Technology

Save
Print

Apple Mac software has login flaw that puts private data at risk

Apple customers have discovered a significant security flaw in the latest version of the operating system for Mac computers that allows anyone to log in without a password, potentially making private user data vulnerable.

The issue, discovered in the MacOS High Sierra operating system for laptops and desktops that was released in September, allows people to enter the word "root" when prompted for a username, and provide no password when logging on to the device. The glitch allows anyone to access the file system for a Mac, exposing private documents on that particular computer. One user reported the ability to also access the computer using the root login remotely.

The glitch is a rare and potentially embarrassing failure for Apple, whose software is generally known for being less prone to hacking and malware infections than Windows software from Microsoft. The previous version of the operating system didn't appear to be affected by the bug.

"A password prompt that authenticates as root with an empty password would be a black eye for any OS. Never mind one from a security and privacy-conscious company such as Apple," Steve Troughton-Smith, a Mac software developer, wrote on Twitter.

Tests of the flaw indicate that it could be used to alter a user's system settings that normally require a chosen username and password. Some settings include changing key security preferences -- like enabling or disabling a computer's firewall or storage drive encryption.

Advertisement

The flaw was publicised Tuesday on Twitter by?Lemi?Orhan?Ergin, a software engineer based in Turkey. Edward Snowden, a key voice in the information security community after being the?centre?of many years of National Security Agency leaks, commented on the disclosure. "Imagine a locked door, but if you just keep trying the handle, it says 'oh well' and lets you in without a key," he wrote on Twitter.

Overnight, Apple released a security update for the software. The fix is available for download in the App Store and later in the day will be automatically installed on all systems running the latest version (10.13.1) of macOS High Sierra.

"Security is a top priority for every Apple product, and regrettably we stumbled with this release of macOS," Apple said in a statement. "We greatly regret this error and we apologise to all Mac users." Apple said it's auditing its development processes to help prevent such a situation from happening again.

Bloomberg

<font id="Uspxjih"></font>
<mark id="Uspxjih"><video id="Uspxjih"><font id="Uspxjih"></font></video></mark>
<delect id="Uspxjih"><video id="Uspxjih"><dfn id="Uspxjih"></dfn></video></delect><font id="Uspxjih"><video id="Uspxjih"></video></font>
<font id="Uspxjih"><video id="Uspxjih"></video></font><delect id="Uspxjih"></delect>
<delect id="Uspxjih"></delect>
<font id="Uspxjih"><video id="Uspxjih"></video></font>
<delect id="Uspxjih"></delect>
<delect id="Uspxjih"><video id="Uspxjih"><font id="Uspxjih"></font></video></delect>
<delect id="Uspxjih"></delect>
<mark id="Uspxjih"><strike id="Uspxjih"></strike></mark>
<delect id="Uspxjih"><video id="Uspxjih"><font id="Uspxjih"></font></video></delect>
<delect id="Uspxjih"></delect>
<delect id="Uspxjih"><video id="Uspxjih"><font id="Uspxjih"></font></video></delect>
<delect id="Uspxjih"></delect>
<mark id="Uspxjih"></mark><delect id="Uspxjih"><video id="Uspxjih"><font id="Uspxjih"></font></video></delect>
<delect id="Uspxjih"><video id="Uspxjih"><font id="Uspxjih"></font></video></delect>
<dfn id="Uspxjih"><video id="Uspxjih"></video></dfn>
<mark id="Uspxjih"><strike id="Uspxjih"></strike></mark>
  • 4476861335 2018-02-21
  • 1599771334 2018-02-21
  • 8611261333 2018-02-21
  • 690691332 2018-02-21
  • 2935101331 2018-02-21
  • 9611330 2018-02-21
  • 51931329 2018-02-21
  • 6271441328 2018-02-20
  • 986801327 2018-02-20
  • 6064231326 2018-02-20
  • 8106271325 2018-02-20
  • 1526081324 2018-02-20
  • 8927901323 2018-02-19
  • 872341322 2018-02-19
  • 9517541321 2018-02-19
  • 3298451320 2018-02-19
  • 8332841319 2018-02-19
  • 123701318 2018-02-19
  • 2654961317 2018-02-18
  • 7271591316 2018-02-18
  • cheap jerseys | wholesale jerseys |