Light

Episode #1061 Quiz

More GhostPoster
Date: 2026-01-20 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Episode Security Now!

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the Security Now! episode transcript, what specific technique did the GhostPoster malicious browser extensions use to evade traditional security detection in Firefox, Edge, and Chrome?

Question 1

According to the Security Now! episode transcript, what specific technique did the GhostPoster malicious browser extensions use to evade traditional security detection in Firefox, Edge, and Chrome?

Utilizing DNS rebinding attacks to hijack traffic. Exploiting zero-day vulnerabilities in browser rendering engines. Hijacking browser extension update mechanisms for payload delivery. Embedding malicious payloads in PNG icon files using steganography.

Question 2: What is the primary operational drawback of the approach taken by ANCHOR compared to the original CIPAC for industry-government cyber threat information sharing, as discussed in the episode?

Question 2

What is the primary operational drawback of the approach taken by ANCHOR compared to the original CIPAC for industry-government cyber threat information sharing, as discussed in the episode?

Uncertainty around the scope and consistency of liability protections for participants. Lack of any mechanism to open meetings or transcripts to the public. Overly rigid requirement for individual charters for each subcommittee. Complete absence of participation by private sector industry executives.

Question 3: Based on the episode's discussion, why does Steve Gibson disagree with the Electronic Freedom Foundation's (EFF) absolutist stance on encryption privacy in light of intelligence agency capabilities?

Question 3

Based on the episode's discussion, why does Steve Gibson disagree with the Electronic Freedom Foundation's (EFF) absolutist stance on encryption privacy in light of intelligence agency capabilities?

Because the EFF exaggerates encryption flaws due to lack of technical understanding. Because he believes perfect forward secrecy is unbreakable and negates mass surveillance. Because intelligence agencies' data collection and future quantum computing capabilities create a need for archival storage of encrypted data. Because he believes law enforcement has no interest in mass data collection due to privacy laws.

Question 4: What security improvement is enabled by the newly available six-day Let’s Encrypt certificates, according to the podcast?

Question 4

What security improvement is enabled by the newly available six-day Let’s Encrypt certificates, according to the podcast?

They make revocation unnecessary by employing quantum-resistant algorithms. They provide automatic DNSSEC validation as part of certificate issuance. They enforce mandatory multi-factor client authentication at TLS handshake. They reduce the vulnerability window caused by reliance on unreliable revocation mechanisms.

Question 5: Regarding the GhostPoster campaign’s infection timeline, which of the following best describes the progression and current scope as revealed in the episode?

Question 5

Regarding the GhostPoster campaign’s infection timeline, which of the following best describes the progression and current scope as revealed in the episode?

All major browser extensions were infected simultaneously in late 2022, with detection and removal within months. Chrome was the primary initial target beginning in 2018, followed by Edge and Firefox in 2020, totaling about 200,000 installs. It began on Firefox in 2024, then spread to Chrome and Edge with limited installs under 50,000. It originated on Microsoft Edge in early 2020, expanded to Firefox and Chrome, with over 840,000 installs identified, some active for up to five years.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.