-
How quickly — and thoroughly — does Apple fix macOS security holes?
You’ve no doubt read about the glaring security hole in macOS High Sierra version 10.13.1, that allows anybody to log in with the “root” account and no password.
As best I can tell the bug was first publicized on Nov. 13. Very few folks saw the warning (hey! It’s a feature, not a bug!) at the time. I didn’t hear about it until yesterday — less than 24 hours ago, when Mark Gurman at Bloomberg wrote about it. (Mark’s much more photogenic these days, yes?)
Of course, macOS users will have to wait until macPatch Tuesday, at which point the patch may or may not appear along with a gazillion of unrelated security and non-security patches, and may or may not break the computer.
Oh. Hold on a second. Nope. Apple just rolled out the fix.
UPDATE: You guessed it. The ultra-fast fix has a bug. Maybe more than one. Sigh.