4 ms·
Apple released the following statement regarding this bug: "We are working on a software update to address this issue. In the meantime, setting a root password
by TonnyGaric 9y ago
Apple released the following statement regarding this bug:
"We are working on a software update to address this issue. In the meantime, setting a root password prevents unauthorized access to your Mac. To enable the Root User and set a password, please follow the instructions here: https://support.apple.com/en-us/HT204012 https://support.apple.com/en-us/HT204012. If a Root User is already enabled, to ensure a blank password is not set, please follow the instructions from the ‘Change the root password’ section."
- sanbor 9y agoThank you! I was looking for a workaround to avoid leaving my system vulnerable until the patch lands in App Store.
- SyneRyder 9y agoThat might not be enough. There's a tweet claiming it isn't limited to the root account, and applies to other similar Apple-default accounts on the system, such as the _applepay user account: https://twitter.com/unsynchronized/status/935656609140711426 https://twitter.com/unsynchronized/status/935656609140711426 That seems to match the technical explanation of the bug here: https://objective-see.com/blog/blog_0x24.html https://objective-see.com/blog/blog_0x24.html The tweet claims they've got Apple Remote Desktop access & screen sharing working via the _applepay user account. Why/how that's possible, I have no idea - I don't have High Sierra to confirm this, and I'm not sure I'd want to mess with the _applepay user account even if I did.