Posts

Yesterday it was revealed that macOS has a critical bug that allows any user with physical access to a device, to login as the root user with no password. I have tested this myself, via the process below: Open System Preferences > Users & Groups Select the lock [ ? ] in the bottom left-hand corner of the window. Clear the pre-filled username, & replace it with “root” & select [Unlock]. [caption id=“attachment_115” align=“aligncenter” width=“431”] Screenshot of using the root account with no password/[/caption]- Once the attempt is rejected, try again with the same settings as above. I’ve read from a few different sources that say to do it a few times, before you are allowed in. During my testing, I just had to attempt it twice, & I was in. In order to fix this issue, you must change the root password through the Directory Utility. Open the app, hit the lock [ ? ] to enter your credentials (or use the root exploit again) then go to Edit > Change Root Password… NOTE: You MUST choose to change the password. Simply disabling the root account does not correct the issue. If you disable the account, running through the same process for the exploit reactivates the root account without a password. ...

Looks like the BBC’s twitter account has revealed the 13th Doctor’s outfit for the new series:

Looks like iOS has yet another Activation Lock bypass… Seems like all you have to do is have a device that is Activation Locked with an account that has 2FA enabled. Once that is set, you enter the wrong passcode several times, until you are timed out for an hour. Wait for the timer to run down, doing it a few more times, & you should bypass the activation lock. See the attached video for a demonstration I found on YouTube. ...

I will definitely be checking this out… [embed]https://youtu.be/470TG3AdA1A[/embed] Thanks to iO9 \ Gizmodo for posting it: Holy Crap, the Philip K. Dick Electric Dreams TV Series Looks Amazing

[embed]https://youtu.be/8hP6WROycAU[/embed] R.I.P. Chester Bennington

[caption id=“attachment_89” align=“aligncenter” width=“739”] Screenshot after a victory with Shadow MewTwo.[/caption] Placing this here for reference for myself, & anyone else interested. Don’t include the dashes. I just added them for easier reading. Simple T-Shirt Set: Male: TC2J-Y22V-BQUU Female: J7XE-EQLY-NDMT Old Leather Jacket Set: Male: 6GSS-ALLD-M9RL Female: NQLM-EMRG-X37X Hamburger Hat & Short Bob: Male: H5D9-YZFE-TCQZ Female: USBX-KG8X-4GLG Source: BulbaNews: Clothing codes revealed for Pokkén Tournament DX

Session Hijacking: Have to be Local Admin: cmd psexec -s \\localhost -i 2 taskmgr Right Click > Connect cmd query user tscon 1 — Denied tscon 1 /dest:console — Denied psexec -s \\localhost cmd whoami query user tscon 1 /des:console