Light

Episode #800 Quiz

SolarBlizzard
Date: 2021-01-05 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Chrome now retries ReplaceFile on Windows when antivirus scanners transiently lock newly created files, avoiding bookmark-save failures. Zyxel embedded hardcoded credentials in enterprise firewalls, VPN gateways, and controllers, enabling root access and network pivoting. Additional risks include IoT swatting via compromised cameras, PHP deserialization RCEs, SSD trimming effects, and SolarWinds API authentication bypasses.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What change did Chromium make in response to antivirus scanners briefly locking newly created files on Windows 10?

Question 1

What change did Chromium make in response to antivirus scanners briefly locking newly created files on Windows 10?

Queue the bookmark write until the next browser restart Disable antivirus scanning for newly created bookmark files Retry the ReplaceFile operation until it succeeds Bypass the file system and write bookmarks directly to memory

Question 2: According to the episode, what was the nature of the newly found Zyxel issue affecting more than 100,000 devices?

Question 2

According to the episode, what was the nature of the newly found Zyxel issue affecting more than 100,000 devices?

A certificate validation flaw in the VPN portal A hardcoded credential for a backdoor admin account A misconfigured default SNMP community string A heap overflow in the WAN packet parser

Question 3: How did the FBI say recent swatting attacks were being carried out through smart home devices?

Question 3

How did the FBI say recent swatting attacks were being carried out through smart home devices?

By planting malware on home routers to forge emergency calls By abusing cloud backups to recover deleted emergency footage By using stolen email passwords to hijack cameras and speakers By exploiting a firmware flaw to disable police dispatch logging

Question 4: What was the key performance tradeoff Steve explained after running SpinRite Level 3 on an SSD?

Question 4

What was the key performance tradeoff Steve explained after running SpinRite Level 3 on an SSD?

It increases read speed only by overclocking the SATA interface It preserves trim state while repairing only the front gigabyte It improves recovery but removes trim information from unused regions It speeds writes but permanently reduces controller cache size

Question 5: What did Microsoft say about the risk of employees viewing source code during its Solorigate investigation?

Question 5

What did Microsoft say about the risk of employees viewing source code during its Solorigate investigation?

Source code access was limited to third-party contractors with no internal accounts Source code access was evidence of an unauthorized system-wide compromise Source code visibility is blocked because secrecy is essential to security Source code visibility does not itself increase risk

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.