Security: Get root on an OS X 10.10 Mac: The exploit is so trivial it fits in a tweet

Discussion in 'OS X Yosemite (10.10)' started by You are the One, Jul 22, 2015.

  1. You are the One, Jul 22, 2015
    Last edited: Jul 24, 2015

    You are the One macrumors 6502a

    You are the One

    Joined:
    Dec 25, 2014
    Location:
    In the present
  2. Partron22 macrumors 68000

    Partron22

    Joined:
    Apr 13, 2011
    Location:
    Yes
    #3
    I'll just sign off the internet now.
    Send me a postcard, postage due, when it's safe to come back online.

    Why is it I get asked for a password when I want to move a file into my utilities folder, when any jerk on the network can circumvent the password system completely and do as they will with my Mac?
    This security theatre regime with its sandboxing and code signatures and limiting of where we can download apps from becomes more ludicrous with each passing day.
     
  3. Kornelis macrumors member

    Kornelis

    Joined:
    Dec 4, 2010
    Location:
    Amsterdam, NL
  4. You are the One thread starter macrumors 6502a

    You are the One

    Joined:
    Dec 25, 2014
    Location:
    In the present
  5. 556fmjoe macrumors 65816

    Joined:
    Apr 19, 2014
    #6
    Yep.

    Or in the case of many universities, just by walking up to the room full of iMacs and picking one.

    edit: Though those at my university are running Mavericks, but the point remains. Local privilege escalations are a huge problem.
     

Share This Page