Live data from Hacker News

AppStore Preferences can be unlocked by a local admin with any bogus password

openradar.appspot.com

171–180 of 190 posts

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#171
post #160

Earlier quoted context omitted.

In this case we’re talking about just one baby :)

Just hire a woman who is in her 3rd trimester and you can cut that baby down to 3 months. ...

Visit the maternity ward. Problem solved.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#172
post #69

Earlier quoted context omitted.

I heard rumors that Apple is moving towards one unified App development process for both macOS and iOS Is it possible that this is related to that?

Microsoft Cairo...finally!

You mean Taligent: https://en.wikipedia.org/wiki/Taligent

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#174
post #25

Though it is "queer", it doesn't seem to be that much a security issue, or - more probably - I am failing to understand the risk implied. Can anyone describe a possible scenario where this would pose a security risk?

It isn't a big bug. It just adds to the pile of evidence that Apple has been careless with security on macOS.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#175

Earlier quoted context omitted.

So which team might have screwed up here? Is this a UI issue or a backend/system library issue? What about the previous root account unlock issue?

I actually put the blame on Agile. A few years ago there was a noticeable increase in the frequency of point updates at the expense of quality. In agile, testing either (a) relies heavily on automation or (b) only tests that particular story. In highly complex systems that's often not sufficient and rarely do security teams for example involve themselves on a per story basis. Personally I think the industry as a whol…

No, a lot of Agile teams do have integration tests and higher level tests

But the TDD cargo-culters and UncleBob fans forget that inconvenient fact and think TDD solves ALL problems

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#176
post #59

This does not help at all for the drubbing that macOS High Sierra has been getting recently. Long term OS X users have been waiting for a Snow Leopard like release, but it seems like Apple isn’t taking as much care as required on security and stability on the Mac. Something has to give — either Apple’s organizational structure needs a change or Apple needs to abandon certain things completely instead of releasing sub…

> it seems like Apple isn’t taking as much care as required on security and stability on the Mac It's even worse than that according to[0] Mark Gurman[1]: In another sign that the company has prioritized the iPhone, Apple re-organized its software engineering department so there's no longer a dedicated Mac operating system team. There is now just one team, and most of the engineers are iOS first, giving the people wo…

> "there's no longer a dedicated Mac operating system team"

That took some time for me to sink in. I can fully understand the aversion towards dedicated teams á la Jobs, but we are talking about an OS that is used keenly by developers, an ecosystem essential to maintain. I was baffled by Apple not pushing ZFS further, the clear lack of interest in developers by not working on e.g. virtualisation, e.g. containers, a polished OpenSolaris or similar with tools we could make MacOS even greater. Like they couldn't afford it.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#177

Earlier quoted context omitted.

This is not true in general. Linux Desktop UIs like Gnome 3 have taken a lot of criticism precisely because they have not been copying Windows and have deviated considerably (due to patent concerns). Of course, there are some fringe "garage effort" Linux distros that don't care about patents and do just give some part of the community what they want. As for innovation, Linux desktop UIs had virtual desktops and windo…

> This is not true in general. Linux Desktop UIs like Gnome 3 have taken a lot of criticism precisely because they have not been copying Windows and have deviated considerably The criticism towards Gnome 3 is due to the reduced usability, customizability, constant breaking of backwards compatibility (especially when it comes to parts that allow customization), treating the desktop like an overgrown tablet and a gener…

I'm not a Gnome 3 user or affiliated with Gnome. Personally I find it rather too bloated and sometimes buggy. I use i3, polybar and Rofi for my desktop. I think you are reading rather too much into my words, my point was only that, in general, Windows is not being copied by Linux desktops. And that only "some part" of the community want a Windows clone.

I take your point that Gnome 3 is criticised for many additional reasons other than deviating from Windows.

Gnome is basically controlled by RedHat, a billion dollar company and they absolutely do care about software patents, they are not like most projects. Linux Mint is what I had in mind as a "garage effort" providing, IMHO, a Windows clone.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#178
post #4

Cmon Apple I know security people are in short supply but: A) You have the resources B) This is the type of bug that any semi decent QA process should catch anyway

It seems like the type of bug that there should be a unit test for.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#179

Earlier quoted context omitted.

> Apple still seems to have the best hardware overall The example comparison you gave, an X1 Carbon, has a more reliable keyboard with more travel, a matte-screen option without fragile glass, a user-replaceable battery, a user-replaceable NVMe drive, a variety of ports new and old, a docking solution, security cable lock etc

As a counterpoint, the display inverter on my 3433CTO failed after 18 months. It's a $19 part - Lenovo wanted $400 to repair it. I moved to the Dell XPS 9350. The display failed. The wifi card is a $5 part in a $3000 machine and failed.

My X1 Carbon came with a 3 year on-site repair warranty as standard, included in the price (contrast this with AppleCare which is very expensive). Did you buy yours from Lenovo?

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#180

This does not help at all for the drubbing that macOS High Sierra has been getting recently. Long term OS X users have been waiting for a Snow Leopard like release, but it seems like Apple isn’t taking as much care as required on security and stability on the Mac. Something has to give — either Apple’s organizational structure needs a change or Apple needs to abandon certain things completely instead of releasing sub…

I'm also a long-time Mac user, but I've really had about enough of this. Between the seemingly constant stream of security problems and the dumbing down of OSX (MacOS, whatever), I'm not sure I'm willing to pay a premium for this product anymore. At the same time the Apple seems to be dropping the ball, some of the more noob-friendly linux distros are starting to look very attractive. And while Apple still seems to h…

I've been using the 1Password Chrome extension on Linux. It works pretty well.
Post reply on HN