> None of which makes this statement any less inaccurate: >> You'd still need physical access to a logged-in machine to exploit it. Yes it does; if Remote Mana

> None of which makes this statement any less inaccurate: >> You'd still need physical access to a logged-in machine to exploit it. Yes it does; if Remote Management was enabled (as is often the case for remote servers or mass deployments), an attacker could login via Apple Remote Desktop using default, pre-existing user accounts (_applepay, _uucp, etc) and a blank password without ever needing physical access. Just tested again with a new, unpatched install of 10.13.1 on one Mac, connecting via Screen Sharing from another. To be clear, I never logged in as root on the 10.13.1 Mac at all, even via the exploit.