Apple releases update to fix macOS High Sierra bug, apologises for the error

-
After reports on Tuesday that a bug in macOS could allow practically anyone with access to a Mac running on High Sierra to gain root access by simply typing "root" as the username, Apple quickly responded by releasing an update to fix the flaw on Wednesday. The company's spokesperson said in a statement that the patch can be manually downloaded (via the support page), and the update would  be automatically installed on all systems running High Sierra later in the day.
"Security is a top priority for every Apple product, and regrettably we stumbled with this release of macOS. When our security engineers became aware of the issue Tuesday afternoon, we immediately began working on an update that closes the security hole. This morning, as of 8 a.m., the update is available for download, and starting later today it will be automatically installed on all systems running the latest version (10.13.1) of macOS High Sierra. We greatly regret this error and we apologize to all Mac users, both for releasing with this vulnerability and for the concern it has caused. Our customers deserve better. We are auditing our development processes to help prevent this from happening again," an Apple spokesperson told India Today Tech.
 
The MacOS flaw was initially disclosed by security researchers publicly on Twitter. According to the researchers, the bug gives hackers full control of a Mac running on High Sierra by simply typing "root" as the username during the login prompt. After entering the username, the attacker could leave the password field blank and hit the unlock button twice, making it extremely simple to gain access to any infected Mac.
As far as security is concerned, the macOS bug can be seen as one of the most potentially dangerous flaws that Apple has faced. The ease with which this flaw could give a  malicious attacker total control of a Mac is highly terrifying and surprising considering Apple's focus on security and privacy. But it is good to see Apple respond to the bug within 24 hours of detection, and the Cupertino giant sounds genuinely disturbed and embarrassed that a critical flaw like this passed under their radar.

Comments

Post a Comment

Popular posts from this blog

New UGC rules permit third-party agencies to accredit higher education institutes

-
Image
Agencies other than the National Assessment and Accreditation Council (NAAC) and the National Board of Accreditation (NBA) will soon be able to evaluate higher education institutions as the University Grants Commission (UGC) has passed a new regulation permitting their entry. The new rules, which were approved by the Commission in a meeting held this month, enables UGC to grant licences to third-party agencies for accreditation of educational institutes. The regulation now awaits HRD Ministry’s nod. Among the new accreditation bodies will be one spearheaded by the Indian Institutes of Technology (IITs), sources told The Indian Express. The premier engineering schools, in a meeting of IIT directors held in Chennai last month, have agreed to set up a Section 8 company, which will apply for a licence under the new UGC regulation. The decision was taken at the behest of the Union government, which feels that the involvement of IITs will lend prestige to the accreditation process. The id
Read more

Valla Sadhya

-
Image
Valla Sadhya Sadya items ready to be served, clockwise from top: paayasam, bittergourd thoran, aviyal, kaalan, lime pickle, sambar; buttermilk with boiled rice in the center. Valla Sadya is a celebration in the Hindu temple at Aranmula, Kerala, India. During the festival the village conducts a snake boat race in the Pampa River, and there is a feast at the temple. The Valla Sadhya is conducted on Ashtamirohoni day.  During Valla Sadhya, Lord Krishna, the main deity worshipped in the temple, will come to take the offerings from people. The legend is that in a Valla Sadya all dishes asked for must be given to the people in order to please the lord.
Read more

Bangladesh: Govt takes up Ashrayan-3 project to shelter Rohingya refugees

-
In addition to the temporarily shelter of Rohingya refugees, the cost of construction of necessary infrastructure for the island will be BDT 2,312 crores. The project will be implemented by the Bangladesh Navy under the Prime Minister's Office of the government's priority list. Bangladesh government has taken a project called 'Ashrayan-3' for temporary housing of one lakh Rohingya people. This project will be implemented in Bhasanchar of Hatiya upazila in Noakhali district. Although Bangladesh has more than 1 million Rohingya refugees in which, more than 6,25,000 Rohingyas have fled violence in Myanmar to seek refuge in Cox's Bazar of Bangladesh, since August 25. In addition to the temporarily shelter of Rohingya refugees, the cost of construction of necessary infrastructure for the island will be BDT 2,312 crores. The project will be implemented by the Bangladesh Navy under the Prime Minister's Office of the government's priority list.
Read more