A crucial flaw was revealed in Apple's macOS High Sierra operating system wherein a password was not needed to gain admin access to it.
A developer and Mac user named Lemi Orhan Ergin recently disclosed that anyone can log into the computer by entering the name "root" as the user name and leaving the password empty. The first time the person logs on, it will not work. However, upon the second login, the user will be granted access and take control of the device and its system. The user name "root" is a powerful designation that grants access to anyone to areas that are normally monitored by system administrators. Without a need for a password, this potential defect would encourage hackers and malicious users to take over Mac devices and render their owners helpless.
Users who manage to gain access will be given full ability to view important files and information that should be private. Moreover, they can even change or reset passwords for pre-existing users of that machine. This means that if a malicious user were able to grab hold of a Mac, he could gain admin access easily and change the password so that the original owner cannot log into the system.
Therefore, it is important now for all Mac users to set a password for the "root" user name so that unscrupulous hackers will not be able to gain admin access and wreak havoc in the system. To set the "root" password, simply go to "Systems Preferences," click on "Users & Groups," and then "Login Options." Open the "Direct Utility" and click on "Edit." Enable the "Root" user and choose "Change Root Password."
Apple has not released any official word with regards to when the security update will be available. Stay tuned for more reports as the situation unfolds.
