Light

Episode #839 Quiz

Something Went Wrong
Date: 2021-10-05 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Google fixed two exploited Chrome zero-days, CVE-2021-37975 and 37976, involving a V8 use-after-free and information leak. Windows 11 debuted with a File Explorer memory leak. FCC SIM-swap rules remain only proposed. GriftHorse trojans abused 390 Android apps to enroll victims in premium SMS subscriptions across 70 countries.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the Chrome section, which component was specifically identified as the source of the use-after-free flaw fixed in the latest patch set?

Question 1

In the Chrome section, which component was specifically identified as the source of the use-after-free flaw fixed in the latest patch set?

The VB JavaScript and WebAssembly engine The core DNS resolver stack The Portals API implementation The browser's password manager backend

Question 2: What Windows 11 issue did the episode highlight as an already-known flaw worth cautioning about?

Question 2

What Windows 11 issue did the episode highlight as an already-known flaw worth cautioning about?

A serious memory leak in File Explorer A broken BitLocker recovery flow A kernel panic triggered by USB devices A failure to boot on all TPM 2.0 systems

Question 3: According to the episode, what made the GriftHorse Android campaign especially effective at hiding from detection and monetizing victims?

Question 3

According to the episode, what made the GriftHorse Android campaign especially effective at hiding from detection and monetizing victims?

It encrypted user files and demanded ransom in Bitcoin It installed a rootkit through a browser zero-day to steal passwords It exploited NFC payments on locked phones for one-time card charges It used geolocated, localized pages to push premium SMS subscriptions

Question 4: What was the key practical condition for the Apple Pay attack described in the episode?

Question 4

What was the key practical condition for the Apple Pay attack described in the episode?

An iPhone with a Visa card in transit mode A Visa card used only through in-app confirmation An iPhone with any Mastercard card enrolled A locked Android phone with a rooted NFC app

Question 5: What did Facebook later say was the immediate trigger for the outage?

Question 5

What did Facebook later say was the immediate trigger for the outage?

A failed datacenter power transfer during maintenance A stolen certificate that broke HTTPS globally A faulty configuration change on backbone routers A public DNS cache poisoning attack against their resolvers

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.