Light

Episode #1019 Quiz

EU OS
Date: 2025-04-01 | Length: 2.75 hrs | Episode page at twit.tv

About this episode

Security Now! Episode 1019 covers Kuala Lumpur Airport’s ransomware response by reverting to analog flight info to resist a $10M ransom, and a phishing attack compromising Troy Hunt’s Mailchimp account exposing 16,000 user records. Cloudflare now blocks HTTP port 80 for API, mandating HTTPS to prevent credential exposure.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What primary operational change did Cloudflare implement regarding API access to enhance security?

Question 1

What primary operational change did Cloudflare implement regarding API access to enhance security?

They completely closed all HTTP (port 80) connections to api.cloudflare.com, only allowing HTTPS connections. They required all API clients to use IP whitelisting to access api.cloudflare.com. They introduced mandatory captcha challenges for all API HTTP connections on port 80. They implemented a 403 Forbidden response for all HTTP requests to api.cloudflare.com.

Question 2: According to the episode, why does malware authoring in less-common programming languages reduce detection rates by antivirus systems?

Question 2

According to the episode, why does malware authoring in less-common programming languages reduce detection rates by antivirus systems?

Static analysis tools are deliberately designed to ignore non-C and C++ binaries to reduce false positives. Less-common languages produce binaries with different internal representations and function calls, which confound signature-based static analysis. Using uncommon languages prevents malware from running under modern operating systems, thus evading detection at runtime. Malware written in less-common languages is automatically flagged as safe by AV due to low prevalence and trust.

Question 3: What key feature or approach does the proposed EU OS emphasize to achieve sovereignty and security for the EU public sector?

Question 3

What key feature or approach does the proposed EU OS emphasize to achieve sovereignty and security for the EU public sector?

Partnering exclusively with Microsoft to develop a custom Windows 11 variant with EU privacy enhancements. Using an open source, Fedora-based Linux distribution with no telemetry and strict data control complying with GDPR. Deploying a cloud-only thin client approach where all software runs remotely to avoid any local data storage. Building a completely new Linux kernel tailored exclusively to EU requirements and hardware.

Question 4: What was the nature and effect of the automated phishing attack on Troy Hunt’s Mailchimp account?

Question 4

What was the nature and effect of the automated phishing attack on Troy Hunt’s Mailchimp account?

An automated phishing site collected username, password, and one-time password quickly, then immediately logged in to export his mailing list before he could act. His Mailchimp credentials were stolen in an unrelated data breach months before and reused in credential stuffing attempts. A social engineering phone call tricked him into revealing his Mailchimp password live. He received a spam email with a malicious attachment that installed malware to extract stored credentials from his browser.

Question 5: Why does EU OS aim to be a common base for public EU bodies rather than a collection of diverse Linux distributions?

Question 5

Why does EU OS aim to be a common base for public EU bodies rather than a collection of diverse Linux distributions?

To enable shared management tools, mutualized resources, and easier deployment and maintenance at organizational and sector levels. To restrict user choice and ensure all public sector users have identical hardware to avoid compatibility issues. Because a single Linux distribution is legally required to comply with all EU national laws. So that the EU can build its own proprietary software stack independent of global open source projects.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.