Root Security Flaw Allows Anyone To Become Root In Mac OS High Sierra

I can confirm the new root security flaw would affect the Apple’s MacBook Pro 2016 model because I’m using one at the moment.  I can also confirm this same flaw would also work on my older MacBook Pro (Mid 2010 model).  Basically, as of how other people have mentioned, this flaw would work regardlessly the MacBook laptop model you’re using as long you had upgraded your MacBook machine to Mac OS High Sierra.  As of now, the flaw is also affecting the latest version of Mac SO High Sierra (10.13.1).  How would the flaw work?  Read on…

I assume this flaw would work still even you have turned on FileVault.  Basically, as long your Mac allow anybody to enter the username as root at the login screen or any login prompt (except in terminal), he/she could just hit enter once or twice without using any password and the root login would be successful.  If you’re new to Mac and Linux, let’s just say that root is the super account that can do just about anything on Mac and Linux machines.  Root can change all users’ passwords.  In fact, root can even erase the entire machine’s storage and destroy the whole operating system with just one command which is [rm -rf /].

I tested the flaw out as how I’d seen on YouTube, and it worked marvelously.  Basically, I was already logged into the machine, and so I went to System Preferences > Users & Groups > clicked the lock icon at the bottom left > entered root at the username prompt > hit “enter key” twice and became root right after.  From here I could change any user’s password or delete any user and group.  In fact, any login prompt would allow me to become root and execute the available super account’s features.

To fix this problem, as seen on YouTube, I opened up the terminal > typed in the command [sudo su] > entered root password (hit enter key without password won’t work in terminal) > typed in command [passwd] > entered same root password or new one (doesn’t matter as long you type in a password you could remember) > exit the terminal entirely by typed [exit] couple times in the terminal > shutdown the terminal by quitting the terminal from the dock.  After this, I tried the root flaw and it wouldn’t work on the graphical user interface such as in the System Preferences.  Thus, I think the fix is real.

Here is one secret I would let you guys in.  Actually, this flaw isn’t a flaw.  Apple has always been easy in regarding in allowing people to physically reset a user password.  In fact, you can also reset a root password of your Mac for as long as Mac has been in the existence, because in the video right after the break I’d talked about how to reset an administrator password in Mac OS X Lion without remembering the root password or using a recovery disk.  By the way, Mac OS X Lion is way back then.  I think Mac OS X Lion was released in 2011.

Since 2011-2012, I haven’t tested the trick I talked about in the video, and so I’m very rusty now.  I’m not even sure the same trick would work exactly the same way as how I had walked you through in the video for newer machines and newer Mac OS iterations.  Regardless, I think even now there should be some similar tricks for you to reset an administrator/root password on any Mac OS as long you got a physical access to the machine.  Maybe FileVault would be able to stop and block the trick I’d shown you in the video from working successfully, but I’m not sure if this is even the case since I haven’t tested this very trick out when I got FileVault running.  So, I think the best security is still all about keeping your machine in a locked cage when you’re not around it.  Keeping a physical machine away from unwanted intruders/hackers would be the best way to stop easy hacks.  Regardless, sometimes remote hacks could also be as easy as the root flaw I’d mentioned in this post.

Advertisements

How To Permanently Map Network Share To Mac OS X Yosemite

Awhile back I had made a video which shows Mac beginners how to permanently add a network share/drive to Mac OS X Mavericks.  This very video is still applicable for Apple’s newest OS X Yosemite.  Just in case anyone really needs to know this trick, just watch my video right after the break.  Here once again, I repost the video.  Enjoy!!!

How To Map A Network Share To Mac OS 10.9 (Mavericks) Permanently

Within the video right after the break, I show you how to map a network share to your Mac OS 10.9 (Mavericks) permanently.  This way, whenever you reboot or first boot up your Mac, the network share folder will automatically be connected to the NAS (network attached storage server).  Enjoy!!!

