Light

Episode #1037 Quiz

Chinese Participation in MAPP
Date: 2025-08-05 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

This episode covers multiple security topics, highlighting Microsoft's SharePoint vulnerability patch mishandling caused by Chinese-based engineers, raising espionage concerns. Russia's Turla group injects malware via fake Kaspersky updates to intercept embassy traffic. Google’s new Chrome extension signing prevents abuse via offline private key signatures. TruAge age-verification technology integrates with W3C standards but raises privacy concerns.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What was the problematic practice Microsoft used regarding SharePoint software maintenance that posed a security risk according to the episode?

Question 1

What was the problematic practice Microsoft used regarding SharePoint software maintenance that posed a security risk according to the episode?

Publishing patches on public forums before internal testing was complete. Allowing users to directly patch SharePoint servers without centralized Microsoft controls. Outsourcing all SharePoint development to contractors in Eastern Europe with minimal oversight. Using China-based engineers to support and patch SharePoint on-premises, despite active cyberattacks from China.

Question 2: How did the Russian group tracked as Secret Blizzard or Turla manage to spy on foreign embassies within Russia?

Question 2

How did the Russian group tracked as Secret Blizzard or Turla manage to spy on foreign embassies within Russia?

By exploiting vulnerabilities in embassy virtual private networks (VPNs) to decrypt traffic. By hacking embassy Wi-Fi routers and extracting unencrypted traffic directly from them. By intercepting unencrypted HTTP traffic using SORM hardware at the Russian ISPs. By redirecting embassy users to fake Kaspersky antivirus update portals that installed a root certificate and malware for man-in-the-middle attacks.

Question 3: What is the main security concern with TP-Link Archer C50 routers as discussed in the episode?

Question 3

What is the main security concern with TP-Link Archer C50 routers as discussed in the episode?

They have a hardcoded backdoor user account enabling remote access without authentication. They use DES encryption in ECB mode for configuration settings, allowing attackers to recover admin passwords. They expose SNMP management interfaces to the internet with default passwords. They fail to implement WPA3, making Wi-Fi connections vulnerable to KRACK attacks.

Question 4: What unique protection feature did Google introduce for Chrome extension developers to prevent malicious modification of published extensions?

Question 4

What unique protection feature did Google introduce for Chrome extension developers to prevent malicious modification of published extensions?

Requiring developers to submit source code for all extensions to a manual Google security review prior to approval. Mandating two-factor authentication on all developer accounts before publishing any extension. Providing developers the ability to generate an RSA key pair offline and upload only the public key for signature verification of extension uploads. Implementing blockchain-based timestamping for all extension uploads to prove integrity.

Question 5: According to the episode's discussion of Microsoft’s MAPP program, why is China's participation in it considered a high security risk?

Question 5

According to the episode's discussion of Microsoft’s MAPP program, why is China's participation in it considered a high security risk?

Because Microsoft only allows Chinese companies entry to MAPP after a background check by U.S. intelligence, which is easily circumvented. Because Chinese companies share their MAPP data publicly on open forums, exposing sensitive info to attackers worldwide. Because Chinese law requires companies to report zero-day vulnerabilities to state authorities within 48 hours, possibly enabling the government to weaponize them. Because Chinese MAPP members are unable to detect advanced persistent threats, invalidating early warning efforts.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.