Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

With user switching enabled as a username + password combo, I was able to login to the root account from the login screen with no password on 10.13.1. It's not just a UI bug, it's a full on authentication bypass.


I'm able to do this as well, login as root with no password from the login screen.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: