Post by Jim_Higgins
New macOS High Sierra Vulnerability Exposes Passwords of Encrypted
APFS Volumes in Plain Text
Somehow this bug made it all the way through internal testing and public
beta before being discovered. Intriguing... Anyhow:
Apple has addressed this bug by releasing a macOS High Sierra 10.13
Supplemental Update, available from the Updates tab in the Mac App
Store. Apple has also shared a support document outlining steps to back
up, erase, and restore the encrypted APFS volume upon updating.
The bug has also been fixed in the base version of macOS High Sierra for
those who have yet to install the full software update.
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.