If macOS High Sierra shows your password instead of the password hint

Post by rightos » Thu, Oct 05, 2017, 5:55 PM UTC

chmars wrote: post #3

Description: 'If a hint was set in Disk Utility when creating an APFS encrypted volume, the password was stored as the hint. This was addressed by clearing hint storage if the hint was the password, and by improving the logic for storing hints.' https://support.apple.com/en-us/HT208165

Post by baddox » Thu, Oct 05, 2017, 5:56 PM UTC

wallnuss wrote: post #4

how??! In what context does a clear-text password end up anywhere, except as the input for a hash function.

   storePassword(form[“password”])
   storeHint(form[“password”])

Post by georgespencer » Thu, Oct 05, 2017, 5:57 PM UTC

matt_wulfeck wrote: post #9

maxton wrote: post #5

It's rather frightening that a bug as serious as this one got past Apple's QA. It seems like the list of known problems with the new Disk Utility is growing - recently there was a submission about how High Sierra's Disk Utility did not show unformatted disks.

I really hope a head rolls for this mistake. That team needs some new leadership.

Post by mehrdada » Thu, Oct 05, 2017, 5:58 PM UTC

robinwassen wrote: post #10

wallnuss wrote: post #4

how??! In what context does a clear-text password end up anywhere, except as the input for a hash function.

You need to fetch the value to use as hint from the input somewhere. Doing a typo of writing passwordInput instead of passwordHintInput is not that unlikely, even though it is unfortunate.

Post by bdcravens » Thu, Oct 05, 2017, 5:59 PM UTC

pi-err wrote: post #6

egb wrote: post #2

I so wish Apple had not removed the older Sierra installer from the Mac AppStore... I need to update some machines but High Sierra does not seem ready for reliable use yet.

If you haven't updated yet, why would you need the Sierra installer? Nobody managing multiple machines would use a 1.0 anyway.