High Sierra App Store system preferences unlockable with any password

Mac exploit lets you change App Store preferences with any password

This time, it is the App Store System Preferences that has been found to be accessible to anyone using any password.

Attackers could gain access to your Mac thanks to another security flaw discovered in the latest version of its operating system. On macOS 10.13.2, the App Store preferences can be unlocked using any password.

Assuming the attacker would be able to gain such access, they would still only be able to change the user's preferences in the App Store.

You will then need to lock the padlock if it is already unlocked, and then click on it again to unlock it. Flipping those settings could be used in conjunction with another attack to ensure a system wasn't patched to close a security hole, though local access or at least administrator access from a remote location are required.

With I Am Root still fresh in the memories of users and the recent hoopla over Meltdown and Spectre not yet died-down, this comes at a particularly unwelcome time. The folks at MacRumors report they were able to successfully bypass the real password by following the above steps on an administrative account, but were not able to trick any other System Preferences login prompts with a bogus password.

Nintendo Direct Round-Up; Everything New Coming to Nintendo Switch
The Switch version will also receive Funky Kong as a playable character as well as a "beginner-friendly" mode for gaming newbies. This new entry will also see the first Story Mode in the series since 2005's Mario Tennis: Power Tour for the Game Boy Advance.

Musician Seal Calls Oprah Winfrey A 'Part Of The Problem'
There have been reports on CNN and elsewhere in recent days that Winfrey has been considering a presidential run. Sea;l hammered Oprah for turning a blind eye to Harvey Weinstein's antics.

Mexico Will Leave NAFTA Talks if Trump Triggers Withdraw
While she puts the chances of US withdrawal at 50-50, "it's too early to throw in the towel on these negotiations", Cutler said. Canadian officials said this week there's an increased likelihood Trump will follow through on his exit threat.

The bug is nowhere near as unsafe as the root-access security flaw that was uncovered a year ago, whereby attackers could gain root access to MacOS computers by typing "root" in the username field and leaving the password field blank.

Numerous settings within the App Store System Preferences window are also protected behind your Apple ID password and can't be changed using this method, but a nefarious user with physical access to your Mac could toggle the options that fall under the automatic update section.

In order to reproduce the bug, a user can start by logging in as an admin.

Apple's Mac OS Sierra is in the news again thanks to another security loophole that has come to the fore.

'Our customers deserve better. As also reported by MacRumors, 10.13.3 has a planned release for later this month, and the bug doesn't seem present in 10.12.6 or earlier versions.

Related News:

  • Dominion Energy Pays $7.9B For Utility Co. SCANA

    Dominion Energy Pays $7.9B For Utility Co. SCANA

    SCE&G and project co-owner Santee Cooper blamed the $9 billion project failure on the bankruptcy by contractor Westinghouse. Dominion Energy Inc says that it expects the acquisition of SCANA Corporation to be immediately accretive to its earnings.
    Zuma is not off the hook on state capture: Maimane

    Zuma is not off the hook on state capture: Maimane

    Kenyatta's discussion with Zuma will focus on bridging the balance of trade which is now highly in favor of South Africa. Deputy chief justice Raymond Zondo, selected by the chief justice will head the commission, Zuma said in the statement.
    Ed Sheeran accused of plagiarism by Aussie songwriters

    Ed Sheeran accused of plagiarism by Aussie songwriters

    Stream " The Rest Of Our Life " and " When I Found You " below alongside the court documents, and judge for yourself. Carey and Golden claim in their lawsuit that the two songs are musically, lyrically and thematically similar.
  • Obama Foundation files plans for Obama Presidential Center

    Obama Foundation files plans for Obama Presidential Center

    "Take a look at that, at that initial decision where they decided between Jackson Park and Washington Park". The Obama Foundation outlined the guiding principles behind the center's design in a statement Wednesday.
    Taylor Swift teases new 'End Game' music video

    Taylor Swift teases new 'End Game' music video

    Basically, everyone is lit as hell in this music video-which is on brand for all the turn-up references found in Reputation . Taylor Swift , Future , and Ed Sheeran party across the world in the new video for their Reputation hit, " End Game ".
    Infosys December quarter net profit jumps 38% to Rs 5129 crore

    Infosys December quarter net profit jumps 38% to Rs 5129 crore

    And lastly, net profit for the quarter came in 42.12% higher than the estimated figure of Rs. 3609 crores. The tax agreement will reduce Infosys's effective tax rate by 100 basis points going forward.
  • Young Texas Church Shooting Victim Finally Returns Home after Months in Hospital

    Young Texas Church Shooting Victim Finally Returns Home after Months in Hospital

    Ryland lost three of his relatives in the shooting. "It's just a miracle he survived and is doing as well as he is", she said. As it rolled down the freeway, supporters gathered on overpasses and along roads waving and smiling, and Ryland waved back.
    Second Day of Protests Over Child Rape and Murder

    Second Day of Protests Over Child Rape and Murder

    A 16-year-old girl on Thursday was strangled to death after rape at Tasawar Abad in Tehsil Bhalwal of district Sargodha. The clarification stated that the chief justice had only referred to a news item that had gone viral on social media.
    British train station evacuated, closed after massive morning fire

