Security Researcher Shows Off Now-Fixed macOS Hack That Used Microsoft Office

[bbeagle]

Remember this?
A serious bug in macOS High Sierra that enables the root superuser on a Mac with a blank password and no security check.

There was a few other major security issues in the last 3 or so years.
But that one above is probably the worst in years from any operating system.
(Excluding hardware bugs like Meltdown/Spectre, that were probably the biggest security bugs in years.)

If you have PHYSICAL ACCESS to a computer, I don't see how that's a huge security issue. If it's over the internet, then yes, any flaw is worse.

You can easily create a new password to get onto a mac laptop where you forgot the password (or stole). No problem if you have physical access to the laptop. I don't see how this is any different.

 

[jorgk]

You can easily create a new password to get onto a mac laptop where you forgot the password (or stole). No problem if you have physical access to the laptop. I don't see how this is any different.

Thats the point why one should encrypt.

 

[bbeagle]

Thats the point why one should encrypt.

I'm certainly glad I wasn't able to encrypt an old computer from 2001. Didn't remember the password, but was able to get into it and get old photos. If it was encrypted, I would have hurt nobody but myself.