High Sierra App Store system preferences unlockable with any password

MacOS password bug

This time, it is the App Store System Preferences that has been found to be accessible to anyone using any password.

Attackers could gain access to your Mac thanks to another security flaw discovered in the latest version of its operating system. On macOS 10.13.2, the App Store preferences can be unlocked using any password.

Assuming the attacker would be able to gain such access, they would still only be able to change the user's preferences in the App Store.

You will then need to lock the padlock if it is already unlocked, and then click on it again to unlock it. Flipping those settings could be used in conjunction with another attack to ensure a system wasn't patched to close a security hole, though local access or at least administrator access from a remote location are required.

With I Am Root still fresh in the memories of users and the recent hoopla over Meltdown and Spectre not yet died-down, this comes at a particularly unwelcome time. The folks at MacRumors report they were able to successfully bypass the real password by following the above steps on an administrative account, but were not able to trick any other System Preferences login prompts with a bogus password.

AAP loses Vishwas, nominates Sanjay Singh, 2 others for RS
At a press conference, he alleged that the AAP was sending N D Gupta to the Rajya Sabha with the support of the BJP. But, the party this time chose to select candidates from the field of law, economics and social work.

Young Texas Church Shooting Victim Finally Returns Home after Months in Hospital
Ryland lost three of his relatives in the shooting. "It's just a miracle he survived and is doing as well as he is", she said. As it rolled down the freeway, supporters gathered on overpasses and along roads waving and smiling, and Ryland waved back.

Le'Veon Bell Will Consider Sitting, Retiring If Steelers Use Tag
Bell held out at the start of training camp this season because he was unhappy about having to play under the franchise tag. Now, I've done everything but own a Super Bowl ... "But, if not, I'll just handle it however I've got to handle it".

The bug is nowhere near as unsafe as the root-access security flaw that was uncovered a year ago, whereby attackers could gain root access to MacOS computers by typing "root" in the username field and leaving the password field blank.

Numerous settings within the App Store System Preferences window are also protected behind your Apple ID password and can't be changed using this method, but a nefarious user with physical access to your Mac could toggle the options that fall under the automatic update section.

In order to reproduce the bug, a user can start by logging in as an admin.

Apple's Mac OS Sierra is in the news again thanks to another security loophole that has come to the fore.

'Our customers deserve better. As also reported by MacRumors, 10.13.3 has a planned release for later this month, and the bug doesn't seem present in 10.12.6 or earlier versions.

Related News:

  • Christian groups decry U.S.  policy change on Salvadorans as Episcopalians offer support

    Christian groups decry U.S. policy change on Salvadorans as Episcopalians offer support

    In fewer than 140 characters, the Trump administration set a date to end the dream of more than 200,000 Salvadoran families. Numerous people under the temporary status have tried to become permanent residents by applying for green cards.
    Dolly Everett farewelled by hundreds of mourners in Katherine

    Dolly Everett farewelled by hundreds of mourners in Katherine

    Mr Everett said the family was overwhelmed and humbled by the outpouring of support. "It is sad. "May we please ask for some time to celebrate the life of our much-loved daughter Dolly".
    Ellen DeGeneres father Elliot dies at 92

    Ellen DeGeneres father Elliot dies at 92

    When he died, I saw this rainbow over the stage they named for me. "I send love to his family today", DeGeneres wrote on Twitter. She also shared touching image of a rare rainbow stretched over her show's huge poster above Warner Bros studios in Burbank.
  • Dominion Energy Pays $7.9B For Utility Co. SCANA

    Dominion Energy Pays $7.9B For Utility Co. SCANA

    SCE&G and project co-owner Santee Cooper blamed the $9 billion project failure on the bankruptcy by contractor Westinghouse. Dominion Energy Inc says that it expects the acquisition of SCANA Corporation to be immediately accretive to its earnings.
    Curry, James lead fan voting for All-Star game

    Curry, James lead fan voting for All-Star game

    I think George will surpass Draymond Green and DeMarcus Cousins because of people liking him more than they like those two. For the last two frontcourt spots, I chose Anthony Davis who is now second in frontcourt voting and Pual George.

    Fiat Chrysler Plans to Invest More Than $1B in Michigan Plant

    Fiat Chrysler is moving production of heavy-duty trucks from Mexico to MI and paying bonuses to US workers in response to the. FCA said this was on top of a large investment at the Warren factory announced previous year .
  • A&E Consultants say 'patients are dying prematurely' after being nursed in corridors

    A&E Consultants say 'patients are dying prematurely' after being nursed in corridors

    Answering questions after a speech in south London on Thursday, Mrs May said flu was putting extra pressure on services. This includes the additional "escalation beds" which are used when the hospital is struggling to cope with demand.
    Obama Foundation files plans for Obama Presidential Center

    Obama Foundation files plans for Obama Presidential Center

    "Take a look at that, at that initial decision where they decided between Jackson Park and Washington Park". The Obama Foundation outlined the guiding principles behind the center's design in a statement Wednesday.
    Marriott forced to issue apology after China error

