Sarah Edwards

mac4n6.com

Mac OS X and iOS forensic research, blog, and resources

Popular posts: 2
Total points: 632
HN comments: 171
Rank: #3,902 personal

Visit mac4n6.com → RSS feedOn Hacker News Mar 2018 – Mar 2018

Systems & Performance 2 Security & Privacy 2

Most points Most discussed Most cited Newest

Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

2018461 points110 comments Security & Privacy details

UPDATE: PLEASE HELP ME TEST UPATE TO THE UPDATE: Similar log entries are now found in another system log that is more persistent, see the article here . UPDATE: This is still vulnerable on current versions of macOS 10.13.3 when encrypted an ALREADY EXISTING  unencrypted APFS volume

APFS encrypted plaintext password found in another log file

2018171 points61 comments Security & Privacy details

UPDATE: PLEASE HELP ME TEST At some point you just need to stop looking and be blissfully ignorant...this was not one of those days.  In and update to my previously updated blog article , I have found another instance where the plaintext password was written to system logs. Thi