Interesting security bug - login bypass

[lauris]

I found a little nice security "feature" on my OSX Yosemite today. Lock your screen, verify that it asks for a password by pressing any key, hit "esc" and press any other key, and you are logged in without the need to enter a password. Could be a bug on my workstation, need to test on other computers too. Below is a demo video.

https://www.youtube.com/watch?v=-w8g_vwOhN0

 

[simonsi]

On mine when you hit esc it returns to the user selection screen (ie the password entry field disappears). Further key press gets rejected as invalid pwd.