28-11-2017 22:50 via macworld.com

macOS High Sierra ‘root’ security issue allows admin access without a password—but there’s a fix

On Tuesday, a macOS 10.13.1 security issue was revealed—a flaw that allows root access to a Mac without the need for a password. Developer Lemi Orhan Ergin tweeted that anyone can log into a Mac by entering the user name root without a password. The first time you try to login, it won’t work. But if you try it again, you will be granted access. Here’s Erign’s tweet:
Dear @AppleSupport, we noticed a HUGE security issue at MacOS High Sierra. Anyone can login as “root&
Read more »