Apple Lets You Take A Peek At How The New Mac Pro Is Being Built

Want to take a peek at how new Mac Pro is being built?  Apple is boasting that they have radically engineered their new Mac Pro to be unlike any other they have had ever engineered before.  Under the hood, it got really powerful components.  Basically, cutting edge components such as Intel Xeon E5 Quad Core or 6-Core.  Obviously, the list of the most cutting edge components yet in this new bad boy is pretty long.  You can just take a quick jump over to Apple’s official website and read the spec sheet for yourself, and please don’t drool all over yourself.  What about the aesthetic of the beast?  Some people think it looks like a cute trashcan.  I don’t know, because I haven’t seen one in real life and so I decide to keep my opinion on this closer to my chest at this point in time.  Anyhow, without Steve Jobs’ unique presence and passion, I wonder how well will Apple be able to stay focus on innovating and supporting their products with Steve Jobs-like passion?  If they’re continually developing their products with Steve Jobs-like passion and not worrying about their shareholders’ demands, then I think I will definitely want to repeatedly, shamelessly take a delicious bite off an apple in my nightly dream.  Check out the video right after the break which showcases how far Apple has had gone in making the new Mac Pro.  To the extreme yo, and the launch date of this new Mac Pro is in this December! :P~

TV Revolution Is Upon Us?

television

television (Photo credit: jeevs)

How many more players are going to join the TV revolution?  As now, we know Google, Apple, Microsoft, and other players are trying to tear down the old and introduce the new TV experience to the mass.  It’s all about how to unplug consumers from Cable and plug ’em into the Internet pipe.  Why would they and the consumers want everything, from phone to TV, to be plugged into the Internet pipe?  I guess the consumers demand and so they give ’em.  After all, the Internet isn’t just more hip and compatible with the time, but consumers can make wiser choices and have more control with their programs.

It’s about on demand yo!  On demand is definitely easier and more hip when consumers plug into the Internet, and so Cable will have to go the way of the dinosaurs.  Netflix is superb example of how on demand would work.  Instead of dictating when a content consumer should view a program, Netflix aired a complete first season of House of Cards show at once, so everyone could watch this all at one go.  Of course, whoever has all the time in the world will be able to watch the whole show at one go with few breaks in between, but most people have jobs and other pleasures to tend to, and so they will have to make their own time to enjoy Netflix’s House of Cards.  The big difference between Netflix’s House of Cards content viewing experience and Cable is that content consumers are in the driver seat for program choices and schedules.

A new player who has just joined the TV revolution is now Intel.  According to The Verge’s “Intel confirms its Internet TV will launch this year, complete with set-top box and a camera” article, Intel will launch Internet TV which comes with hardware that even has camera.  The camera can be turned off at will, but if you leave it on it will watch you watch whatever that you watch… it’s a little creepy in my opinion.  The Verge suggests that Intel will be able to make a wiser choice of showing what commercials and to suggest what shows to the TV audiences if the camera is on.  In my living room?  Sigh…  I don’t mind the camera watch me doing my things in the public space, but in my living room is just creepy.  I prefer a little more privacy when I enjoy my time in my own living room…

I think the TV revolution is about to be cranked up even more.  It’s the trend yo!  I like where this trend is taking us, but I think there will be things that will be discarded into the forgotten pits.  Through trial and error process, the TV revolution will reward the sensible features.  For an example, I don’t think that many people will appreciate being watched by a camera as they watch their favorite shows in the living room.  Features like this will definitely be thrown into the forgotten pits when the TV revolution (of this time) becomes the norm.

I think the TV revolution (of this time) is more about the experience and less of marketing gimmicks.  How come?  There aren’t that many choices for the publishers and marketers when it comes down to how to dictate what will be the ultimate TV experience in the Internet age.  After all, the TV audiences have plenty of choices to tap into for their content viewing pleasure from the Internet itself.  It’s like the TV revolution has to compete with the medium that hosts it.  It competes against the Internet and yet the Internet will be the medium which hosts this Internet TV thingy.  The trick is to make Internet TV the tube to go to for all TV and video content viewing pleasures…  The trick is to beat YouTube?

Sources:

Tablets And Smartphones Might Not Be So Hot If These Devices Came Out A Decade Or Two Earlier

If tablets had come out a decade or two earlier, I doubt people would care!  How come?  I imagined at that time, tablets would be near useless since modern apps, processors, and plethora of computing options that are now being able to be packaged nicely into a tiny tablet were the stuffs of imagination then.  After all, personal computers back then were still so new and incapable if we are comparing the then personal computers against the current ones.  In a way, I think I’d read somewhere that had mentioned that Steve Jobs might get the tablet idea from Star Trek, whether this piece of information is wrong or not, even if Steve Jobs had come out the tablets then, nobody would care.  With perfect hindsight, now we know why, right?  In fact, I think I’d read that Microsoft had come out with certain tablet form factors way earlier than the first wave of popular iPads, but even though at the time laptops and PCs were the norm Microsoft’s tablet form factors failed to pick up steam.  In fact, nobody had cared about Microsoft’s tablet form factors then!

