Live data from Hacker News

macOS High Sierra: Anyone can login as “root” with empty password

twitter.com

971–980 of 1001 posts

Re: macOS High Sierra: Anyone can login as “root” with empty password

#971
post #544

Earlier quoted context omitted.

I'll agree that Snow Leopard is the high water-mark.

It can't be a coincidence that this was the last major release before Steve Jobs died.

It can’t be a coincidence because it’s not true. Lion was released well before SJ’s death.

Unless you’re arguing Lion wasn’t major because you didn’t like it, but that’s an argument that proves to much, methinks.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#973

Earlier quoted context omitted.

If you urgently want Apple to fix something, you do not file quiet bug reports. Apple only responds reliably to PR storms. This vulnerability is ridiculous, unacceptable, and braindead to execute.

> Apple only responds reliably to PR storms They've been quick (within 45 days) to patch every major bug I've reported to them and where the bugs were cross platform, impacting Windows, Android, etc., they've consistently been amongst the quickest to issue a patch so I'm not sure how you qualify that statement.

Sorry. 45 days is not quick.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#974

Earlier quoted context omitted.

This seems to be why: https://objective-see.com/blog/blog_0x24.html

To some up, when you try to log in with a disabled account, MacOS "promotes" the account but uses the _password provided by the user trying to log in_ instead of the password on file (in this case, an asterisk indicating the account is disabled). Once that is done, you can log in with that account. IMHO these are two separate bugs: promoting disabled accounts and using the password the user typed in instead of the va…

I assume that it can't use the password in the password list as that should be hashed already.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#975
post #846

Earlier quoted context omitted.

The higher the poster's karma, the higher her comment will be upon posting. This user has almost 6k karma, so it can rise high. Once the comment is at the top for a minute or so, it can stay there if enough people keep upvoting it. Try it and post a top level comment now. I'm pretty sure it won't be at the top initially because you don't have enough karma for that.

I have also seen new comments spring to the top of the conversation, but always assumed they were selected randomly, as some of them were from posters who were fairly new or had a low karma count.

I guess this happens if the other posters are of low karma, or if the other comments are quite old.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#976
post #878
post #846

Earlier quoted context omitted.

The higher the poster's karma, the higher her comment will be upon posting. This user has almost 6k karma, so it can rise high. Once the comment is at the top for a minute or so, it can stay there if enough people keep upvoting it. Try it and post a top level comment now. I'm pretty sure it won't be at the top initially because you don't have enough karma for that.

Ah thanks, now it makes sense. I always wondered why sometimes my comments went straight to the top. I've lost too much productivity here, clearly! ;)

Yeah I only know because I‘ve watched my posts gain better positions when I hit 1k karma (iirc).

Re: macOS High Sierra: Anyone can login as “root” with empty password

#977

Earlier quoted context omitted.

>It is only now starting to improve, with gigantic efforts from Microsofts side. Is it? They axed their internal QA and definitely aren't catching all the bugs with the "Insiders Program." After the Fall Creator's Update I've had to log in twice (after the first one I just get sent back to the login screen). The workaround is disabling a setting: "Use my sign-in info to automatically finish setting up my device after…

Maybe not quality wise in all areas (I agree with you there) but at least in giving a professional and modern impression compared to let's say Windows XP/7. Maybe operating systems are declining in quality in general, even though organizations sometimes try to improve them. I guess legacy plays a big role here.

Saw this on the Windows 10 subreddit and got a sad chuckle out of it: https://i.redd.it/dvzzftkyzyiz.png

They definitely have a more modern design language going, but they're not exactly consistent about it.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#978
post #967

Earlier quoted context omitted.

It's a mental lock in now a days. Most people don't realize but the vast majority of Video Editing was Windows based till about 2010 when Final Cut was considered best in class (I can't stand Final Cut myself but to each their own...) The vast majority of video editing is now Premier due to Apple's handling of Final Cut Pro and the lack of support for the Mac Pro (They usually sit in back rooms as expensive file serv…

> Also most people mentally think that somehow Apple is better for design but the software runs just as well on Windows. Back in the PowerPC days, a large part of every keynote was getting Phil on to press the spacebar so we could all see how much slower Photoshop was at making the poster for Inspector Gadget. Can't help but feel like this was where a lot of people cut their teeth on this opinion. While Mac OS 9 and…

> PowerPC days

But that was all a lie about the speed of Macs. It was absolutely smoke and mirrors. Intel CPU blew the doors off the Power PC. Case in point, Apple switched from Power PC to Intel and saw a huge speed increase. The "Cult of Mac" was 100% anti-Intel and people would tell me that the G5 Power PC was the fastest personal computer you could buy. All lies and dishonesty. Apple for years caused huge animosity of "Apple Fanboys" vs Intel.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#979
post #434

Earlier quoted context omitted.

> But since I don't work there, I have no good inside info Actually, I've been wondering why I hear less about people working at Apple than at other big tech companies. It seems everyone and their mother work at Google or Facebook, but no so much at Apple. Do they have less software engineers, or their employees are required to be more discrete?

> or their employees are required to be more discrete? Yes, I believe so. I've heard there are strict requirements on even internal discussion. (Who you can talk to; about what; where.)

Presumably this is why their software is increasingly shoddy. But I wonder whether it's a direct effect of poor internal communications, or an indirect effect where the ludicrous secrecy has driven away any half-decent programmers.

Re: macOS High Sierra: Anyone can login as “root” with empty password

#980
post #939

Earlier quoted context omitted.

I'm not sure I agree with this. Or at least it goes too far to say that it's a mental lock in. Yeah Apple is making some very bad mistakes in their software quality, but there are two things that are very essential to the Mac experience that still make it the most straightforward choice. One key advantage Macs have over Windows is that they run Unix. You can open a terminal and be involved with most of the Linux/Unix…

> One key advantage Macs have over Windows is that they run Unix. You can open a terminal and be involved with most of the Linux/Unix monoculture that exists and have access to much the same tools. No VMs and all the hassle they bring to take into account, mostly at least. Thankfully we are getting there with "Windows Subsystem for Linux." I am using the OpenSUSE subsystem which you can install in the Windows 10 stor…

> Thankfully we are getting there with "Windows Subsystem for Linux."

But then you have to run Windows. I still prefer MacOS by a large margin. I would move to Linux, but I want Photoshop and more of that without having to start a Windows VM.

Post reply on HN