"Hey Siri" support and possibly wireless charging case alongside AirPower charging mat.
Apple Releases macOS High Sierra Security Update to Fix Root Password Vulnerability
Apple today released Security Update 2017-001 to fix a serious vulnerability that enables access to the root superuser account with a blank password on any Mac running macOS High Sierra version 10.13.1.
The critical bug, which gained attention after it was tweeted by developer Lemi Ergin yesterday, lets anyone gain administrator privileges by simply entering the username "root" and a blank password in System Preferences > Users & Groups.
The security update is rolling out on the Mac App Store now, and it should be installed by all users running macOS High Sierra as soon as possible. Regardless, starting later today, Apple said the security update will be automatically installed on all Macs running macOS High Sierra 10.13.1.
Apple has since apologized for the vulnerability in a statement issued to MacRumors:
The critical bug, which gained attention after it was tweeted by developer Lemi Ergin yesterday, lets anyone gain administrator privileges by simply entering the username "root" and a blank password in System Preferences > Users & Groups.
The security update is rolling out on the Mac App Store now, and it should be installed by all users running macOS High Sierra as soon as possible. Regardless, starting later today, Apple said the security update will be automatically installed on all Macs running macOS High Sierra 10.13.1.
Apple has since apologized for the vulnerability in a statement issued to MacRumors:
Security is a top priority for every Apple product, and regrettably we stumbled with this release of macOS.The vulnerability does not affect macOS Sierra or any other previous version of the operating system.
When our security engineers became aware of the issue Tuesday afternoon, we immediately began working on an update that closes the security hole. This morning, as of 8 a.m., the update is available for download, and starting later today it will be automatically installed on all systems running the latest version (10.13.1) of macOS High Sierra.
We greatly regret this error and we apologize to all Mac users, both for releasing with this vulnerability and for the concern it has caused. Our customers deserve better. We are auditing our development processes to help prevent this from happening again.
[ 288 comments ]
Top Rated Comments
(View all)
14 months ago
How embarrassing...
I wish Apple did a better job testing their releases. We used to enjoy such high quality when it came to software updates and releases.
I wish Apple did a better job testing their releases. We used to enjoy such high quality when it came to software updates and releases.
14 months ago
How embarrassing...
I wish Apple did a better job testing their releases. We used to enjoy such high quality when it came to software updates and releases.
You ever heard of Windows? Perhaps you should read up on that OS if you haven't.
Also, give me a break. Nobody finds everything, not even "Apple". Patched quickly and painlessly. Move along.
14 months ago
You ever heard of Windows? Perhaps you should read up on that OS if you haven't.
Also, give me a break. Nobody finds everything, not even "Apple". Patched quickly and painlessly. Move along.
Three... count 'em... THREE... critical and ridiculous security issues with Mac OS High Sierra within as many months. This one, the Disk utility one, and the keychain one. And that's just the security issues...
There's no excuse for it. Saying "well, microsoft is just as bad" just means that Apple is stooping to Microsoft's level... but I'd actually venture to say that Apple is starting to get worse than Microsoft when it comes to Mac OS vs Windows.
14 months ago
This is actually an argument in favor of public disclosure of vulnerabilities. Lemi Orhan Ergin was catching a lot of criticism yesterday for posting it on twitter, but if this bug had been reported privately, it would have taken much longer to fix, while malicious actors would be able to exploit it all along.
14 months ago
Let's face it. Every operating system or application will come across vulnerabilities, but it doesn't truly matter how bad or embarrassing they are (like this one was).
The real test of a quality company is how fast they can provide the update/patch to fix the security issues.
This was a big miss on the "QA front end" for Apple, but it was an excellent timely response to an urgent issue.
The real test of a quality company is how fast they can provide the update/patch to fix the security issues.
This was a big miss on the "QA front end" for Apple, but it was an excellent timely response to an urgent issue.
14 months ago
Does Craig loose some stock options for this and other software bugs that seem to become more prevalent with Apple software?
14 months ago
How embarrassing...
I wish Apple did a better job testing their releases. We used to enjoy such high quality when it came to software updates and releases.
Typical knee-jerk response from someone who doesn't understand the nature of the bug or the scope of OS development and testing.
[ Read All Comments ]
Apple this week released iTunes 12.8.1 for OS X Yosemite up to macOS High Sierra. The minor update resolves an issue that prevented iTunes from streaming media to third-party AirPlay speakers, and...
Earlier this month, we told you about an auction for a Steve Jobs business card listing him as Chairman of the Board at Apple Computer. The business card features Apple's classic rainbow logo and...
For this week's giveaway, we've teamed up with Speck to offer MacRumors readers a chance to win an iPhone case bundle for the iPhone XR, XS, XS Max, X, or 8/8 Plus that comes with a Presidio...
Best Buy today kicked off a new three-day sale that will last all weekend and end on Sunday at 11:59 p.m. CT. The sale is full of great last-minute gift ideas for the holidays, and Best Buy still...
Satechi today announced that three of its USB-C hubs are now available to pre-order in a gold color that resembles the finish of the latest MacBook Air.
Slim USB-C Multi-Port Adapter V2 -...
Apple is reportedly looking to shift production of older iPhones to Taiwanese supplier Pegatron in an effort to avoid losing billions in revenue as a result of its patent dispute with Qualcomm.
...
In macOS, transparency – or more properly, translucency – is a visual effect many apps use to create a sense of depth by hinting at content residing in the background.
An example of...
Commonwealth Bank (CBA) today announced that next month it will become the second of Australia's "Big Four" banks to support Apple Pay, ceding to customer demand after a multi-year...