With hindsight, we now clearly know why tablets are only matter now, but not back then.  Nonetheless, even now, without the hindsight, I think tablets won’t be all that important and cool as to how the current media would like us all to think.  In fact, tablets are something that people want to use in very unique circumstances.  Let say, smartphones are definitely the better device form factors to carry around since the biggest smartphones might still be a lot smaller and lighter than the smallest and lightest tablets.  You get the picture!  Smartphones obviously are more convenient and easier to pocket, therefore people feel more personal about their smartphones.  The usage of tablets are for the people who have the patience to carry more than one electronic devices when they are out and about.  I don’t think there are more folks in that camp than the camp of let carry only all in one small but powerful electronic device (such as smartphone).  I can see how awesome a tablet might be as a remote control for a big screen TV.  I can see how awesome a tablet might be for reading electronic books and magazines.  Nonetheless, I still think people prefer to do all of that on smartphones if they’re out and about.

With the current electronic trend, people are buying more tablets than personal computers.  With the current electronic trend, people are definitely buying more smartphones than personal computers.  Does this electronic trend tell us that personal computers are about to die a slow death?  I doubt so!  Nonetheless, I can see why people are buying more smaller electronic device form factors.  I don’t think it takes a rocket scientist to see the benefits of carrying something so small and yet so useful as a smartphone or a tablet.  For an example, to be able to store thousands of electronic books in a smartphone is definitely a big plus over to how things were done traditionally when it comes down to books.  Basically, convenient, useful, and powerful are the three terms that immediately come to mind whenever I think about small electronic device form factors.  Smartphones and tablets allow us to feel the power of being productive while on the go.  In a sense, the productiveness that radiates from today small electronic device form factors is something that the older generations of homo sapiens had never ever seen before.  These small electronic device form factors that set the trend which can be comparable to the older trendsetters such as the bring about of automobiles, planes, and so on.

So, people are buying up more small electronic device form factors, does it mean that the personal computer trend is on a life support system?  No, because people still need to be content creators first before there will be content consumers.  Without personal computers that are powerful enough to churn out creative works, I doubt there will be much of contents to be consumed on small electronic device form factors.  So, I think personal computers are safe for now, because there aren’t any tablet or smartphone out there that can upheave this personal computer reign just yet.

Sure, personal computers are more powerful and come with more choices than ever before, but why people are not thinking or talking about them as much as they used to?  Perhaps, personal computers are so normal that we can only see them when we’re actually using them?  They’re not exotic as tablets and smartphones.  Nonetheless, asking most gamers out there which device or machine they prefer to play latest games on, I would bet personal computer with a humongous display would be the preferable choice, always!

In short, personal computer technology has came a long way and has matured to a point of it’s no longer needing to be talked about constantly in order for it to be attractive.  Plus, as personal computer technology improved, so the lifespan of personal computer machines.  With so many households are already teaming with personal computers and most mid-end to high-end personal computers are more expensive than smartphones and tablets, therefore I don’t think people want to think or buy personal computers in the same light as how they might want to do so for smartphones and tablets.

In conclusion, I think the three terms I describe earlier — convient, useful, and powerful — are some of the most important factors that dictate why people have been buying so much smartphones and tablets.  Nonetheless, if these smartphones and tablets had come out a decade or two earlier, I highly doubt that people would care!  In a sense, people are now finding these small electronic device form factors quite useful thanks to the advance of personal computer technology first.  In a sense, personal computer technology isn’t a trendsetter anymore showing that personal computer technology had been so matured.  Nonetheless, don’t think for a second that personal computer technology is dying, because it’s still the trendsetter when it comes to content producing.  So, until the small electronic device form factors get more capable, actually be as capable or better than personal computers, I don’t see how personal computers will be outdated.  With that being said, technology usually moves at the speed of light, therefore I’m not sure how relevant my saying, in regarding to personal computer popularity, will be in a near future (i.e., five years down the road).