New macOS High Sierra vulnerability exposes the password of an encrypted APFS container

Written by matheusmariano | Published 2017/09/27
Tech Story Tags: apple | security | vulnerability | exploit | macos

TLDRvia the TL;DR App

This week, Apple released the new macOS High Sierra with the new file system called APFS (Apple File System). It wasn’t long before I encountered issues with this update. Not a simple issue, but a potential vulnerability.

I created a new Encrypted APFS container.

And put a password (mypassword) with a hint.

After created, I unmounted and mounted again my new container.

And voilà.

The problem affects only Macs with SSD.

I really don’t know how this went unnoticed by Apple (and anyone else). Anyway, it was already reported to Apple by me.


Published by HackerNoon on 2017/09/27