[WayBack] Objective-See: tracking down the cause a serious authentication flaw in Mac OS X / MacOS / Mac OS 10: resetting the root password by just clicking OK.
Via: [WayBack] How the MacOS High Sierra ##IAmRoot bug actually works. ##insightful … TL;DR the return value of the verify password function is interpreted wrong. Fix looks trivial. But this IS a serious bug. – Jan Wildeboer – Google+
Note the bug was already revealed two weeks ago: [WayBack] … after updating to High Sierra, the two admin accounts on this machine are all of a sudden standard accounts …
Via: [Archive.is] Mike Myers @fristle: Perhaps nobody noticed two weeks ago when the root login vulnerability in macOS High Sierra was shared as a helpful tip on Apple’s own Developer forums. https://forums.developer.apple.com/thread/79235
The bug has already been fixed: [WayBack] About the security content of Security Update 2017-001 – Apple Support
Via: [WayBack] That was reasonably fast! ##Apple has released the fix for the embarrassing ##IAmRoot bug. https://support.apple.com/en-us/HT208315 – Jan Wildeboer – Google+
–jeroen