Hacker News Reader

TL;DR:

There is no need to crack the password. You (as non-root user) can just reset the currently logged in user's password by calling:

dscl localhost -passwd /Search/Users/bob

Not any, but the currently logged-in user.

Thanks for the clarification!

Has anyone tried this yet? One of the comments on that blog mention you still have to enter to old password in order to reset.

$ dscl localhost -passwd /Search/Users/bob

New Password: *

Permission denied. Please enter user's old password:

If you are currently logged in as alice, this is correct. However, if you are logged in as bob, you are not prompted for the old password.