Forum Discussion
OMG
Nothing to see here, just logging in as ROOT WITH NO PASSWORD... https://www.wired.com/story/macos-high-sierra-hack-root Incidentally, this is only with macOS. Opening a terminal and trying to su...
Turns out the trick only works from the login window if your cursor is in the password box. Having corrected that, sure enough, two clicks on the Unlock button and 'bob's your uncle.'
Being somewhat adept in risk management, I can see a whole host of problems with Apple's instructions, which infer that disabling root access from their interface would be a good idea.
Recommend using the last option to just change (actually set, because there is none) the root password rather than disabling it, since the underlying OS really needs it. Disabling root could screw up quite a few installations.
Edit: In saying that, hopefully the root password parries down to the OS instead of just putting lipstick on this pig.
Apparently it does, as you can su to root in terminal using the new password.
I decided to do nothing. Today there was an alleged fix. I downloaded that and rebooted the laptop and I hope things are kosher now.
MarkJFine wrote:Being somewhat adept in risk management, I can see a whole host of problems with Apple's instructions, which infer that disabling root access from their interface would be a good idea.
Recommend using the last option to just change (actually set, because there is none) the root password rather than disabling it, since the underlying OS really needs it. Disabling root could screw up quite a few installations.
Edit: In saying that, hopefully the root password parries down to the OS instead of just putting lipstick on this pig.
Apparently it does, as you can su to root in terminal using the new password.Think they should be.
