I noticed today with Software Update that if you type in your password and then follow it with other characters, it will still work. For instance, if your password is "Blue", you could type in "Blue12sh" and it would still work. This seems to me like a minor, yet still possibly significant security flaw.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
OS X password issue?
- Thread starter Macco
- Start date
- Sort by reaction score
I think OS X only takes into account the first 6 (or is it 8?) characters of your password. So if your password is "password" (yes it's a silly password), then "passwor" would do fine, as would any word starting with "passwor".
As for security reasons, I don't think it's much of an issue if the first 6 characters are hard to guess.
As for security reasons, I don't think it's much of an issue if the first 6 characters are hard to guess.
This was a limitation with the versions of FreeBSD included with Jaguar and earlier versions of Mac OS X. I believe this issue is fixed with Panther.
