Apple 's nightmare doesn't seem to be ending anytime soon, as a new vulnerability in macOS exposes passwords used for encrypted APFS external drives in plain text.
The security flaw exists in macOS 10.13.1 and can only be exploited with a Terminal command, with newer versions of the operating system likely protected from the flaw. However, the flaw still exists in macOS 10.13.3, so it can be detected when encrypting an existing unencrypted APFS drive.
Apple has not commented on the issue, so it is not known whether the company has fixed the bug in the latest versions of macOS, although we do note that the vulnerability cannot be activated in the same way as in older builds of the operating system .
This isn't the only security vulnerability recently discovered in macOS, as a bug has also been identified that exposes the root password in a method that doesn't require advanced computer skills.
Apple acknowledged the root bug and offered a fix, which created more issues that were then addressed with a second patch.
The security fiasco forced Apple to reconsider its strategy for future software updates, so instead of focusing on new features for macOS and iOS, the company has pledged to invest more in the security and reliability of its products.
This means that subsequent releases, such as macOS 10.14 and iOS 12, will be poorer in new features and richer in code improvements that will help address bugs on Apple devices.
The next versions of macOS and iOS will likely be unveiled this summer at WWDC. It remains to be seen how the company's new strategy will work, as customers always expect new features every time new software updates are introduced to their devices.
