Security Flaw - Oops!

Apple has released an update.

GordonThree wrote:
In summary, this is a physical, local only attack. Don't leave your Mac someplace where unauthorized use could occur.

Don't be too comfortable with that notion. The fix is simple though and should be done regardless. Read on...

https://krebsonsecurity.com/2017/11/macos-high-sierra-users-change-root-password-now/

There is a way to stop this before Apple get readied a patch! Search and type "Mac OS Sierra root". there is a thread on what to do to do.

In summary, this is a physical, local only attack. Don't leave your Mac someplace where unauthorized use could occur.