Light

Episode #829 Quiz

SeriousSAM & PetitPotam
Date: 2021-07-27 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Chrome now fingerprints pages locally by color histograms, hashes them against phishing lists, and reduced classification latency from 1.8 seconds to 100 milliseconds. Kaseya received a universal REvil decryptor. HP, Samsung, and Xerox drivers exposed a 16-year kernel IOCTL buffer overflow. Windows’ SAM and MS-EFSRPC flaws enabled local credential theft and NTLM relay.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In Chrome M92’s faster phishing detection path, what specific image-analysis optimization was described as reducing hash-map overhead for uniform backgrounds?

Question 1

In Chrome M92’s faster phishing detection path, what specific image-analysis optimization was described as reducing hash-map overhead for uniform backgrounds?

Replacing color counts with DNS reputation lookups Summing consecutive pixels before counting them Compressing the page to grayscale before hashing it Discarding every third pixel before hashing it

Question 2: According to the episode, what was the practical performance impact of Chrome’s new phishing-classification method at the 50th percentile?

Question 2

According to the episode, what was the practical performance impact of Chrome’s new phishing-classification method at the 50th percentile?

Up to 10 times faster Roughly 100 milliseconds slower Up to 50 times faster Exactly 2.5 times faster

Question 3: What was the stated effect of the Kaseya decryptor on files that were fully encrypted in the REvil attack?

Question 3

What was the stated effect of the Kaseya decryptor on files that were fully encrypted in the REvil attack?

It was proven 100% effective It worked only for a subset of victims It restored only metadata and filenames It required each victim to re-encrypt before recovery

Question 4: What was the key local privilege problem in the HP/Samsung/Xerox printer-driver flaw discussed in the episode?

Question 4

What was the key local privilege problem in the HP/Samsung/Xerox printer-driver flaw discussed in the episode?

An exposed WebDAV share that leaked spool files to guests A malformed PostScript job allowing remote code execution over SMTP A user-controlled IOCTL size parameter enabling kernel buffer overflow A signed firmware image that bypassed Secure Boot on startup

Question 5: What remediation did Microsoft recommend for the SeriousSAM issue before deleting existing shadow copies?

Question 5

What remediation did Microsoft recommend for the SeriousSAM issue before deleting existing shadow copies?

Replace NTLM with Kerberos on all local logons Rotate the local Administrator password and reboot twice Re-enable inheritance on the config directory ACLs Disable VSS service startup on every workstation

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.