Light

Episode #808 Quiz

CNAME Collusion
Date: 2021-03-02 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Chrome 90 will default schemeless URLs to HTTPS first; Firefox 86 adds Total Cookie Protection to confine cookies per site. SolarWinds may have been compromised by weak credentials, while Rockwell PLCs and VMware vCenter faced critical RCE flaws. Most notably, CNAME cloaking lets trackers bypass defenses and leak authentication cookies.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In Firefox 86’s new Total Cookie Protection, what is the fundamental effect on third-party cookies according to the episode?

Question 1

In Firefox 86’s new Total Cookie Protection, what is the fundamental effect on third-party cookies according to the episode?

They are shared across all visited sites to preserve login state They are blocked entirely unless the user explicitly allows them They are confined to the site where they were created They are converted into encrypted tokens that cannot be reused

Question 2: What was the specific Chrome behavior change described as coming in Chrome 89 as an experiment and then Chrome 90 more broadly?

Question 2

What was the specific Chrome behavior change described as coming in Chrome 89 as an experiment and then Chrome 90 more broadly?

Schemaless typed URLs will try HTTPS before HTTP DNS lookups will be redirected to encrypted DoH resolvers by default Third-party cookies will be partitioned by top-level site All HTTP pages will be upgraded to HTTPS unconditionally

Question 3: What was the root of the Rockwell Automation PLC vulnerability discussed in the episode?

Question 3

What was the root of the Rockwell Automation PLC vulnerability discussed in the episode?

A single globally shared static encryption key An unauthenticated buffer overflow in the PLC firmware A weak password on the Studio 5000 update server A missing firewall rule on the engineering workstation

Question 4: Why did VMware vCenter become a mass-scanning target immediately after the patch for CVE-2021-21972 was released?

Question 4

Why did VMware vCenter become a mass-scanning target immediately after the patch for CVE-2021-21972 was released?

The patch required a paid license upgrade before it could be applied The vulnerability only affected offline lab deployments The patch was instantly reversed and public exploits appeared the next day The flaw was only in the Linux version and had no Windows impact

Question 5: How did the CNAME-based tracking technique let trackers receive cookies that were meant for the visited site?

Question 5

How did the CNAME-based tracking technique let trackers receive cookies that were meant for the visited site?

By requiring users to manually export session cookies to trackers By encrypting cookies so the browser could not tell their origin By forcing browsers to store all cookies in shared global storage By making tracker subdomains look like same-site DNS aliases

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.