    Marriott forced to issue apology after China error

    Taiwan and the mainland split in 1949 after a civil war but the Communist Beijing government claims the island as its territory. Delta Air Lines Inc., the Zara apparel chain and Irish medical-equipment maker Medtronic Plc all came under fire.
  • Everton boss Sam Allardyce confirms Theo Walcott interest

    Everton boss Sam Allardyce confirms Theo Walcott interest

    We have a good relationship with Theo, and I don't want him to be frustrated or lose an opportunity to go the World Cup. Ahead of facing Bournemouth on Sunday, Wenger said: "He is a good player but nothing is happening.
    Samsung Galaxy S9 Retail Box LEAKS With Spec List

    Samsung Galaxy S9 Retail Box LEAKS With Spec List

    Galaxy owners were hoping to get a sneak peek at the S9 at CES but their hopes were quickly squashed. Like its predecessor, this phone is also coming with AKG tuned earphones in the box.
    British train station evacuated, closed after massive morning fire

    British train station evacuated, closed after massive morning fire

    Video posted to social media shows smoke billowing from a building in the early hours. Emergency services believe everyone inside the building escaped unharmed.


Most liked

Stony Brook family's cruise to Bahamas rocked by winter storm
The Norwegian Cruise Line ship was sailing in the Atlantic Ocean from the Bahamas to NY when the storm hit earlier this week. Passengers have since told of how they held on for life and feared their safety as the boat was rocking "like crazy".

Mum of boy in H&M ad brands controversy 'unnecessary'
That being said, Mango agreed that "everyone is entitled to their opinion about this", even if she happened to disagree. The first apology read "We sincerely apologize for offending people with this image of a printed hooded top".

Bargain Hunters Should Take a Look at Domino's Pizza, Inc. (NYSE:DPZ)
After eight years with the company, Patrick Doyle plans to resign his post as president and CEO of Domino's effective June 30. Qualcomm Inc decreased its stake in Qualcomm Inc (QCOM) by 2.35% based on its latest 2017Q3 regulatory filing with the SEC.

What Does Gerrymandering Mean? North Carolina Congressional Districts To Be Redrawn
Supreme Court has rejected the idea that district maps should be blind to party considerations. In the 2-1 ruling on Pennsylvania's case, a judge found that the U.S.

Zuma is not off the hook on state capture: Maimane
Kenyatta's discussion with Zuma will focus on bridging the balance of trade which is now highly in favor of South Africa. Deputy chief justice Raymond Zondo, selected by the chief justice will head the commission, Zuma said in the statement.

Instagram Stories get WhatsApp cross-posting in new test
Facebook is running a test to let users post Instagram Stories directly to WhatsApp , as a WhatsApp Status , TechCrunch reports. According to a Brazilian blog , Instagram is testing a way through which its users can directly post their Stories on WhatsApp .

Liverpool vs Manchester City 14 January 2018: EPL Preview and Predictions
Gabriel Jesus could be fit for Manchester City's Champions League game against Basel on February 13, according to Pep Guardiola . Instead, I fancy the points to be shared - and with the attacking output on both sides, I think we could see a thriller.

Turkey summons U.S. envoy over Syrian issue
The drone attack on the Russian assets in Syria also raised tensions between Russia and Turkey . Syrian President Bashar al-Assad "is extremely unpopular".

CES goes dark in the rain
The trade fair is marketed as the "world's gathering place for all those who thrive on the business of consumer technologies ". Follow CNET's live coverage of day two of CES here. "We will continue to restrict access until full power has been restored".

Falling energy prices hold United States consumer inflation to 0.1% in December
Excluding food and energy prices, core producer prices still dipped by 0.1% in December following a 0.3% increase in November. USA energy prices were up sharply a year ago compared to 2016, with petrol rising almost 11% and fuel oil up more than 15%.

Netflix ramps up excitement for Altered Carbon with new trailer
Enter Miguel Sapochnik, director of Game of Thrones' best ever episode - "Hardhome" - and enter Richard Morgan's Philip K. The series will arrive for Netflix subscribers around the world on February 2; you can find its show page here.

GM and Cruise reveal their fourth-generation, steering wheel-free Cruise AV
This comes as little surprise given the company has been utilizing specialized Bolt EV's for autonomous testing for some time now. GM's Cruise Automation unit has announced plans to carry passengers in self-driving cars that won't have a backup driver in 2019.

Agreement reached on basis for negotiating new German govt coalition - lawmakers
They spoke of a "fresh start" for Germany, and Mr Schulz said that in Europe "we are determined to deploy Germany's strength". SPD delegates will have their say on the preliminary coalition deal at an extraordinary party conference on January 21st.

All jewels stolen in brazen Paris Ritz robbery recovered
Three men, all aged around 30, were arrested moments after the alarms sounded after security guards trapped them in the building. Three axe-wielding thieves carried out the brazen robbery last week at the ultra-chic hotel on the city centre's Place Vendome.

Second Day of Protests Over Child Rape and Murder
A 16-year-old girl on Thursday was strangled to death after rape at Tasawar Abad in Tehsil Bhalwal of district Sargodha. The clarification stated that the chief justice had only referred to a news item that had gone viral on social media.