A major vulnerability discovered in macOS High Sierra that allows access to your Mac without a password

Thanks to the developer's input Lemi orhan, we have discovered a vulnerability that allows access to our Mac and therefore to all our data, even if we have the computer protected with a password. This developer has informed Apple immediately as soon as it discovered the vulnerability. Any user can log in to the administrator account, using the username "root" without a password. The same can be used to access from the home screen. We show you how to detect this vulnerability and how to fix it until Apple fixes the bug in the next update.

The first thing you should do is disable the guest user, to do this:

  • Accede to System preferences from the apple apple in the upper left corner.
  • Choose Users and Groups.
  • Choose guest user.
  • Now look for the option «Allow guests to connect to this computer »

The second step is to change the root password. For it:

  • Go back to the start of System preferences.
  • Users and Groups again.
  • This time, click on startup options.
  • Now access the button that appears below Network account server.
  • In the new window click: Open directory utility.
  • Now, in the taskbar, click on edit and change Root user password.

With this you will have your computer protected until Apple has prepared the security patch. However, the company should plan for such generic errors and avoid exposing our equipment in this way.


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: Miguel Ángel Gatón
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.