You won’t believe how easy it is.
There’s a bug in the latest version of MacOS that lets anyone log in to change settings with the username “root” and no password.
Apple hasn’t commented yet, but in the meantime, don’t let anyone physically use your Mac computer if you’re not there until Apple issues a fix.
People are upset with Apple over a nasty security flaw apparently discovered on Tuesday in the latest version of MacOS, called High Sierra.
On an up-to-date Mac, users can apparently gain access to change protected settings in certain circumstances by telling the system their username is “root” and a blank password.
Business Insider was able to replicate the bug on Tuesday. After plugging in “root” as our username and no password, it took two clicks to gain access to Users & Groups settings on a High Sierra system. The bug didn’t work on Mac with older software.
Apple didn’t immediately respond to a request for comment.
Tech: There’s an embarrassing and dangerous security hole in the latest Mac software (AAPL)
