4 ms·
I heard the bug was working on El Capitan for some people [1]. Some Mac devices aren't able to upgrade past El Capitan; will they just forever have this vulnera
by prophesi 9y ago
I heard the bug was working on El Capitan for some people [1]. Some Mac devices aren't able to upgrade past El Capitan; will they just forever have this vulnerability?
[1] https://news.ycombinator.com/item?id=15800817 https://news.ycombinator.com/item?id=15800817
- lstamour 9y agoApple says "Not impacted: macOS Sierra 10.12.6 and earlier" in their security advisory for the patch.
- prophesi 9y agoMy fear is that Apple doesn't know that it still affects El Capitan, though the poster I linked to could have just been lying.
- macintux 9y agoOr mistaken, or confused, or... Apple knows when the bug materialized (sounds like it was part of a UX simplification of migration and/or upgrades) and I'm sure before getting embarrassed yet again they would have done due diligence. Probably.
- spike021 9y agoIt doesn't appear to affect (regular) Sierra, so if this issue exists on El Capitan, I'm guessing it's a separate, though relevant, problem, rather than being the exact same one.
- mhandley 9y agoI can't reproduce it on El Capitan. Doesn't prove others can't, but I'm pretty sure Apple would patch it on El Capitan too if the bug was that old - they issued other security patches less than a month ago.
- geofft 9y agoThe link you post claims that root/empty password worked on the first try, not the second, which probably means that the system in question had the root account enabled with an empty password already (which is a thing you can intentionally configure and then forget about).
- prophesi 9y agoAh, that makes sense. I haven't heard of any other instances of this, so I think it's safe to say El Cap isn't vulnerable.