Just as a very simple, isolated example, think of all the Mac Mini servers with Remote Management enabled at https://macminicolo.net https://macminicolo.net .

Just as a very simple, isolated example, think of all the Mac Mini servers with Remote Management enabled at https://macminicolo.net https://macminicolo.net . As I mentioned below, this remote exploit did NOT require ever logging in as root, whether with or without a password. This was a much more serious bug than is commonly understood.