Security flaw in Mac OS High Sierra
There is a serious security flaw on the newly released Mac OS High Sierra. This flaw allows even the most inept hacker in by just typing in "root". All anyone has to do is type in "root" when prompted for a username and password to gain administrator access. Malware designed to exploit this could fully install itself deep within the computer with no password required. Alot of malware tries to escalate privileges to gain root access and Apple made it extremely easy to get.
The fact that the attack could be used on any logged out account raises the threat that someone with physical access could set a root password then regain access anytime they want. Apple is aware of this an is expected to roll out a security patch quickly. In the meantime, you can protect yourself by simply setting a password for the root user. This critical bug is only one of the latest in a disturbing series of bugs that have plagued High Sierra. On the day it was launched, a malicious code was found running that could steal the contents of its keychain without a password. Another serious bug showed the user's password as a password hint when they try to unlock an encrypted partition on their machine known as APFS container. These serious flaws being may have been avoided if Apple offered a reward to catch security vulnerabilities in its software as most other companies do.