Search For: Mac Flaw Lets You Log Into App Store Preferences With

Posted on admin
Search for: mac flaw lets you log into app store preferences without

Macs running the most recent version of High Sierra have another login issue. But it's not as bad as the last one. CNET Your Mac has another bug that lets people log in without your password. But unlike the last time this happened, it only leaves your computer exposed to a bit of mischief. That proviso won't stop the bug from raising concerns about the overall quality of Apple's software. But it means the flaw doesn't hand anyone the keys to the kingdom. Let's compare.

Search For: Mac Flaw Lets You Log Into App Store Preferences With Free

In November, users found anyone could and no password whatsoever. That's a serious flaw that undercut the most basic line of security protecting the content of your computer from thieves, or even prying friends, family or co-workers. On Monday, that someone could log into your App Store preferences with any entry into the password field. Any password will do to long into the App Store preferences on a Mac running High Sierra 10.13.2. CNET Apple didn't immediately respond to a request for comment. The issue only comes up when a Mac user is logged in with administrative privileges. For local users, no password is required to change App Store preferences.

The fix is available for download in the App Store and later in the day will be automatically installed on all systems running the latest version (10.13.1) of macOS High Sierra.

CNET confirmed the bug by slapping random keys into the App Store preferences password field on a Mac running the most recent High Sierra operating system (10.13.2). Boom, we were logged in. But what was next?

  1. To activate iCloud on a Mac you'll need to open System Preferences, then click the iCloud icon Signing into Apple ID on an iPhone/iPad/iPod touch iTunes Store, App Store: Scroll to the bottom of.
  2. How to Remove Wi-Fi Networks from Your Mac and iOS Device. Posted on January 24th, 2018 by Kirk McElhearn If you travel regularly with your Mac or iOS device, you likely find yourself connecting to new Wi-Fi networks: at airports, in train stations, in hotels, restaurants, pubs, or at clients' offices.

Now CNET could take full control of, well, the computer's App Store preferences. Not exactly the kind of all encompassing power one might expect from bypassing a password. What's more, the computer itself wasn't locked when CNET struck - just the App Store preferences. To make this very clear: to take advantage of this flaw, an attacker would have to wait for an unsuspecting Mac user to walk away from their computer without logging out.

Search For: Mac Flaw Lets You Log Into App Store Preferences With

Search For: Mac Flaw Lets You Log Into App Store Preferences Without

Then this malicious person would need to rush up to the computer, open up the App Store preferences, and enter any old combination of keystrokes to log in and make changes. Finally, the saboteur could do something as dastardly as getting your computer to stop automatically checking for software updates. CNET checked on a Mac running the next version of High Sierra (10.13.3), which hasn't been released to the general public yet, and found that the issue is no longer present. CNET's Stephen Shankland contributed to this report.