Light

Episode #890 Quiz

DarkNet Politics
Date: 2022-09-27 | Length: 1.5 hrs | Episode page at twit.tv

About this episode

Europol’s retention of non-criminal citizens’ data clashes with privacy rules; multiple EU regulators now deem Google Analytics illegal absent proxy-based pseudonymization, IP stripping, referrer and identifier removal, and EU-only processing. Chrome Manifest V3 shifts extensions to declarativeNetRequest, potentially weakening adblockers, while embedded Chromium apps inherit unpatched remote-code-execution vulnerabilities.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the French CNIL guidance discussed in the episode, what is the core architectural change required if Google Analytics is to remain usable under the GDPR?

Question 1

According to the French CNIL guidance discussed in the episode, what is the core architectural change required if Google Analytics is to remain usable under the GDPR?

Encrypt the analytics identifier before it reaches Google Rotate Google Analytics account IDs on a weekly schedule Rewrite the tracking script to store only first-party cookies Insert a proxy so browsers do not contact Google directly

Question 2: What specific feature of Manifest V3 was described as replacing the old extension model for blocking or modifying Chrome network requests?

Question 2

What specific feature of Manifest V3 was described as replacing the old extension model for blocking or modifying Chrome network requests?

A network stack filter that runs only for enterprise users A per-extension callback pipeline with full request mutation A browser-enforced declarativeNetRequest rule system A signed extension sandbox that rewrites HTML responses

Question 3: Which older Chromium vulnerabilities were cited as still posing risk to embedded-browser apps because of the patch gap?

Question 3

Which older Chromium vulnerabilities were cited as still posing risk to embedded-browser apps because of the patch gap?

CVE-2019-0604 and CVE-2020-1472 CVE-2022-30190 and CVE-2021-44228 CVE-2021-38003 and CVE-2022-1364 CVE-2021-26855 and CVE-2021-34527

Question 4: What was the default delay added to Windows 11 SMB authentication attempts in the Insider build described in the episode?

Question 4

What was the default delay added to Windows 11 SMB authentication attempts in the Insider build described in the episode?

Ten seconds after each failed attempt One second after each failed attempt Two seconds after each failed attempt Five seconds after each failed attempt

Question 5: What did the ransomware leak reveal about LockBit 3.0's operational risk, according to the episode's discussion of researchers' reactions?

Question 5

What did the ransomware leak reveal about LockBit 3.0's operational risk, according to the episode's discussion of researchers' reactions?

It permanently disabled all existing LockBit encryptions in the wild It showed that LockBit relied exclusively on public open-source code It only exposed victim contact data and not usable tooling It could enable others to build and rebrand their own ransomware operations

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.