    British train station evacuated, closed after massive morning fire

    Video posted to social media shows smoke billowing from a building in the early hours. Emergency services believe everyone inside the building escaped unharmed.
  • Curry, James lead fan voting for All-Star game

    Curry, James lead fan voting for All-Star game

    I think George will surpass Draymond Green and DeMarcus Cousins because of people liking him more than they like those two. For the last two frontcourt spots, I chose Anthony Davis who is now second in frontcourt voting and Pual George.
    Netflix ramps up excitement for Altered Carbon with new trailer

    Netflix ramps up excitement for Altered Carbon with new trailer

    Enter Miguel Sapochnik, director of Game of Thrones' best ever episode - "Hardhome" - and enter Richard Morgan's Philip K. The series will arrive for Netflix subscribers around the world on February 2; you can find its show page here.
    Samsung Galaxy S9 Retail Box LEAKS With Spec List

    Samsung Galaxy S9 Retail Box LEAKS With Spec List

    Galaxy owners were hoping to get a sneak peek at the S9 at CES but their hopes were quickly squashed. Like its predecessor, this phone is also coming with AKG tuned earphones in the box.


Most liked

A&E Consultants say 'patients are dying prematurely' after being nursed in corridors
Answering questions after a speech in south London on Thursday, Mrs May said flu was putting extra pressure on services. This includes the additional "escalation beds" which are used when the hospital is struggling to cope with demand.

'Assassin's Creed Rogue' (ALL) Remastered For PS4 And Xbox One - Screens & Trailer
Nevertheless, Assassin's Creed Rogue Remastered is on the way with a release date that's set for just a couple of months from now. After a unsafe mission gone tragically wrong, Shay turns his back on the Assassins who, in response, attempt to end his life.

AAP loses Vishwas, nominates Sanjay Singh, 2 others for RS
At a press conference, he alleged that the AAP was sending N D Gupta to the Rajya Sabha with the support of the BJP. But, the party this time chose to select candidates from the field of law, economics and social work.

Bargain Hunters Should Take a Look at Domino's Pizza, Inc. (NYSE:DPZ)
After eight years with the company, Patrick Doyle plans to resign his post as president and CEO of Domino's effective June 30. Qualcomm Inc decreased its stake in Qualcomm Inc (QCOM) by 2.35% based on its latest 2017Q3 regulatory filing with the SEC.

What Does Gerrymandering Mean? North Carolina Congressional Districts To Be Redrawn
Supreme Court has rejected the idea that district maps should be blind to party considerations. In the 2-1 ruling on Pennsylvania's case, a judge found that the U.S.

Instagram Stories get WhatsApp cross-posting in new test
Facebook is running a test to let users post Instagram Stories directly to WhatsApp , as a WhatsApp Status , TechCrunch reports. According to a Brazilian blog , Instagram is testing a way through which its users can directly post their Stories on WhatsApp .

Turkey summons U.S. envoy over Syrian issue
The drone attack on the Russian assets in Syria also raised tensions between Russia and Turkey . Syrian President Bashar al-Assad "is extremely unpopular".

CES goes dark in the rain
The trade fair is marketed as the "world's gathering place for all those who thrive on the business of consumer technologies ". Follow CNET's live coverage of day two of CES here. "We will continue to restrict access until full power has been restored".

Dolly Parton's Dixie Stampede Dinner Attraction Is Losing The 'Dixie'
World Choice Investments CEO Jim Rule says the rebranding is part of an effort to "stay relevant in today's changing world". Parton opened Stampede in three different cities: Branson, Mo., Pigeon Forge, Tenn . and Myrtle Beach, S.C.

Falling energy prices hold United States consumer inflation to 0.1% in December
Excluding food and energy prices, core producer prices still dipped by 0.1% in December following a 0.3% increase in November. USA energy prices were up sharply a year ago compared to 2016, with petrol rising almost 11% and fuel oil up more than 15%.

Dolly Everett farewelled by hundreds of mourners in Katherine
Mr Everett said the family was overwhelmed and humbled by the outpouring of support. "It is sad. "May we please ask for some time to celebrate the life of our much-loved daughter Dolly".

Everton boss Sam Allardyce confirms Theo Walcott interest
We have a good relationship with Theo, and I don't want him to be frustrated or lose an opportunity to go the World Cup. Ahead of facing Bournemouth on Sunday, Wenger said: "He is a good player but nothing is happening.

GM and Cruise reveal their fourth-generation, steering wheel-free Cruise AV
This comes as little surprise given the company has been utilizing specialized Bolt EV's for autonomous testing for some time now. GM's Cruise Automation unit has announced plans to carry passengers in self-driving cars that won't have a backup driver in 2019.

Marriott forced to issue apology after China error
Taiwan and the mainland split in 1949 after a civil war but the Communist Beijing government claims the island as its territory. Delta Air Lines Inc., the Zara apparel chain and Irish medical-equipment maker Medtronic Plc all came under fire.

AFC Divisional Sunday: Jacksonville Jaguars at Pittsburgh Steelers
If the ball gets held it's challenging for the quarterback to make a throw because everybody's rushing in, that's a problem. He will go along with Le'Veon Bell , who was near the top of rushing yards in the league with 1,291 and 9 touchdowns.