• Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
  • Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!

Apple OS X Lion security flaw?

Collapse
X
  •  
  • Filter
  • Time
  • Show
Clear All
new posts

    Apple OS X Lion security flaw?

    Ooops

    For some reason Lion forgets to ask for authentication when someone changes a password. Hacking a Mac is as easy as typing "$ dscl localhost -passwd /Search/Users/bob" into Terminal, the Mac command line program. You can then put your own password in and control the machine.
    On Leopard, the same command works, but it outputs the following message and you have to enter the old password:
    Code:
    dscl localhost -passwd /Search/Users/bob
    New Password: 
    Permission denied. Please enter user's old password:
    Behold the warranty -- the bold print giveth and the fine print taketh away.

    #2
    Seems to be fixed on 10.7.2 - mine asks for the old passwd....

    Comment


      #3
      Ta. Given that the reporter is a known Apple basher I wasn't sure.
      Behold the warranty -- the bold print giveth and the fine print taketh away.

      Comment

      Working...
      X