Apple's macOS Reveals Your Encrypted Drive's Password in the Hint Box

Source: www.hardocp.com --- Sunday, October 08, 2017
Apple had to issue an emergency update for macOS High Sierra this week to address a bug that exposed the passwords of encrypted APFS volumes via the password hint feature: when a user mounts an APFS volume and is asked to enter the password before being able to access the data, the user's password is displayed instead of the hint if the password hint button is pressed. The problem becomes apparent when you create an encrypted APFS volume on a Mac with an SSD using Apple's Disk Utility app. After setting up a password hint, invoking the password hint mechanism during an attempt to remount the volume will display the actual password in plaintext rather than the hint. Discussion ...

from Apple http://ift.tt/2hXYT6B