Light

Episode #1014 Quiz

FREEDOM Administration Login
Date: 2025-02-25 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Episode 1014 of Security Now!

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What primary reason does Steve Gibson give for Apple's decision to disable Advanced Data Protection (ADP) for new users in the UK?

Question 1

What primary reason does Steve Gibson give for Apple's decision to disable Advanced Data Protection (ADP) for new users in the UK?

To improve compatibility with legacy Apple devices that do not support ADP. To uniformly remove ADP globally due to technical difficulties in encryption management. To comply with the UK government's demand to enable legal access to encrypted iCloud backup data. Because ADP had unfixable security vulnerabilities that risked user data.

Question 2: Regarding vulnerabilities discovered in OpenSSH discussed in the episode, which statement best captures their nature and recommended mitigation?

Question 2

Regarding vulnerabilities discovered in OpenSSH discussed in the episode, which statement best captures their nature and recommended mitigation?

Vulnerabilities that only affect FreeBSD systems, remediated by replacing FreeBSD with another OS. A phishing vulnerability in SSH clients affecting user credential entry, mitigated by disabling SSH key authentication. Two vulnerabilities include an attackable VerifyHostKeyDNS option and a pre-auth denial-of-service attack, with mitigation by updating to OpenSSH 9.9p2 and setting VerifyHostKeyDNS to 'no'. A critical remote code execution and user privilege escalation, requiring disabling VerifyHostKeyDNS and uninstalling OpenSSH temporarily.

Question 3: What critical security failure makes the FREEDOM Administration Login access control system vulnerable to remote attacks?

Question 3

What critical security failure makes the FREEDOM Administration Login access control system vulnerable to remote attacks?

Lack of logging and audit controls preventing detection of unauthorized access. Encryption keys stored locally in plaintext on the device, enabling remote decryption of communications. Single-factor authentication combined with exposure only on an internal LAN interface. Use of hardcoded default credentials 'freedom:viscount' exposed on Internet-facing web admin panels with no enforced password change.

Question 4: About the intrusion of Chinese "Salt Typhoon" hackers into U.S. telecommunications, what key vulnerability did they exploit for persistent access?

Question 4

About the intrusion of Chinese "Salt Typhoon" hackers into U.S. telecommunications, what key vulnerability did they exploit for persistent access?

Man-in-the-middle attacks on telecom internal communication encrypted with outdated TLS versions. Default weak SNMP community strings on telecom routers allowing remote code execution. Zero-day remote code execution in custom telecom proprietary software unrelated to Cisco IOS. Long-unpatched Cisco IOS XE Web UI privilege escalation vulnerabilities and exposed web management interfaces.

Question 5: Which process enabled the North Korean Lazarus Group to steal $1.5 billion from the Bybit cryptocurrency exchange, despite multi-person authorization controls?

Question 5

Which process enabled the North Korean Lazarus Group to steal $1.5 billion from the Bybit cryptocurrency exchange, despite multi-person authorization controls?

Stealing private keys directly by exploiting cold wallet air gaps through physical access at Bybit's datacenter. Brute force cracking of wallet encryption keys due to weak password policies on Bybit's systems. Compromising each multi-sig signer's devices with malware and altering the wallet software UI to show fake transaction details, leading to unwitting approval. Phishing Bybit's CEO to obtain administrator credentials, then performing unauthorized transfers without requiring multi-sig.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.