jmdocherty 9 years ago

Glass half-full: "Oops! They missed this because they were busy making all the other stuff super-secure."

Glass half-empty: "Oh-my-goodness...what would Steve say? FFS. We can't trust anyone any more!"

I'm inclined to be half-full.

  • tinus_hn 9 years ago

    Glass completely empty: why is the system storing your password when the volume is not mounted so it can be revealed by the dialog?

    • psychometry 9 years ago

      Someone probably just mixed up the hash keys for the password field and the hint field. The hint needs to be stored unencrypted so that it can be displayed.

      • _jn 9 years ago

        Agree. It's probably an issue with the form, nothing underlying. (which means encrypted containers created via the command line should be safe from this vulnerability?)

jchw 9 years ago

So... it stores the password as a password hint?

One must wonder how Apple's QA process didn't catch something as egregious as that in a piece of security code.

  • natch 9 years ago

    Probably some unthinking tester was just using the same string in both fields (e.g. “test”). As a developer I’ve learned over the years not to do that. That tester should have their work attitude adjusted and their methods thoroughly reviewed.

    • headShrinker 9 years ago

      There’s probably some easy explanation but why is there a need separate code to store variables for the ssd vs hdd version? I would think this would be high level code, abstracted far away from any hardware differences

      • jsjohnst 9 years ago

        I believe the SSD vs HDD issue is not about the password hint codepath, but rather that APFS is only supported on SSDs right now.