Light

Episode #847 Quiz

Bogons Begone!
Date: 2021-11-30 | Length: 2 hrs | Episode page at twit.tv

About this episode

Microsoft Edge’s optional Super Duper Secure Mode disables JIT compilation and adds mitigations like CET and future Arbitrary Code Guard support. Check Point found MediaTek audio DSP firmware flaws enabling malicious apps to intercept calls and media. HP described JavaScript email attachments deploying RATs, and Microsoft’s Windows Installer privilege escalation patch was incomplete.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In Edge's Super Duper Secure Mode, which mitigation did Microsoft explicitly say would be added later to block attackers from loading malicious code into memory?

Question 1

In Edge's Super Duper Secure Mode, which mitigation did Microsoft explicitly say would be added later to block attackers from loading malicious code into memory?

Address Space Layout Randomization Control-flow Integrity Arbitrary Code Guard Control-flow Enforcement Technology

Question 2: Checkpoint Research said malicious apps could interact with MediaTek firmware through which component to steal audio and record phone calls?

Question 2

Checkpoint Research said malicious apps could interact with MediaTek firmware through which component to steal audio and record phone calls?

The MediaTek audio driver The phone's Bluetooth stack The Android media server The MediaTek modem firmware

Question 3: What file name pattern did HP describe as the classic initial attachment used to start the RATDispenser infection chain?

Question 3

What file name pattern did HP describe as the classic initial attachment used to start the RATDispenser infection chain?

OrderInformation.txt.js InvoiceDetails.pdf.js ShipmentNotice.docm.js PaymentReceipt.xls.js

Question 4: Which Microsoft Windows Installer vulnerability did Cisco Talos say was being actively exploited as a local privilege escalation zero-day?

Question 4

Which Microsoft Windows Installer vulnerability did Cisco Talos say was being actively exploited as a local privilege escalation zero-day?

CVE-2021-34527 CVE-2021-40444 CVE-2021-41379 CVE-2021-26855

Question 5: According to John Gilmore's reply, what operating-system change had already been deployed in Linux, Android, macOS, iOS, and Solaris since 2008?

Question 5

According to John Gilmore's reply, what operating-system change had already been deployed in Linux, Android, macOS, iOS, and Solaris since 2008?

Automatic routing for 169.254/16 Unicast support for 127/8 Unicast support for 240/4 Broadcast support for 255.255.255.255

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.