Light

Episode #841 Quiz

Minh Duong's Epic Rickroll
Date: 2021-10-19 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Windows updates addressed PrintNightmare-related spooler spoofing and networking regressions, a Word/Office/SharePoint preview-pane remote code execution, and one actively exploited Win32k elevation-of-privilege zero-day used by IronHusky to install the MysterySnail RAT. Separately, Tianfu Cup exploits, MyKings clipboard hijacking, and REvil shutdowns illustrated patching pressure and attacker adaptation.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the Tianfu Cup 2021 summary, which target was described as having been compromised with a zero-click, zero-interaction remote code execution on the latest iPhone 13 Pro running iOS 15?

Question 1

In the Tianfu Cup 2021 summary, which target was described as having been compromised with a zero-click, zero-interaction remote code execution on the latest iPhone 13 Pro running iOS 15?

Microsoft Exchange Server 2019 Apple Safari on macOS Google Chrome on Windows 10 iPhone 13 Pro running iOS 15

Question 2: What mechanism did Minh Duong use as the command-and-control channel for controlling the district's AvediaPlayer devices?

Question 2

What mechanism did Minh Duong use as the command-and-control channel for controlling the district's AvediaPlayer devices?

HTTP requests to each receiver Multicast traffic from a student laptop SSH access on each receiver SMB backups from the EPIC server

Question 3: According to the episode, what was the key flaw that let Minh extend control from one EPIC bell server to the others?

Question 3

According to the episode, what was the key flaw that let Minh extend control from one EPIC bell server to the others?

A shared default web login on every server An exposed SMB backup share using default credentials A vulnerable SNMP service on each speaker A leaked LDAP directory from the district network

Question 4: What did the MyKings botnet researchers say their analysis had found about the clipboard hijacking module's financial impact?

Question 4

What did the MyKings botnet researchers say their analysis had found about the clipboard hijacking module's financial impact?

It had generated more than $24.7 million in Bitcoin, Ether, and Dogecoin It had produced only a few dollars and was not widely used It had generated roughly $5.2 billion in outgoing bitcoin transactions It had stolen about $3.6 million from Monero mining wallets

Question 5: Why did LinkedIn say it would reduce its China offering to a job-listings-only experience?

Question 5

Why did LinkedIn say it would reduce its China offering to a job-listings-only experience?

A planned merger with a domestic Chinese social network A need to migrate users to a new acquisition platform A failed attempt to monetize social posting in local currency A significantly more challenging operating environment and greater compliance requirements

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.