaw which was discovered yesterday (28th November) allows users to log into a device with the new O/S High Sierra.  Here is not a very useful link to the Apple page "For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred...."  Brian Krebs has more information.  Seems that the default root password is blank, which is incredible!

Either by luck or good judgement, my MacBook (which is running the new O/S) seems to be OK.  

I have made 3 modifications to the default:

  • The Guest user is off
  • I have set a root password
  • I have set up the login screen so it just presents the 2 users, not a box where you can enter "root"
 
Update later:  the first and third things I quote above, are not important.  Even when you select the option "Display login window as list of users" you can still select to enter Name and Password, as below.  What is the point of that option?
 
Apple Mac High Sierra
 
However, as I set the root password you can't log in with just return.
 

1 comment

User ratings
5 star:
 
(0)
4 star:
 
(1)
3 star:
 
(0)
2 star:
 
(0)
1 star:
 
(0)
1 rating
Average user rating:
4.0 stars
(4.0)
Comment from: Brian Smith [Visitor]
Brian Smith
4 stars

INteresting article

01/02/18 @ 10:07


Form is loading...