From the Top to the Bottom; Tracking down CVE-2017-7149
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Patreon-supported blog post by Objective-See walks through reverse engineering macOS High Sierra's Disk Utility from the UI down to find the cause of CVE-2017-7149, a flaw that stored an encrypted APFS volume's password as its password hint, exposing it to local attackers.