Light

Episode #821 Quiz

Epsilon Red
Date: 2021-06-01 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Chrome 91 fixed 32 vulnerabilities, added clipboard paste support, blocked NAT slipstreaming port 10080, and sped JavaScript via Sparkplug and short built-in calls. Google MyActivity can now be password-protected or auto-deleted. Amazon Sidewalk uses encrypted LoRa/BLE bridging. Epsilon Red ransomware used PowerShell, WMI, and scheduled tasks to disable defenses and encrypt indiscriminately.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the Chrome 91 discussion, what new protection did Google bring down to the shipping desktop release in response to NAT slipstreaming concerns?

Question 1

In the Chrome 91 discussion, what new protection did Google bring down to the shipping desktop release in response to NAT slipstreaming concerns?

Blocking port 10080 Blocking port 3389 Blocking port 5650 Blocking port 443

Question 2: What did Google’s MyActivity page newly allow users to do, according to the episode?

Question 2

What did Google’s MyActivity page newly allow users to do, according to the episode?

Password-protect the page Export the page as a signed PDF Encrypt the activity log locally Disable all Google account recovery options

Question 3: According to Sophos’s analysis, which PowerShell script first attempted to invoke uninstallers for security products in the Epsilon Red attack chain?

Question 3

According to Sophos’s analysis, which PowerShell script first attempted to invoke uninstallers for security products in the Epsilon Red attack chain?

9.ps1 2.ps1 12.ps1 6.ps1

Question 4: Which combination best matches the firewall modifications that Epsilon Red’s RED.ps1 made after its one-hour wait?

Question 4

Which combination best matches the firewall modifications that Epsilon Red’s RED.ps1 made after its one-hour wait?

It blocked inbound UDP except 3389 and 5650 It blocked inbound TCP except 3389 and 5650 It blocked inbound TCP except 80 and 443 It blocked outbound TCP except 3389 and 5650

Question 5: What did the Epsilon Red ransomware executable do when encrypting folders, according to the episode?

Question 5

What did the Epsilon Red ransomware executable do when encrypting folders, according to the episode?

It filtered only known document extensions It encrypted only the current directory It uploaded encrypted files to a Tor hidden service It spawned separate child processes per subfolder

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.