Security Now (Audio)

SN 938: Apple Says No - Topics coming to Android, Apple security research, browser extension vulnerabilities

Listen Later
  • Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives.
  • There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage.
  • Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security.
  • Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected.
  • Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks.
  • Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so.

    • Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • drata.com/twit
    • panoptica.app
    • canary.tools/twit - use code: TWIT

      • ...more
      View all episodesView all episodes
      Download on the App Store
      Security Now (Audio)By TWiT
      • 4.6
      • 4.6
      • 4.6
      • 4.6
      • 4.6

      4.6

      1,987 ratings

      More shows like Security Now (Audio)

      View all
      Hacked by Hacked

      Hacked

      190 Listeners

      This Week in Tech (Audio) by TWiT

      This Week in Tech (Audio)

      3,060 Listeners

      Hands-On Tech (Audio) by TWiT

      Hands-On Tech (Audio)

      1,964 Listeners

      MacBreak Weekly (Audio) by TWiT

      MacBreak Weekly (Audio)

      2,011 Listeners

      Windows Weekly (Audio) by TWiT

      Windows Weekly (Audio)

      887 Listeners

      Intelligent Machines (Audio) by TWiT

      Intelligent Machines (Audio)

      780 Listeners

      Daily Tech News Show by Tom Merritt

      Daily Tech News Show

      1,393 Listeners

      Risky Business by Patrick Gray

      Risky Business

      374 Listeners

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

      653 Listeners

      CyberWire Daily by N2K Networks

      CyberWire Daily

      1,022 Listeners

      Smashing Security by Graham Cluley

      Smashing Security

      318 Listeners

      Darknet Diaries by Jack Rhysider

      Darknet Diaries

      8,039 Listeners

      Cybersecurity Today by Jim Love

      Cybersecurity Today

      181 Listeners

      Hacking Humans by N2K Networks

      Hacking Humans

      315 Listeners

      Cyber Security Headlines by CISO Series

      Cyber Security Headlines

      139 Listeners