0xmachos

iamroot

News

• Major macOS High Sierra Bug Allows Full Admin Access Without Password - How to Fix [Updated]
• macOS bug lets you log in as admin with no password required
• Huge security flaw lets anyone log into a High Sierra Mac
• macOS High Sierra security vulnerability discovered, here’s how to set root password for fix

Technical

• block_root_account_login.sh
• Why Gets You Root

0xmachos

• Screensaver Security on macOS 10.13 is broken
• askForPassword and askForPasswordDelay in macOS 10.13 (High Sierra)

0xmachos

Keychain API

kSecAttrAccessible Mapping

Protection Domain (pdmn)	Keychain Accessibility Values
ck	kSecAttrAccessibleAfterFirstUnlock
cku	kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly
dk	kSecAttrAccessibleAlways
akpu	kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly