Light

Episode #832 Quiz

Microsoft's Culpable Negligence
Date: 2021-08-17 | Length: 1.25 hrs | Episode page at twit.tv

About this episode

Firefox 91 partitions site data into per-site cookie jars, enabling complete deletion of cookies, supercookies, caches, offline data, history, and permissions for one site. Facebook begins end-to-end encrypted Messenger voice, video, disappearing messages, group chats, and Instagram DMs. PrintNightmare RCEs and a Linux crypto-mining botnet exploiting MSRs amplify compromise.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In Firefox 91's Enhanced Cookie Clearing, what exactly changes when a user tells Firefox to forget a website?

Question 1

In Firefox 91's Enhanced Cookie Clearing, what exactly changes when a user tells Firefox to forget a website?

Firefox clears only browser history entries and leaves cookies untouched unless in private mode Firefox deletes only first-party cookies and preserves embedded third-party storage for later Firefox wipes only cache files and keeps the site's cookie jar intact for login continuity Firefox empties the entire cookie jar for that site, including data set by embedded third parties

Question 2: What did Facebook's Messenger announcement say about the timing of end-to-end encryption for voice and video calls?

Question 2

What did Facebook's Messenger announcement say about the timing of end-to-end encryption for voice and video calls?

It would be rolled out as an option for voice and video calls in Messenger It would remain limited to one-on-one text chats and not extend to calls It would replace all Messenger calls with mandatory end-to-end encryption immediately It would apply only to Instagram DMs and not to Messenger at all

Question 3: According to the episode, what was the key operational use of PrintNightmare by the threat actors discussed?

Question 3

According to the episode, what was the key operational use of PrintNightmare by the threat actors discussed?

They used it to steal browser cookies from remote users through web exploitation They used it to move laterally across victim networks during ransomware intrusions They used it to disable Firefox's cookie partitioning on infected endpoints They used it to bypass TPM 2.0 checks on Windows 11 installation media

Question 4: What change did the cryptomining botnet make to infected Linux servers in order to improve mining performance?

Question 4

What change did the cryptomining botnet make to infected Linux servers in order to improve mining performance?

It overclocked the CPU by flashing a custom BIOS on the infected server It enabled hardware prefetching through the MSR driver to increase cache hit rates It disabled hardware prefetching through the MSR driver before running XMRig It migrated the miner into a container to isolate it from legitimate workloads

Question 5: What was the core of Steve Gibson's criticism of Microsoft's handling of the newly acknowledged Print Spooler RCE?

Question 5

What was the core of Steve Gibson's criticism of Microsoft's handling of the newly acknowledged Print Spooler RCE?

Microsoft had known about the issue for eight months but left it unpatched despite ample resources Microsoft lacked the engineering talent to understand the Print Spooler code path at all Microsoft was unable to ship any other security fixes in that month's Patch Tuesday batch Microsoft had already publicly disclosed and fully remediated the flaw in December 2020

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.