Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

July 09, 2024SN 982: The Polyfill.io Attack - Entrust Responds, Passkey Redaction Attacks
Entrust Responds

Other major Certificate Authorities respond

Passkey Redaction Attacks

Syncing passkeys

Port Knocking

Fail2Ban

The Polyfill.io Attack

Show Notes - https://www.grc.com/sn/SN-982-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
lookout.com
vanta.com/SECURITYNOW
bitwarden.com/twit
panoptica.app
1 hr 58 min
July 02, 2024SN 981: The End of Entrust Trust - Open SSH Vulnerability, SyncThing, Endtrust
The regreSSHion Bug

50BTC moved

Voyager 1 Update

Email @ GRC

SyncThing

DNS queries

Recall

The End of Entrust Trust

Show Notes - https://www.grc.com/sn/SN-981-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bigid.com/securitynow
joindeleteme.com/twit promo code TWIT
panoptica.app
lookout.com
2 hr 28 min
June 25, 2024SN 980: The Mixed Blessing of Lousy PRNG - Kaspersky Ban, EU vs. Google's Privacy Sandbox
Expected follow-up on CVE-2024-30078

From Russia with Love

An EU privacy agency complains about Google's Privacy Sandbox?

Email @ GRC

Security Now SPAM?

Orange Tsai needs help!

Recall and 3rd Party Leakage

Errata

The Mixed Blessing of a Crappy PRNG

Show Notes - https://www.grc.com/sn/SN-980-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
joindeleteme.com/twit promo code TWIT
1password.com/securitynow
mylio.com/twit
canary.tools/twit - use code: TWIT
2 hr 4 min
June 18, 2024SN 979: The Angle of the Dangle - "Recall" Recall, IT at the NYT, Private Cloud Compute
CVE-2024-30078

"Recall" has been recalled

Matthew Green on Apple's Private Cloud Compute

A WGET flaw with a CVSS of 10.0?

Thou shall not Resolve!

Email @ GRC

Downloading email with MailStore Home

IT at The New York Times

ReMarkable

The Angle of the Dangle

Show Notes - https://www.grc.com/sn/SN-979-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
1bigthink.com
kolide.com/securitynow
GO.ACILEARNING.COM/TWIT - code TWIT100
2 hr 15 min
June 11, 2024SN 978: The Rise and Fall of code.microsoft.com - Apple Password Manager, AI Coding
MS on Recall changes

Thanks for the "Memory"

New York Times (and Wordle) leak

Apple's own password manager app

DJI drones on the defensive

SlashData reveals some interesting developer statistics

Are we going to turn programming over to AIs?

The Linux Kernel Project goes CVE crazy

Email @ GRC

Pizza in 2024

Microsoft Recall at work

Google Domains to Squarespace DNS migration

T2F2-NFC-Dual keys

The rise and fall of code.microsoft.com

Show Notes - https://www.grc.com/sn/SN-978-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
mylio.com/twit
joindeleteme.com/twit promo code TWIT
1bigthink.com
kolide.com/securitynow
2 hr 21 min
June 04, 2024SN 977: A Large Language Model in Every Pot - Problems With Recall, End of ICQ, Email @ GRC
"Tornado Notes"

Email @ GRC

Have I Been Pwned?

A new "supply chain" attack vector

Another CA in the DogHouse

ICQ to shutter its service

Steve reviews "Déjà vu"

Hide my email

Security in Windows

SpinRite update

A Large Language Model in Every Pot

Show Notes - https://www.grc.com/sn/SN-977-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
GO.ACILEARNING.COM/TWIT - code TWIT100
kolide.com/securitynow
zscaler.com/zerotrustAI
Melissa.com/twit
1 hr 56 min
May 28, 2024SN 976: The 50 Gigabyte Privacy Bomb - Google AI Workarounds, Microsoft Recall
The bigger problem with AI Overview

https://udm14.com/ -and- https://tenbluelinks.org/

The horses have left the barn

VPNs and Firewalls

Email @ GRC

Extension to fix Google search

Passwords and SPAM

Fixing motherboard components

Vertical tabs in Firefox

FritzBox routers

Too many PINs

More Google search fixes

Testing Windows XP

The 50 Gigabyte Privacy Bomb

Show Notes - https://www.grc.com/sn/SN-976-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
kolide.com/securitynow
joindeleteme.com/twit promo code TWIT
bitwarden.com/twit
1bigthink.com
2 hr 14 min
May 21, 2024SN 975: 312 Scientists & Researchers Respond - 3 Chrome Zero-Days, Free Laundry
When you're the biggest target...

Searching for Search

How long will a Windows XP machine survive unprotected on the Internet?

Free Laundry

VPNs and Firewalls

Netgate SG1100

Ad Industry vs. Google Privacy Sandbox

Bitwarden and passkeys

Token2 passkey dongle

312 Scientists & Researchers Respond

Show Notes - https://www.grc.com/sn/SN-975-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
1bigthink.com
business.eset.com/twit
mylio.com/twit
2 hr 15 min
May 14, 2024SN 974: Microsoft's Head in the Clouds - 4-Digit Pins, Long Range Navigation, Microsoft
Picture of the Week.

Most to least common 4-digit pins.

Enhanced LORAN.

Passkeys.

Microsoft's Head in the Clouds.

Show Notes - https://www.grc.com/sn/SN-974-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
1bigthink.com
zscaler.com/zerotrustAI
kolide.com/securitynow
joindeleteme.com/twit promo code TWIT
1 hr 56 min
May 07, 2024SN 973: Not So Fast - GPS Vulnerabilites, VPN Flaw
The vulnerability of GPS

Is the sky falling on all VPN systems?

Multi-user Passkeys, YubiKeys?

The iCloud Keychain

The UK and Google's Topics

Show Notes - https://www.grc.com/sn/SN-973-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
kolide.com/securitynow
lookout.com
bitwarden.com/twit
2 hr 25 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.