No, It's not a major issue... But it's still sloppy work from Apple
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
macOS High Sierra's App Store System Preferences Can Be Unlocked With Any Password [Updated]
- Thread starter MacRumors
- Start date
- Sort by reaction score
One thing I'm wondering is why Apple made such substantial changes to its authentication/security code. These bugs showed up in High Sierra; they are not in Sierra. However, there's not a lot of difference in how security/authentication works from a user's perspective between Sierra and High Sierra.
My question is, what did they change underneath that resulted in these bugs, and why? What was wrong with the old code that they felt they needed to muck about with it? If we had new security features, I'd understand code changes that might result in bugs. But we don't.
My question is, what did they change underneath that resulted in these bugs, and why? What was wrong with the old code that they felt they needed to muck about with it? If we had new security features, I'd understand code changes that might result in bugs. But we don't.
Apple get your act together.
It used to work quite well, "it just worked", it was aesthetic, it was safe.
Yearly updates are nonsense and this is what we're dealing with now.
I cannot believe that they are not listening to the things that Steve has said about "marketing" ruling a company. I cannot believe that they do not remember how slimming down the product line made it easier to focus and create stable products.
It's not that Microsoft is so much better, granted. But Apple used to be better.
It used to work quite well, "it just worked", it was aesthetic, it was safe.
Yearly updates are nonsense and this is what we're dealing with now.
I cannot believe that they are not listening to the things that Steve has said about "marketing" ruling a company. I cannot believe that they do not remember how slimming down the product line made it easier to focus and create stable products.
It's not that Microsoft is so much better, granted. But Apple used to be better.
Its outrageous that another issue like this exists, but I would hardly say this is "rather serious." Bit of a reach on MacRumors part.
How does this even happen? How can you have authentication code that in one place accidentally accepts any password? That's just awful. The rot must go deep.
This is so stupid that I’m starting to wonder if there is someone inside Apple actively trying to sabotage the company.
It sounds like the Apple software team needs a major shakeup, and more resources (Apple is notorious for pulling engineers off one project to work on another, usually anything iOS related). I think they are just spreading themselves too thin these days.
Testing needs to be a priority. I think the annual release schedules (centered around WWDC and fall iPhone rollouts) are making rush jobs and things like testing are probably the first thing to get less attention to make up time.
Testing needs to be a priority. I think the annual release schedules (centered around WWDC and fall iPhone rollouts) are making rush jobs and things like testing are probably the first thing to get less attention to make up time.
10.13.2: I can reproduce this when already logged in as an admin user, but not when logged in as a non-admin user.
THIS is the reason why I haven't upgraded to High Sierra yet, regardless of the weekly notifications that won't go away! The whole thing has been a disaster from start to finish. Just call it Vista and get the equivalent of W7 released.
Bugs happen, but Apple is having a Microsoft Windows moment with High Sierra. What a PR nightmare (and rightly so).
jesus apple. For an OS release that was supposed to be a "no new features - focus on quality and performance" release, High Sierra is beyond a dumpster fire.
Yup, this is why I always install one generation older MacOS. I think it's time I did it with both MacOS and iOS.
I don't understand why when a security flaw is found some @sshole has to go around and tell everybody about it. How about just making sure Apple knows and leave it at that? Jeez.
I don't think this is about how "serious" this bug is.
Probably no malicious user can take advantage of this - that's great but that doesn't mean Apple should be praised for it.
This shows how careless Apple has become when it comes to macOS. This is such an obvious bug that should have been easily caught by automated tests. On the stage Apple execs love bragging about how they care about security but in reality we've got two password-related stupid-level bugs in the same major release of their OS.