Interesting security bug - login bypass

Discussion in 'OS X Yosemite (10.10)' started by lauris, Jan 9, 2015.

  1. lauris macrumors newbie

    Joined:
    Jan 9, 2015
    #1
    I found a little nice security "feature" on my OSX Yosemite today. Lock your screen, verify that it asks for a password by pressing any key, hit "esc" and press any other key, and you are logged in without the need to enter a password. Could be a bug on my workstation, need to test on other computers too. Below is a demo video.

    https://www.youtube.com/watch?v=-w8g_vwOhN0
     
  2. simonsi macrumors 601

    simonsi

    Joined:
    Jan 3, 2014
    Location:
    Auckland
    #2
    On mine when you hit esc it returns to the user selection screen (ie the password entry field disappears). Further key press gets rejected as invalid pwd.
     

Share This Page