Light

Episode #813 Quiz

A Spy in Our Pocket
Date: 2021-04-06 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Ubiquiti allegedly suffered a two-month AWS compromise exposing admin credentials, SSO cookies, source code, signing keys, logs, databases, and cloud accounts, potentially enabling remote takeover of mandatory-cloud devices. Google is restricting Android package visibility. QNAP NAS flaws permit unauthenticated shell access. iOS and Android routinely transmit telemetry, IMEI, SIM, location, and nearby MACs.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the key architectural problem with Ubiquiti’s newer setup model for managing devices like the UniFi Dream Machine?

Question 1

According to the episode, what was the key architectural problem with Ubiquiti’s newer setup model for managing devices like the UniFi Dream Machine?

It forced users to place all IoT devices on the same LAN as their primary workstations It prevented firmware upgrades unless the device was physically connected to Amazon’s internal network It removed two-factor authentication and replaced it with password-only access to the controller It required users to manage local devices through a cloud-based account even for on-premises administration

Question 2: What did Brian Krebs’ source say the attackers obtained from Ubiquiti’s AWS-hosted environment?

Question 2

What did Brian Krebs’ source say the attackers obtained from Ubiquiti’s AWS-hosted environment?

Root admin access to Ubiquiti’s AWS accounts with S3 buckets, databases, logs, and SSO-cookie secrets Access to the physical hardware security modules in Ubiquiti’s offices Read-only access to a single support database used for troubleshooting tickets Only a limited set of customer email addresses and password hashes

Question 3: What specific change did Troy Hunt make to Have I Been Pwned after the Facebook leak became public again?

Question 3

What specific change did Troy Hunt make to Have I Been Pwned after the Facebook leak became public again?

He removed email-address searches because the Facebook data lacked enough email records He added searchable lookup by phone number for the leaked Facebook dataset He restricted the dataset to U.S. records because the other countries were incomplete He switched the site to searching by Facebook username instead of personal contact data

Question 4: What action by the Kansas water district case did Steve describe as especially concerning?

Question 4

What action by the Kansas water district case did Steve describe as especially concerning?

The suspect used a phishing campaign to steal public utility billing records The suspect exploited a brand-new zero-day in municipal SCADA hardware The suspect gained access through a vendor’s cloud dashboard after a password reset The suspect had previously worked for the water district and had regular remote access

Question 5: Which pair of Android package-visibility details did Google’s March 31 policy update reserve for apps with a real core need?

Question 5

Which pair of Android package-visibility details did Google’s March 31 policy update reserve for apps with a real core need?

Broad QUERY_ALL_PACKAGES access and other broad app-visibility workarounds Contacts synchronization and unrestricted SMS message reading Background GPS access and unrestricted Bluetooth scanning Foreground service exemptions and unrestricted notification access

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.