Security Now (Video)

• Pixel 4 Face Unlock is so easy you can do it with your eyes closed!
• Samsung Galaxy S10 and Note 10 fingerprint sensor can be foiled with a $3 screen protector.
• The frenzy to turn CheckM8 into a consumer-friendly iOS jailbreak.
• Steganography finds a new host file format.
• Security display changes are coming to Firefox 70.
• More on Microsoft's open source "ElectionGuard" election security system.
• A potentially serious flaw found in Realtek WiFi drivers.
• Yubikey for local Windows login has been officially released.

We invite you to read our show notes at https://www.grc.com/sn/SN-737-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This week's stories

• A sobering reminder about supply chain attacks
• Facebook's stance on end-to-end encryption raises official protests
• UNIX's Co-Creator Ken Thompson's BSD UNIX Password Has Finally Been Cracked
• Japanese stalker finds idol using reflections in her eyes
• Americans and Digital Knowledge
• OpenPGP being built into Mozilla's Thunderbird eMail client
• Windows 10 Tamper Protection being enabled by default
• CheckM8
  
  We invite you to read our show notes at https://www.grc.com/sn/SN-736-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Ransomware hits schools, hospitals, and hearing aid manufacturers
• Sodinokibi: the latest advances in Ransomware-as-a-Service
• Win7 Extended Security Updates are extended
• A new Nasty 0-Day RCE in vBulletin
• There's a new WannaCry in town

We invite you to read our show notes at https://www.grc.com/sn/SN-735-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• The latest state-of-the-art secure solutions for cross-device, cross-location device synchronization
• Mozilla's recently announced plans to gradually and carefully bring DNS-over-HTTPS to all Firefox users in the US
• The EFF weighs in on DNS-over-HTTPS
• The 100% free VPN offering coming from our friends at Cloudflare

We invite you to read our show notes at https://www.grc.com/sn/SN-734-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories:

• Cryptomining makes a comeback
• The top three most attacked ports
• Small office/home office (SOHO) routers and wireless access points: "SOHOpelessly Broken"
• Chrome gets an emergency update, to 77.0.3865.90
• 2019 CWE Top 25 Most Dangerous Software Errors

We invite you to read our show notes at https://www.grc.com/sn/SN-733-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• SIMjacker allows attackers to hijack any phone just by sending it an SMS message.
• Here comes iOS "Lucky" 13!
• Chrome follows Mozilla to DoH with a twist.
• Want to enable DoH in Chrome right now? You can, right now, if you wish.
• Chrome stops showing Extended Validation certs in the URL bar.
• Mozilla launches 'Firefox Private Network' VPN service as a browser extension.
• Windows Patch Tuesday redux
• Chrome Remote Desktop
• EXIM eMail servers are in trouble again.

We invite you to read our show notes at https://www.grc.com/sn/SN-732-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This week's stories:

• Get rich quick spotting deepfakes!
• A forced two-day recess of all schools in Flagstaff, Arizona
• The case of a ransomware operator being too greedy
• Apple's controversial response to Google's discovery of Chinese iOS hacks
• Zerodium's new payout schedule and what it might mean.
• The final full public disclosure of BlueKeep exploitation code
• Serious PHP flaws, some potentially serious flaws found

We invite you to read our show notes at https://www.grc.com/sn/SN-731-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories:

• Google expands its bug bounty program
• New bug bounty millionaires
• Google's Project Zero group dropped a bomb on iOS
• Ransomware attacks on local governments and businesses are on the rise

We invite you to read our show notes at https://www.grc.com/sn/SN-730-Notes.pdf

If you're in Boston on October 3rd, join LastPass and TWiT.tv for the Cybersecurity & Identity Trends, Unlocked event. Sign up at http://twit.to/unlocked

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Texas Ransomware Update
• Remember that Kazakhstan cert?
• The mixed-blessing of "wide open" source projects
• RubyGems is in trouble again
• Chrome to add data breach notification
• iOS v12.4 updated quickly to 12.4.1
• Next-gen ad privacy

We invite you to read our show notes at https://www.grc.com/sn/SN-729-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Last Tuesday was another busy and important patch Tuesday
• And speaking of Patch Tuesday... 3rd-Party A/V Strikes Again!
• Kaspersky facilitates independent web tracking
• So, what the heck is "CTF"?
• 23 Government agencies in Texas were hit with a well-coordinated ransomware attack last Friday, August 16th
• RIP, EV: The coming demise of Extended Validation (EV) certificates
• And... So long FTP!
• HTTP/2 goes to the Movies
• "The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR/EDR"

We invite you to read our show notes at https://www.grc.com/sn/SN-728-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors: