Light

Episode #857 Quiz

The Inept Panda
Date: 2022-02-08 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

The episode urged Olympic travelers to use burner phones, disable wireless radios, and distrust public networks. It detailed CVE-2021-44142, a Samba vfs_fruit heap overflow enabling unauthenticated root RCE, mitigated by upgrading or removing the module. It also cataloged LOLBins and Microsoft's MSIX and macro blocking changes.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the specific vulnerability class in SAMBA's vfs_fruit module that led to CVE-2021-44142?

Question 1

According to the episode, what was the specific vulnerability class in SAMBA's vfs_fruit module that led to CVE-2021-44142?

A race condition in the SMB authentication handshake A certificate validation bypass in the AFP client bridge An out-of-bounds heap read/write in vfs_fruit A directory traversal flaw in Netatalk request parsing

Question 2: What operational condition had to be present for the SAMBA flaw discussed in the episode to be exploitable?

Question 2

What operational condition had to be present for the SAMBA flaw discussed in the episode to be exploitable?

The SMB service had to be exposed directly to the public Internet The target had to be joined to an Active Directory domain The server had to be running only the oldest SMB1 dialect The vfs_fruit module had to be installed and in use

Question 3: Which set of Linux LOLBins did Uptycs rank in the episode's top five for Linux?

Question 3

Which set of Linux LOLBins did Uptycs rank in the episode's top five for Linux?

tar, sed, awk, find, ps curl, openssl, sqlite, killall, funzip regsvr32, mshta, wmic, PowerShell, EQNEDT32 chattr, Wget, setfacl, crontab, rm

Question 4: What did Microsoft do in response to abuse of the ms-appinstaller protocol described in the episode?

Question 4

What did Microsoft do in response to abuse of the ms-appinstaller protocol described in the episode?

It replaced MSIX with a legacy MSI-only installation path It required a new browser plugin before any app could be installed It forced all MSIX packages to be signed by Microsoft itself It disabled ms-appinstaller:// links and told sites to serve the package directly

Question 5: Which two specific data-transmission failures in MY2022 did Citizen Lab identify in the episode?

Question 5

Which two specific data-transmission failures in MY2022 did Citizen Lab identify in the episode?

TLS 1.0 fallback and expired OCSP stapling responses Skipped certificate validation and plaintext submission to tmail.beijing2022.cn Weak password hashing and insecure local storage permissions Broken DNS resolution and unsigned APK sideloading

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.