4 ms·
Description: 'If a hint was set in Disk Utility when creating an APFS encrypted volume, the password was stored as the hint. This was addressed by clearing hin
by chmars 9y ago
Description:
'If a hint was set in Disk Utility when creating an APFS encrypted volume, the password was stored as the hint. This was addressed by clearing hint storage if the hint was the password, and by improving the logic for storing hints.'
https://support.apple.com/en-us/HT208165 https://support.apple.com/en-us/HT208165
- rightos 9y agoSo basically if you set a hint your entire disk encryption became useless because the hint storage gave your password away? Yikes, hope no one was relying on that.
- eonti09taeuo 9y agoKeep in mind that this only happens if you turned it on using Disk Utility. If you did the normal upgrade (the vast majority of users) you didn't go through disk utility, and everything's fine (presumably). Still a terrible error, but affects far fewer people than your comment implied.
- JumpCrisscross 9y agoWhat if you used command line diskutil?
- FabHK 9y agoApparently the bug only affected the GUI app. > When creating an encrypted APFS volume in Terminal with the diskutil command line utility, the actual hint is shown, rather than the password. https://www.macrumors.com/2017/10/05/macos-high-sierra-disk-utility-vulnerability/ https://www.macrumors.com/2017/10/05/macos-high-sierra-disk-...
- Kenji 9y agoAbsolute incompetence. Absolute, utter incompetence. The developer responsible for this should create static HTML front ends for the rest of their life. They are not fit for writing security related code.
- deleted 9y ago[deleted]