User Tweets significant security issue with macOS High Sierra to Apple Support

Apple is currently working on a software update to permanently fix the problem

MacOS users may want to mitigate the issue themselves by assigning a root password or disabling the root account in System Preferences - User Groups on your Mac device.

The bug was discovered by Lemi Orhan Ergin, whose Twitter profile shows him as a Turkish software developer.

The bug is quite similar to Apple's "root user" login feature as it might function if enabled by default and with a blank password.

You can also use this same flaw to access System Preferences on a computer whose settings you don't have access to.

Apple's macOS High Sierra has a fatal security flaw allowing anyone to bypass system security by logging in as "Root" with no password and clicking "unlock" numerous times. BGR staff tested the bug on several devices running the most recent version of MacOS High Sierra, and were able to log in as the root user easily, with access to all other user accounts.

A Mac Book Air
Lemi Orhan Ergin on Twitter: "Dear @AppleSupport, we noticed a *HUGE* security issue at MacOS High Sierra

From the account, you'll able to see everything on the Mac.

Once a password has been set for the "root" account, the flaw that allows a person to login as "root" with no password will no longer work.

Click the lock in the bottom left corner to unlock, then go to Edit (in the menu on your Mac) and "Change Root Password".

Apple has not yet officially fixed - let alone commented on - this critical bug. You can do this from the user login screen. Apple is generally good about patching issues like this quickly but for now, machines will remain vulnerable until they can push any updates.

Prince Harry-Meghan Markle engagement announcement 'imminent'
Markle has also reportedly had an official tea with Queen Elizabeth and Prince Harry and given her seal of approval. Markle's body-double in Suits Nicky Bursic has basically confirmed that she is quitting the show.

Related News:

  • Black Friday Brawl Forces Alabama Mall to Close Early

    Black Friday Brawl Forces Alabama Mall to Close Early

    A number of arrests were made after the brawl, though reports did not disclose who was arrested and what charges they might face. Additionally, a man in Columbia (Mo.) is being treated for a gunshot wound after being shot in the parking lot of a local mall.
    Death toll from Sinai mosque explosion hits 155

    Death toll from Sinai mosque explosion hits 155

    Egypt later said it would delay the opening of the Rafah border crossing to Gaza after the attack due to security concerns. The security officers said the men opened fire on worshipers during prayers while driving in off-road vehicles.
    It's confirmed, different types of alcohol trigger different emotions in people

    It's confirmed, different types of alcohol trigger different emotions in people

    Women were significantly more likely than men to associate each feeling - except for aggression- with all types of alcohol . Not just the men, women also reported that certain type of alcohol helped to achieve the certain type of feelings for them.
  • Here's why Gerry Adams is the newest big thing on Snapchat

    Here's why Gerry Adams is the newest big thing on Snapchat

    Sinn Fein has achieved solid progress in the Republic of Ireland, according to the latest opinion polls. Michelle O'Neill, 40, was elected as Sinn Fein's leader at Stormont (Northern Ireland parliament).
    Hafeez suspended for illegal bowling action

    Hafeez suspended for illegal bowling action

    Just a couple of months later, however, he was reported again during the Galle Test against Sri Lanka. Hafeez was previously banned in November 2014 and June 2015 because of an illegal bowling action.
    Target Beat 3Q17 Earnings Estimate, Earnings Remain Weak

    Target Beat 3Q17 Earnings Estimate, Earnings Remain Weak

    That easily beat Wall Street expectations on Wednesday of 86 cents per share, according to a survey by Zacks Investment Research . Telsey Advisory Group maintained Target Corporation (NYSE: TGT ) on Thursday, August 18 with "Outperform" rating.
  • North Korea's nuclear hit list revealed: Kim's targets for WW3 strike

    North Korea's nuclear hit list revealed: Kim's targets for WW3 strike

    Kyoto, Osaka, Yokohoma and Kyoto are among the Japanese targets, while Seoul, Degu and Jongwon in South Korea are also identified. North Korea joins Iran, Sudan, and Syria - the only countries designated by the U.S.as state sponsors of terrorism.
    Why Apple Inc. Bought AR Headset Startup Vrvana

    Why Apple Inc. Bought AR Headset Startup Vrvana

    The device can also transition from AR to VR seamlessly and has 360-degree positional and hand-tracking capabilities. Apple did not deny the story, though, and several employees who were previously with Vrvana are now with Apple.
    Six killed in shooutout in held Kashmir

