Security Now (Video)

This Week's Stories

• The continuing and changing world of cryptojacking after Coinhive closed their doors last month.
• Google's announcement of self-expiring data retention
• The mess arising from Mozilla's intermediate certificate expiration
• Another wrinkle in the exploit marketplace
• Mozilla's announcement about deliberate code obfuscation
• A hacker who hacked at least 29 other botnet hackers
• A warning about a very popular D-Link netcam
• Who's paying and who's receiving bug bounties by country
• Another User-Agent gotcha with Google Docs
• A problem with Google Earth on the new Chromium-Edge browser
• A bit more about Edge's future just dropped at the start of Microsoft's Build 2019 conference.

We invite you to read our show notes at https://www.grc.com/sn/SN-713-Notes.pdf

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• The large and emerging threat of website credential stuffing attacks.
• Privacy fallout from our recent coverage of Facebook and Google
• The uptake rate of recent Windows 10 feature releases
• The source of the A/V troubles with the April patch Tuesday updates
• The NIST's formal fuzzing development
• A massive and ongoing database data leak involving more than half of all American households
• Windows Insiders are already finding that their systems won't update to the May 2019 feature update.
• United Airlines passengers have noticed and been understandably upset by seatback cameras pointing at them.

We invite you to read our show notes at https://www.grc.com/sn/SN-712-Notes.pdf

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Top Security Stories this Week:

• Google uses its "sensorvault" to help catch the bad guys.
• Time to update Drupal again.
• Facebook steals users' email contact lists, logs plaintext Instagram passwords
• Russia moves closer to adopting "Internet Master Cutoff Switch" legislation.
• A reminder that "USB Killers" are a real thing.
• Marcus Hutchins' plea deal
• A new(ish) actively exploited Windows 0-day
• A bunch of Microsoft Edge news
• Windows 7 end-of-life notices
• Something from the "I did say this was bound to happen" department
• Detailed threat research from Cisco's Talos group about the leveraging of DNS espionage.

We invite you to read our show notes at https://www.grc.com/sn/SN-711-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• DragonBlood: the first effective attack on the new WPA3 protocol
• Malicious use of the URL tracking "ping" attribute
• The WinRAR Nightmare
• More 3rd-party A/V troubles with Microsoft
• What good did April's patch Tuesday accomplish?
• Adobe 's big patch Tuesday
• Google considering automatically blocking "high risk" downloads
• Russia's Roskomnadzor finally lowers the boom on Facebook
• The incredible Taj Mahal APT framework

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• Yet another capitulation in the (virtually lost) battle against tracking our behavior on the Internet with URL "ping" tracking.
• UK government's plan to legislate, police and enforce online social media content
• Microsoft's Chromium-based Edge browser's security
• Improvements to Windows 10's update management
• News from the "spoofing biometrics" department
• The worrisome state of Android mobile financial apps
• NSA's GHIDRA software reverse engineering tool suite
• Perhaps the dumbest thing Facebook has done yet (and by policy, not by mistake)
• An important change in Win10 1809 external storage caching policy

Hosts: Jason Howell and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Android Security, 10 Years Later
• WinRAR, a 20+ Year Old Tool With 500M Users, Acknowledged Vulnerability
• Russian GPS Hacking and What It Means For Us
• Android's April Fools Day Patches
• Tesla Autopilot Spoofing
• The ASUS "ShadowHammer" Attack
• Windows 10 (last) October 2018 Update
• A VMware Update

We invite you to read our show notes at https://www.grc.com/sn/SN-708-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Results of the much anticipated Mid-March Vancouver Pwn2Own competition

• The return of "Clippy", Microsoft's much-loathed dancing paperclip
• Operation "ShadowHammer" which reports say compromised ASUS (... but did it?)
• The ransomware attack on Norsk Hydro aluminum
• The surprise renaming of Windows Defender
• A severe bug revealed in the most popular PDF generating PHP library
• An early look at Microsoft's forthcoming Chromium-based web browser
• Hope for preventing caller ID spoofing
• A needed update for users of PuTTY
• Mozilla's decision to conditionally rely upon Windows' root store
• Microsoft to offer virtual Windows 7 and 10 desktops through Azure
• Details of the Windows 7 End of Life warning dialogue

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Last week's Patch Tuesday March Madness
• Win7 SHA256 Windows Update... Update
• Many attacks leveraging the recently discovered WinRAR vulnerability
• What happens when Apple, Google, and GoDaddy all drop a bit?
• A big recent jump in Mirai Botnet Capability
• Compromised Counter-Strike gaming servers
• Privacy enhancements coming in Android Q
• A pair of very odd web browser extensions for Chrome and Firefox from Microsoft
• A VERY exciting and encouraging project to create an entirely open eVoting system

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• 0-day exploit bidding war
• NSA releases Ghidra v9
• Firefox adds Tor privacy
• A pair of nasty 0-days
• A worrisome breach at Citrix
• The risk of claiming to be an unhackable aftermarket car alarm
• A new and interesting "Windows developers chatting with users" idea at Microsoft
• A semi-solution to Windows updates crashing systems
• Detailed news of the Marriott/Starwood breach, a bit of miscellany from
• SPOILER: Another new and different consequence of speculation on Intel machines.

We invite you to read our show notes at https://www.grc.com/sn/SN-705-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• The increasing feasibility of making a sustainable career out of hunting for software bugs
• A newly available improvement in Spectre mitigation performance and who can try it now
• Adobe's ColdFusion emergency and patch,
• More problems with A/V and self-signed certs
• A Docker vulnerability being exploited in the wild
• The end of Coinhive
• A new major Wireshark release
• A nifty web browser website screenshot hack
• Continuing troubles with the over-privileged Thunderbolt interface
• Bot-based credential stuffing attacks

We invite you to read our show notes at https://www.grc.com/sn/SN-704-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors: