..." /> vowe dot net :: OS X Lion security flaw allows anyone to change your password

OS X Lion security flaw allows anyone to change your password

by Volker Weber

Security blog Defense in Depth has found a glaring security flaw in OS X Lion that enables hackers to change the password of any user on a machine running Lion.

More >

Comments

CNet and BGR seem to quote the original article partly wrong, as heise.de states in http://www.heise.de/newsticker/meldung/Mac-OS-X-Lion-macht-es-Passwortknackern-unnoetig-leicht-1345451.html

You can only change the password of the user executing the command, not the one of passwords from other users. If you try to change the password of another user via dscl it prompts for the other users password after asking for the new password. Try it yourself.

Christian Gut, 2011-09-20

Guter Hinweis, danke!

Volker Weber, 2011-09-20

Lion is increasingly being referred to as 'Apple's Vista' - security issues, memory leaks, incompatibilities and slowdowns aplenty. Which is a very apposite comparison, and ought to be of concern to Apple.

Nick Daisley, 2011-09-22

Recent comments

Ingo Harpel on Ich wünsche mir von Apple ein iPhone at 12:49
Volker Jürgensen on Ich wünsche mir von Apple ein iPhone at 09:48
Kai Schmidt on Ich wünsche mir von Apple ein iPhone at 08:52
Martin Kautz on Ich wünsche mir von Apple ein iPhone at 16:47
Henrik Müller on SMB is Dead, Long Live SMB :: James Kehr at 13:40
Pedro Sola on Ich wünsche mir von Apple ein iPhone at 10:26
Rene Heinze on Ich wünsche mir von Apple ein iPhone at 09:55
Axel Koerv on SMB is Dead, Long Live SMB :: James Kehr at 09:51
Volker Weber on SMB is Dead, Long Live SMB :: James Kehr at 00:43
Volker Weber on SMB is Dead, Long Live SMB :: James Kehr at 00:38
John Keys on SMB is Dead, Long Live SMB :: James Kehr at 00:24
Volker Weber on SMB is Dead, Long Live SMB :: James Kehr at 21:15
Frank Quednau on SMB is Dead, Long Live SMB :: James Kehr at 20:32
Simon Laule on SMB is Dead, Long Live SMB :: James Kehr at 20:22
Nina Wittich on Surface Pro X :: Das Gerät macht mir große Freude at 09:43
Lucius Bobikiewicz on Switching to Signal at 06:31
Ragnar Schierholz on Switching to Signal at 19:33
Jens-Christian Fischer on Switching to Signal at 14:23
John Keys on Office 365 im Tagesangebot at 10:20
Jens Wagner on Surface Pro X :: Das Gerät macht mir große Freude at 16:52
Hubert Stettner on Office 365 im Tagesangebot at 16:26
Volker Weber on Surface Pro X :: Das Gerät macht mir große Freude at 15:35
Jens Wagner on Surface Pro X :: Das Gerät macht mir große Freude at 15:26
Christoph Spitz on Office 365 im Tagesangebot at 13:38
Yves Menge on Office 365 im Tagesangebot at 12:44

Ceci n'est pas un blog

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Contact
Publications
Stuff that works
Amazon Wish List
Frequently Asked Questions

rss feed  twitter  amazon

Local time is 03:33

visitors.gif

Paypal vowe