Updating to macOS 10.13.1 Undoes Apple's 'Root' Bug Patch

EnlargeAndrew Cunningham

The report cites several users who have experienced this issue.

As Wired reports, Apple scrambled to release a macOS High Sierra security update earlier this week to patch up a critical flaw in the system's login process, which, as mentioned, allowed anyone to unlock Macs without even entering a password.

The vulnerability was disclosed by a user on Tuesday on Twitter.

The serious vulnerability has been identified as CVE-2017-13872, which has been fixed by Apple through Security Update 2017-001 for macOS 10.13.1 on Wednesday.

This has been an incredibly terrible week for Apple's operating systems.

Forbes writer Thomas Fox-Brewster wrote yesterday that the bug "may go down as one of the most embarrassing vulnerabilities in Apple history".


It is noted that remotely realize the vulnerability impossible - the attacker must still have direct access to your device. A new report from Wired has revealed that users who were still on macOS High Sierra 10.13 - and installed the rushed security patch for the root exploit - saw the effects of the patch completely undone by upgrading to macOS High Sierra 10.13.1. This, in particular, provides access to the login screen in Mac blocked.

Tests of the flaw indicated that it could be used to alter a user's system settings that normally require a chosen username and password. To enable the Root User and set a password, please follow the instructions here: https://support.apple.com/en-us/HT204012.

In a Medium post today, Ergin today said his Twitter disclosure about the Mac bug was met with "many reactions like a blast". It was discovered that it was possible to log into the "root" account without entering a password, and - although the company seemed to have been alerted to the issue a couple of weeks back - praise was heaped on Apple for pushing a fix out of the door quickly.

"Oh my god that should not work but it does", another user responded yesterday on the forum. While the security update is now available for download from Mac App Store, Apple said it will also be automatically installing the patch on all Macs running macOS High Sierra 10.13.1.

Apple seems to be doing badly in ensuring Macs are secure.

Related news:

Hot News

isis-killer-beheading-video-story-top Rickie Fowler fires seven birdies in a row at Hero World Challenge
Dec 04, 2017 - 00:47
Woods shot a 76 in the final round a year ago , which left a bitter taste even after a showing in which he led the field in birdies.

isis-killer-beheading-video-story-top Manchester United beat Arsenal 3-1 to keep heat on City
Dec 04, 2017 - 00:38
Even so, Wenger acknowledged Arsenal had only themselves to blame for a loss that effectively ended their title bid. Manchester United midfielder Paul Pogba admits he is glad to no longer be the world's most expensive footballer.

isis-killer-beheading-video-story-top PS2 Theme Coming To PS4 For That Nostalgia
Dec 04, 2017 - 00:32
Therefore, it was decided that in celebration of Naughty Dog's rich heritage to present these Jak and Daxter classics on PS4. The developer just released Uncharted: The Lost Legacy and now might have its hands full with The Last of Us: Part 2 .

isis-killer-beheading-video-story-top Worrying satellite images show North Korea building another nuclear missile launch site
Dec 04, 2017 - 00:21
The missile is said to have flown almost 2,800 miles high and for a distance of more than 600 miles. However, North Korea's leader Kim Jong-un called the launch "impeccable" and a "breakthrough".

isis-killer-beheading-video-story-top U.S. lawmaker: likelihood of 'preemptive war' with North Korea grows
Dec 04, 2017 - 00:18
President Donald Trump and his administration are "begging for nuclear war", North Korea's Foreign Ministry said Saturday. United States policy, he said, is "to deny North Korea the capability to hit America with a nuclear-tipped missile".

isis-killer-beheading-video-story-top Nathan Redmond Explains Exactly What Guardiola Said In Animated Exchange
Dec 04, 2017 - 00:14
The City boss, whose team host West Ham on Sunday, believes four victories in particular gave his players an injection of confidence.

isis-killer-beheading-video-story-top Packers reportedly targeting Week 15 return for Aaron Rodgers
Dec 04, 2017 - 00:12
The Green Bay Packers are entering Week 13 with a 5-6 record and sitting at third place in the NFC North Division. Though Rodgers will be out, the Bucs have a history of struggling immensely against backup quarterbacks.

isis-killer-beheading-video-story-top Sadam Ali Beats Miguel Cotto via Unanimous Decision in Junito's Final Fight
Dec 04, 2017 - 00:10
He landed a sharp right-left combination to end the fight. "But I didn't want to get over myself and get caught with a shot". Moments later, Ali connected with a left hook and Cotto looked like he was in a bit of trouble, though he quickly recovered.

isis-killer-beheading-video-story-top Austin Rivers Fined $25000 for Outburst at Fan vs. Jazz
Dec 04, 2017 - 00:08
Rivers had arguably one of his best games of the season scoring 25 points shooting 9 for 16 and giving the Clippers six assists. Hopefully Rivers' dad, Clippers head coach Doc Rivers, gave him some fatherly advice after the outburst.

isis-killer-beheading-video-story-top Rafa Benitez: Chelsea turning point and why Newcastle still have 'belief'
Dec 03, 2017 - 02:15
He said: "To come to another country and win the league at a massive club, Antonio Conte did really well". Chelsea enter Saturday in third place on the Premier League table with 29 points from 14 games.

isis-killer-beheading-video-story-top Walmart pulls 'Rope. Tree. Journalist.' T-shirt from site
Dec 03, 2017 - 02:13
According the nonprofit organization, within hours of sending the letter Walmart had removed the shirt from its site. Please help support independent journalism by sharing this article with your friends and family.

isis-killer-beheading-video-story-top Ex-US NSA employee pleads guilty to taking classified US govt documents
Dec 03, 2017 - 01:59
Nghia Hoang Pho, 67, of Ellicott City, Maryland, had been charged with willful retention of national defense information. Pho is scheduled to be sentenced in April in USA district court in Baltimore.

isis-killer-beheading-video-story-top Watford 1-1 Tottenham Hotspur
Dec 03, 2017 - 01:59
Stewart Robson questions the red card issued to Davinson Sanchez and discusses how it affected Tottenham at Watford . Davinson Sanchez fully deserved his red card for colliding with Richarlison and felling the Watford forward.

isis-killer-beheading-video-story-top Xiaomi Redmi 5A Unboxing and First Look: Design, Features, Specifications, and More
Dec 03, 2017 - 01:57
With Redmi 5A we take another step in offering a great all-round experience for users looking for their first smartphone. Although the company didn't share any specific information about the devices, we already know a lot about the Redmi 5 .

isis-killer-beheading-video-story-top Broncos' half court shot ends Ducks' 46-game home win streak
Dec 03, 2017 - 01:49
The Broncos are just the third nonconference team to win at Matthew Knight Arena, which opened in 2011, against 55 losses. Arizona handed the Ducks their last loss at home 80-62 in one of their worst beatings of the last three years.