MacOS High Sierra bug allows anyone to unlock a Mac with blank password

Apple working on emergency fix for flaw that allows access by using username ‘root’, which bypasses security settings locally and in some cases remotely

A serious security flaw found in the latest version of Apple’s macOS High Sierra could allow anyone to access a locked Mac computer using the user name “root” and no password.

The security flaw, discovered a couple of weeks ago and disclosed in an Apple developer support forum, has been shown to work within the software’s user preferences screen and other places. Once triggered, the same combination will also allow access to a locked Mac computer running its latest operating system.

Continue reading...

from The Guardian http://ift.tt/2AGhiNE