2 ms·

I would guess that the bug was in the front-end code for the password form. At that point the code obviously has access to the plain text password. I’m imaginin

by baddox 9y ago

I would guess that the bug was in the front-end code for the password form. At that point the code obviously has access to the plain text password. I’m imagining a copy-paste bug like this: storePassword(form[“password”]) storeHint(form[“password”])

jug 9y ago
Yes, I was first flabbergasted too but as miserably tested the APFS encryption interface needs to have been (if at all?!), this seems to be basically what is going on.
FabHK 9y ago
What makes that theory even more plausible is that the bug doesn't appear in the command line diskutil.