Root with no password on MacOS HS

[splerdu]

Attention, Mac users of PPC:

There's a bug in High Sierra that allows root access with a blank password. Something to do with how the sudo prompt is handled that causes the OS to enable the root account. The hole can be closed by instead enabling root and then setting a password for it, and not re-disabling root afterwards.

https://arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/



OTOH, CGNAT saves the day yet again?

[splerdu]

Update: Apple has issued a fix

https://support.apple.com/en-us/HT208315