The bug isn't in the disabling, it's in the auto-enabling on attempt. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pwinnski on Nov 28, 2017 | parent | context | favorite | on: macOS High Sierra: Anyone can login as “root” with...

The bug isn't in the disabling, it's in the auto-enabling on attempt.

tekacs on Nov 28, 2017 [–]

Having tested this by both approaches (disabling through GUI & shell), the above (through shell) seems to prevent this from re-occurring when you attempt to perform this bogus login again. Disabling the account via the GUI causes the failure to re-occur.

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact