This bug seems to present in macOS High Sierra 10.13.1 – the current version – as well as in the macOS 10.13.2 beta, but does not affect older versions of macOS, like Sierra or El Capitan.
Thanks a bunch for sharing this urgent issue with all of us, I'm going to change all the passwords right now and won,t keep anything into the keychain until it is resolved... What a pain!
Don't just change passwords - as @kslo said in another comment below, change your root password! If you're not comfortable with that, then at least disconnect your device from the internet. Don't get me wrong - there's only a small chance that you'll be targeted. Just keep in mind that your device's contents are susceptible. This includes saved passwords, even if they aren't in the keychain.
Everyone is bitchin about macs........ So how many times has windows been attacked????? Millions? Mac count on one hand. It is however getting more prevelant because more people are using macs. It has never been profitable for hackers to attack a mac when only 3% of computer users used mac. But this is different. This is an oversight by the apple team. The need to fix it and fix it now. They are still By far the best computer on the market..... Argue with me on that the next time you want to use your pc and windows decided its time to update, or try and shut it
off without going through a tons of procedures, and then there is the startup that takes a half hour just to get to where you can start answering all the update questions......macs are just a better computer
@naiahyoung Apple just released a patch for this issue. You can find it here. I advise everyone to install the security update as soon as possible. Click on App Store > Updates and install all updates.
So that is just the terminal applications way of masking your password. When you type sudo passwd root you are first asked for your standard user password. You will not see any anything being typed into the terminal window, but when you hit enter you should be prompted to type a new password for the root account.
I just posted a blog article here with instructions and screenshots to setting a new root password. Let me know if this works for you!
Well mine is a 100 year old iMac running is 10.6 and you can't even get new software for it so I will not be worrying..... It still runs what I need it for flawlessly....
Congratulations, your post received one of the top 10 most powerful upvotes in the last 12 hours. You received an upvote from @thejohalfiles valued at 89.29 SBD, based on the pending payout at the time the data was extracted.
If you do not wish to receive these messages in future, reply with the word "stop".
Congratulations @naiahyoung, this post is the third most rewarded post (based on pending payouts) in the last 12 hours written by a Superuser account holder (accounts that hold between 1 and 10 Mega Vests). The total number of posts by Superuser account holders during this period was 911 and the total pending payments to posts in this category was $4491.67. To see the full list of highest paid posts across all accounts categories, click here.
If you do not wish to receive these messages in future, please reply stop to this comment.
What a frustrating pain in the ass. Oh well better to be safe than sorry. Thanks for the info hope they come out with a patch soon in a new software update.
@naiahyoung,
I simply turned off other users in my system preferences. Then when I startup my Mac, I only get my user login prompt which requires my password. I think this would be a fix so that the only user prompt that comes up when you start your computer is yours and it is password protected, until Apple releases an update. I hope this helps! @Lymmerik
Thanks for sharing. I been a MAC user for so long... I haven't been effected. However I do recommend everyone to purchase a External HD and start saving all your important documents to that drive instead of the actual computer itself. I found that very usefully for keeping a fast and clean computer as well as keeping your important documents and passwords safe...
Wow, this is ridiculous. I feel like they are intentionally making the system vulnerable. How could they miss a bug this obvious?
This bug seems to present in macOS High Sierra 10.13.1 – the current version – as well as in the macOS 10.13.2 beta, but does not affect older versions of macOS, like Sierra or El Capitan.
Yeah, seems to just be the current version according to tech crunch.
Thanks a bunch for sharing this urgent issue with all of us, I'm going to change all the passwords right now and won,t keep anything into the keychain until it is resolved... What a pain!
Namaste :)
Don't just change passwords - as @kslo said in another comment below, change your root password! If you're not comfortable with that, then at least disconnect your device from the internet. Don't get me wrong - there's only a small chance that you'll be targeted. Just keep in mind that your device's contents are susceptible. This includes saved passwords, even if they aren't in the keychain.
I just dealt with it, DONE!
Definitely! Y’all are family!
OMG! I hate them!
Yeah!! WTF!!! OMG!!!!!! I am freaking out!!!
