undefined | Better HN

0 pointsprincekolt8y ago0 comments

Bad news: I tried the exploit in my macOS Sierra installation and it didn't seem to work. However, the passwd entry on the output of your first command IS A LONE ASTERISK.

However I still can't login as root. This leads me to believe this behavior has always been there, and maybe the login methods just didn't allow an empty password.

0 comments

ybloviator8y ago

This is very normal in 'nix' systems. '' indicates a locked account. (I've given up figuring out how to escape an asterisk)

ex:

  daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin
  operator:*:2:5::0:0:System &:/:/usr/sbin/nologin
  bin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologin
  tty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologin

If the OS is letting you in with a '*'in the encrypted password field, something is very very wrong.

warent8y ago

I'm confused, why do you have to escape an asterisk?

HarfTarf8y ago

He's stuck inside

vsl8y ago

Markdown in HN comments.

royprins8y ago

Famous last words of a Roman centurion.

1 more reply

kr3wn8y ago

wildcard.

dep_b8y ago

Only High Sierra is affected.

j / k navigate · click thread line to collapse