SN 884: TLS Private Key Leakage - BIG patch Tuesday, Facebook E2E encryption, VNC insecurity, Cyotek WebCopy

Picture of the Week.

Patch Flashback Tuesday.

Facebook is cautiously creeping toward default E2E encryption.

VNC's inherent insecurity.

The need to control domain names.

And speaking of backup: Cyotek WebCopy.

Google's Ryan Sleevi Retweeted Jens Axboe.

SandSara Update from Ed Cano.

Closing The Loop.

SpinRite.

TLS Private Key Leakage.

We invite you to read our show notes at https://www.grc.com/sn/SN-884-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

bitwarden.com/twit

newrelic.com/securitynow

Secureworks.com/twit