Light

Episode #882 Quiz

Rowhammer's Nine Lives
Date: 2022-08-02 | Length: 2 hrs | Episode page at twit.tv

About this episode

Atlassian Confluence’s Questions app installed a hard-coded “disabled system user” account, and attackers exploited disclosed credentials before admins patched or manually disabled it; CISA urged VPN or reverse-proxy protection. TLS-Anvil then fuzz-tested 13 TLS libraries, finding exploits, handshake and alert-handling flaws, and interoperability bugs, underscoring rigorous protocol testing.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what did Atlassian say was required to remediate the Confluence issue created by the Questions for Confluence app?

Question 1

According to the episode, what did Atlassian say was required to remediate the Confluence issue created by the Questions for Confluence app?

Rotate the administrator password and remove all Confluence add-ons from the server Install Atlassian's security fixes or manually disable the hard-coded disabled system user account Move Confluence to TLS 1.3 and require client certificates for all users Disable Confluence's built-in Tomcat service and rebuild the instance from scratch

Question 2: What did TLS-Anvil’s evaluation of 13 TLS implementations reveal about alert handling and related issues across the libraries tested?

Question 2

What did TLS-Anvil’s evaluation of 13 TLS implementations reveal about alert handling and related issues across the libraries tested?

It found two exploits only in BoringSSL, with all other findings being minor RFC wording disagreements It found no issues in the modern libraries, but many failures in legacy libraries such as OpenSSL and NSS It found only interoperability problems, with no issues affecting alerts or cryptographic handshakes It found issues in every library, including 116 alert-handling problems and 239 total issues

Question 3: Which set of TLS libraries did the episode identify as having around 97% pass rates on the server-side tests?

Question 3

Which set of TLS libraries did the episode identify as having around 97% pass rates on the server-side tests?

BearSSL, Botan, Rustls, and wolfSSL NSS, BoringSSL, tlslite-ng, and OpenSSL MatrixSSL, Mbed TLS, s2n, and LibreSSL GnuTLS, LibreSSL, BearSSL, and Rustls

Question 4: What change in Proofpoint’s campaign data did Steve connect to Microsoft’s default macro blocking?

Question 4

What change in Proofpoint’s campaign data did Steve connect to Microsoft’s default macro blocking?

Macro-enabled attachments remained unchanged, while ISO and RAR attachments declined Macro-enabled attachments fell by about 66% between October 2021 and June 2022 Macro-enabled attachments disappeared entirely as soon as Microsoft enabled the Mark of the Web Macro-enabled attachments rose by about 66% after Office began blocking VBA macros

Question 5: In the Half-Double Rowhammer attack, what role did the near aggressor play in relation to the far aggressor and the victim row?

Question 5

In the Half-Double Rowhammer attack, what role did the near aggressor play in relation to the far aggressor and the victim row?

It replaced the need for side channels by exposing physical addresses to the attacker It refreshed the victim row directly and prevented any charge leakage from occurring It acted as a bridge that transported the far aggressor’s effect onto the victim row It isolated the victim row so the far aggressor could not create any disturbance

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.