Tuesday, 18 December, 2018

MacOS High Sierra Users: Change Root Password Now

Apple's Senior Vice President of Software Engineering Craig Federighi introduces macOS High Sierra during Apple's World Wide Developers Conference in San Jose California Apple’s macOS High Sierra system has a major security vulnerability Apple is working to fix
Derrick Tucker | 29 November, 2017, 01:07

A newly-discovered vulnerability in macOS High Sierra allows anyone with access to your laptop to quickly create a root account without entering a password, bypassing any security protocols you have set up.

Without explaining what the actual bug is (we don't want to make it any easier for potential hackers than this already is, and you can find it on Twitter pretty easily), someone can login to a Mac by typing a word in the login field, leaving the password field blank, and attempting to log in several times. "Still, anyone with a Mac needs to keep an eye on soon forthcoming updates and patches", he said.

iTnews was able to replicate the flaw and access a Mac without a password as the root superuser from the main log in screen. A spokesperson for Apple was not immediately available for comment.

Choose Edit Change Root Password and enter a new, non-trivial password. Even so, anyone running any version of High Sierra should take the utmost precaution with their systems until Apple sorts this entire mess out. This is a level of access that is well in excess of a normal admin account that is created when adding users on a Mac. You can do this from the user login screen. Anything you can imagine an attacker can do, they can do with this exploit.

The 5 best macOS High Sierra beta updates
High Sierra is the most recent operating system for Mac

If a bad actor exploited this security bug, they'd get System Administrator access - meaning that person could read and write over virtually any part of the computer system, including files in other macOS user accounts.

Currently, there is no official fix from Apple regarding the issue. Just open System Preferences Security & Privacy and click the lock button at the bottom of the window.

Go to System Preferences then click Users & Groups (or Accounts).

Once in the "Join" menu, click on "Open Directory Utility".

Lennie James joins Fear the Walking Dead as series regular
But soon there were speculations that the crossover character in question would be Abraham Ford essayed by Michael Cudlitz . A few years after the premiere of Fear the Walking Dead , the TWD franchise denied any plans for crossovers.

CNN Slams Donald Trump Following His "Fake News" Comment
CNN's communications team fired back minutes later, tweeting, "It's not CNN's job to represent the U.S to the world". Since Trump's inauguration, CNN has taken a more hostile tone towards the president and many of his staff.

Raiders' Michael Crabtree ejected after fight with Aqib Talib
Several Broncos players surrounded Crabtree as he tussled with Talib before his Raiders teammates could come to his assistance. The Raiders extended their lead before halftime on a Marshawn Lynch touchdown run to hold a 14-0 advantage.

Recommended

Warriors' Curry, Durant, Green, Iguodala questionable for Monday Warriors' Curry, Durant, Green, Iguodala questionable for Monday Durant told reporters there's swelling inside the joint and he's improving daily. "I think he was like 0-for-10". Durant's status for Wednesday's game against the Lakers is up in the air.

BBB's safety tips in wake of Massage Envy allegations BBB's safety tips in wake of Massage Envy allegations According to BuzzFeed , over 180 women have reported sexual assaults at different locations across the country. Another woman in OR said that her massage therapist also sexually assaulted and ejaculated on her.

Meghan Markle Says She's Leaving Acting To Focus On Royal Duties Meghan Markle Says She's Leaving Acting To Focus On Royal Duties They will visit Nottingham, where Prince Harry started the Full Effect programme in 2014 through The Royal Foundation. Prince Harry has quite a few family memories at the location that he and Meghan Markle will marry in May .

Giving back on #GivingTuesday: How you can take part Giving back on #GivingTuesday: How you can take part In 2016 #GivingTuesday sparked $168 million in charitable donations worldwide, topping the previous year's tally by 44%. After Black Friday and Cyber Monday comes #GivingTuesday , a day created to help kick off the charitable season.

BRC responds to publication of industrial strategy paper BRC responds to publication of industrial strategy paper The first of these challenges is to "put the United Kingdom at the forefront of the artificial intelligence and data revolution".

White House is said to weigh personal mobile phone ban for staff White House is said to weigh personal mobile phone ban for staff However, Kelly had not really used the personal phone since joining the Trump team, according to White House officials. Kelly's personal cell phone was compromised for several months earlier this year, Politico reported last month.

Massachusetts Gas Prices Down 5 Cents this Week Massachusetts Gas Prices Down 5 Cents this Week This December drivers will not find significant savings at the gas pump but, AAA says, early 2018 looks promising. That is about 10 cents lower than last week's average and up 44 cents from the same time previous year .

KU and Mizzou meet in NCAA volleyball tournament KU and Mizzou meet in NCAA volleyball tournament In fact, UCLA has hosted area-rivals Lipscomb and Murray State in the previous two season's NCAA Tournament opening-round matches. You never know what can happen. 24 Ohio State (9/10), No. 23 Michigan State (9/15) and No. 21 Florida State (10/1).

Aqib Talib talks about brawl with Michael Crabtree Aqib Talib talks about brawl with Michael Crabtree Broncos cornerback Chris Harris, Jr . said Crabtree sucker-punched him in the groin on the play prior to the fight breaking out. Talib has since come forth to explain his side of the story, saying all he did is come out " to play football on Sunday ".

Security for Ivanka Trump Security for Ivanka Trump The summit is being hosted for the first time in South East Asia by the Governments of India and the United States. This GES is organized by NITI Aayog in partnership with the US State Department and other American agencies .

Jennifer Lawrence Opens Up About Moving Forward From Her Films Jennifer Lawrence Opens Up About Moving Forward From Her Films Lawrence, who recently split from Mother director Darren Aronofsky, has just wrapped what will reportedly be her last X-Men movie. Actress Jennifer Lawrence has reportedly parted ways with filmmaker Darren Aronofsky after dating him for nearly a year.

Florida finalizing deal with Dan Mullen Florida finalizing deal with Dan Mullen He was earning $4.5 million per year at Mississippi State , which was 14th in the country and fourth in the conference. The person spoke to The Associated Press on the condition of anonymity because Mullen has not told his team.

Atlanta Falcons outlast Buccaneers to win 3rd in a row Atlanta Falcons outlast Buccaneers to win 3rd in a row The Buccaneers defense is going to have nightmares about Jones until they face the Falcons again on December 18. Sanu botched a fake handoff to Tevin Coleman , but regained control of the ball and hit Jones in the end zone.

Tennesseans react to potential head coach shift to Greg Schiano Tennesseans react to potential head coach shift to Greg Schiano During his 11 season tenure as the leader of the Scarlett Knights, Schiano managed to produced six winning seasons. Tennessee is facing severe backlash for their decision to hire Greg Schiano as their next head coach.

Tom Baker Returns to 'Doctor Who' in Live-Action 'Shada' Scene Tom Baker Returns to 'Doctor Who' in Live-Action 'Shada' Scene The Guardian reports Tom Baker has donned his iconic scarf once more to film a "lost" episode of the BBC TV show from 1979. The lost episode will be available to buy on digital download and will be released on DVD and Blu-ray on December 4.