When a security hole is discovered in Apple’s vaunted walled garden, headline writers reach for their modifiers.
- Major bug 11
- Huge bug: 7
- Massive bug: 5
- Stupid bug: 4
- Dangerous bug: 2
My take: I’m waiting for Cupertino to release the official patch. My MacBook is never unattended, and I don’t need another password to forget.
UPDATE, a patch and a statement attributable to an Apple spokesperson:
Security is a top priority… yadda yadda yadda…
When our security engineers became aware of the issue Tuesday afternoon, we immediately began working on an update that closes the security hole. This morning, as of 8 a.m., the update is available for download, and starting later today it will be automatically installed on all systems running the latest version (10.13.1) of macOS High Sierra.
We greatly regret this error and we apologize to all Mac users, both for releasing with this vulnerability and for the concern it has caused. Our customers deserve better. We are auditing our development processes to help prevent this from happening again.
That was fast.