    Six killed in shooutout in held Kashmir

    Two Army soldiers were killed and a CRPF jawan suffered injuries in an encounter in Pulwama district of the state on November 2. Reportedly, one of the dead militants was the son of Lashkar-e-Taiba chief Zakiur Rehman Lakhvi .
  • London police respond to 'incident' at Oxford Circus subway station

    London police respond to 'incident' at Oxford Circus subway station

    Unconfirmed reports on social media indicated that people were running away from the scene and locking themselves in shops. The station is closed while officers investigate the incident. "Our response on Oxford Street has now been stood down.
    Turkey indicates priorities in Syria before meeting in Sochi

    Turkey indicates priorities in Syria before meeting in Sochi

    White House spokeswoman Sarah Sanders confirmed the call, and said a readout from the USA side will be coming soon. Trump and Putin spoke informally several times earlier this month when they attended a summit in Vietnam.
    Bus photobombs flawless  shot of Georgia Dome demolition

    Bus photobombs flawless shot of Georgia Dome demolition

    Almost 5,000 pounds of explosives are on hand to blast the Georgia Dome in Atlanta to smithereens Monday at 7:30 a.m. A vast debris cloud hovered over the site before slowly drifting across downtown.


Most liked

UK Gov publishes Industrial Strategy
The white paper follows extensive engagement by government with industry, academia and business bodies who submitted nearly 2,000 responses to the green paper consultation earlier in 2017.

Amazon tool lets anyone create AR, VR experience
The resulting applications can run on Oculus and HTC Vive devices as well as iOS devices with WebVR-compatible browsers. In any case, users of the toolkit can create animated characters that interact with the player or customer verbally.

Jeff Bezos Worth Over $100B After Amazon's Black Friday Rally
The 53-year-old's investments in two other companies are The Washington Post and space tourism firm Blue Origin. Bezos' fortune now sits at $100.3 billion, up $2.4 billion following a 2 percent increase in Amazon's shares.

Get ready for Black Friday shopping
Additionally, feel free to chime in with the best discounts you've been able to find in the comments section below as well. Cyber Monday began in 2005 as a way to promote online retail, and the annual shopping day has grown from year-to-year.

Tencent Gains Exclusive PUBG Operating Rights In China, Vows To Demolish Cheaters
Tencent has secured the rights to publish PlayerUnknown's Battlegrounds but there will be changes to the game. The game also won "Best Multiplayer Game" and "PC Game of the Year" at this year's Golden Joysticks Awards.

Xavi Says Messi Should Stay His Entire Career at Barcelona
Messi's future has been the matter for much debate ever since the terms of his new contract were agreed nearly five months ago.

Marvel vs. Capcom Infinite Introduces Black Widow, Venom, and Winter Soldier
Over on the Capcom Unity Website is a pretty thorough breakdown of each of the new characters. With the unique ability to perform evasive maneuvers, catching Black Widow will not be easy.

Shootout in Delhi's Dwarka, five criminals arrested
Five people were apprehended in a shootout with Delhi and Punjab police at Dwarka Mor Metro Pillar 768. India TVsaid the firing started after the suspected gang of carjackers refused to surrender.

Trump names North Korea a state sponsor of terrorism
United Nations spokesperson Farhan Haq said the UN has "nothing to say" about the U.S. designation of North Korea as a state sponsor of terrorism .

Arabs prepare for Iran Security Council face-off
He alleged, "Iranian threats have gone beyond all limits and pushed the region into a risky abyss". Israel had also admitted providing medical support to the "civilians" injured in Syria.

Rafale deal: Govt says Congress charge shameful
She was flanked by the Defence Secretary and the Deputy Chief of the Indian Air Force on the podium, but only she answered the questions.

Aww: Apple won't be HomePod for Christmas
But voice control is created to work only with Apple Music, the company's $10 a month subscription service. The HomePod was created to compete with their counterparts like Sonos , Google Home , and Amazon Echo .

David Cassidy is suffering from organ failure
TMZ had reported that David was admitted to a Florida medical center three days ago and was suffering liver and kidney failure. A representative for David told Express.co.uk: "He was in an induced coma but he is now conscious and surrounded by family".

OH politician criticized for Facebook post 'trivializing' sexual assault
While O'Neill corrected the post to remove the mention of Taft, his original post was preserved for all eternity by a screenshot. Now can we get back to discussing legalizing marijuana and opening the state hospital network to combat the opioid crisis.

Nebraska unemployment for October lowest since 1999
The leisure and hospitality sector has grown by almost 2,500 with other services adding slightly more than 2,000 jobs this year. Bureau of Labor Statistics also released preliminary estimates on Thursday showing the state gained 4,800 jobs in October.