Everyone is bitchin about macs........ So how many times has windows been attacked????? Millions? Mac count on one hand. It is however getting more prevelant because more people are using macs. It has never been profitable for hackers to attack a mac when only 3% of computer users used mac. But this is different. This is an oversight by the apple team. The need to fix it and fix it now. They are still By far the best computer on the market..... Argue with me on that the next time you want to use your pc and windows decided its time to update, or try and shut it
off without going through a tons of procedures, and then there is the startup that takes a half hour just to get to where you can start answering all the update questions......macs are just a better computer
Stay Safe @naiahyoung
Keep STEEM N ON,
Frank
So there's a pretty simple fix for this. All you have to do is change the password for the root account. If you open the "terminal" app and type:
This will ask you for a new password for the root account. But don't forget this password or you may have problems in the future.
^ Do this
Mine has a Key 🔑 and I can’t type anything...
@naiahyoung Apple just released a patch for this issue. You can find it here. I advise everyone to install the security update as soon as possible. Click on App Store > Updates and install all updates.
Thanks so much!!!
So that is just the terminal applications way of masking your password. When you type
sudo passwd rootyou are first asked for your standard user password. You will not see any anything being typed into the terminal window, but when you hit enter you should be prompted to type a new password for the root account.I just posted a blog article here with instructions and screenshots to setting a new root password. Let me know if this works for you!
How can this big company make a mistake like this? This type of vulnerability is very old, how can apple customers trust their data like this?
helpfully videos
thanks nice blog
Thanks.
To be more specific, this impacts Macs running the latest version of High Sierra — 10.13.1 (17B48).
Here's an article on TechCrunch with some more info, including a temporary solution from Apple: https://techcrunch.com/2017/11/28/astonishing-os-x-bug-lets-anyone-log-into-a-high-sierra-machine/
TLDR; DON'T LEAVE YOUR MAC UNATTENDED UNTIL THIS IS FIXED.
I don't use a mac but will share this for others
Yeah! Thank you. Looks like there is an update available now. Check your updates on your Mac.
Oh my God I also hate them 😎 @naiahyoung
OMG ! I was going to sleep when I saw your post !!!! So stress !!! THANK YOU ! Will have a look at it !!!!!!
Omg I know I’m sorry but I just had to let all you know...
Well mine is a 100 year old iMac running is 10.6 and you can't even get new software for it so I will not be worrying..... It still runs what I need it for flawlessly....
Haha old tech, sometimes it is amazing and reliable.
Goddamnit, I just updated to that version a few weeks ago...also i switched to MAC after having major issues with windows,lol. ffs
Thank you for bringing this to our attention, much appreciated.
I had no idea!
You are welcome!
How long did the apple know about the same thing ??
Congratulations, your post received one of the top 10 most powerful upvotes in the last 12 hours. You received an upvote from @thejohalfiles valued at 89.29 SBD, based on the pending payout at the time the data was extracted.
If you do not wish to receive these messages in future, reply with the word "stop".
Congratulations @naiahyoung, this post is the third most rewarded post (based on pending payouts) in the last 12 hours written by a Superuser account holder (accounts that hold between 1 and 10 Mega Vests). The total number of posts by Superuser account holders during this period was 911 and the total pending payments to posts in this category was $4491.67. To see the full list of highest paid posts across all accounts categories, click here.
If you do not wish to receive these messages in future, please reply stop to this comment.
What a frustrating pain in the ass. Oh well better to be safe than sorry. Thanks for the info hope they come out with a patch soon in a new software update.
Thanks, will have to check deeper into this when I get home from work.
@naiahyoung,
I simply turned off other users in my system preferences. Then when I startup my Mac, I only get my user login prompt which requires my password. I think this would be a fix so that the only user prompt that comes up when you start your computer is yours and it is password protected, until Apple releases an update. I hope this helps!
@Lymmerik
That's a shock... On of the best company in world and most robust OS having such vulnerabilities...
Right!!
Thanks for sharing. I been a MAC user for so long... I haven't been effected. However I do recommend everyone to purchase a External HD and start saving all your important documents to that drive instead of the actual computer itself. I found that very usefully for keeping a fast and clean computer as well as keeping your important documents and passwords safe...