An Interest In:
Web News this Week
- April 23, 2024
- April 22, 2024
- April 21, 2024
- April 20, 2024
- April 19, 2024
- April 18, 2024
- April 17, 2024
Some of Our Sources
- Engadget
- Technology Review
- Team Treehouse
- Pearsonified
- Six Revisions
- TutsPlus - Design
- Design Modo
- Codrops
- Daily Now
- The Verge
Help Webnuz
Referal links:
March 27, 2018 09:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/WdN8Rdm-94Y/macos-high-sierra-logs-encryption-passwords-in-plaintext-for-apfs-external-drives
macOS High Sierra Logs Encryption Passwords in Plaintext for APFS External Drives
Catalin Cimpanu, writing for BleepingComputer: macOS High Sierra users are once again impacted by a major APFS bug after two other major vulnerabilities affected Apple's new filesystem format in the last five months. This time around, according to a report from Mac forensics expert Sarah Edwards, recent versions of macOS High Sierra are logging encryption passwords for APFS-formatted external drives in plaintext, and storing this information in non-volatile (on-disk) log files. The issue, if exploited, could allow an attacker easy access to the encryption password of encrypted APFS external volumes, such as USB thumb drives, portable hard drives, and other external storage mediums. This bug goes against all well-established Apple development and security rules, according to which apps and utilities should use the Keychain app to store valuable information, and should definitely avoid storing passwords in cleartext. Video 1, and 2.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/WdN8Rdm-94Y/macos-high-sierra-logs-encryption-passwords-in-plaintext-for-apfs-external-drives
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot