Light

Episode #897 Quiz

Memory-Safe Languages
Date: 2022-11-15 | Length: 1.5 hrs | Episode page at twit.tv

About this episode

NSA urged migration from C and C++ to memory-safe languages like C#, Go, Java, Ruby, Rust, and Swift, because buffer overflows, use-after-free, leaks, uninitialized variables, and races fuel about 70% of vulnerabilities. It recommended SAST, DAST, compiler checks, ASLR, DEP, and CFG to reduce exploitability, despite performance and migration costs.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the NSA advisory discussed in the episode, what percentage of Microsoft vulnerabilities from 2006 through 2018 were attributed to memory safety issues?

Question 1

According to the NSA advisory discussed in the episode, what percentage of Microsoft vulnerabilities from 2006 through 2018 were attributed to memory safety issues?

90% 70% 50% 80%

Question 2: What did the host say was the reason Microsoft domain controllers began failing Kerberos authentication after the November 8, 2022 updates?

Question 2

What did the host say was the reason Microsoft domain controllers began failing Kerberos authentication after the November 8, 2022 updates?

They were affected by a Print Spooler regression They had lost their Active Directory database indexes They were missing the RC4 cipher fallback They had disabled NTLM entirely

Question 3: Which combination of features did the episode say Shennina integrated to perform its automated attacks and exfiltration?

Question 3

Which combination of features did the episode say Shennina integrated to perform its automated attacks and exfiltration?

Burp Suite, ZMap, and a TOR relay Metasploit, Nmap, and an in-house C2 server Wireshark, Nikto, and a DNS tunneling channel Cobalt Strike, Shodan, and a public paste service

Question 4: What limitation did the episode say applied to Apple's new AirDrop timeout feature in iOS 16.1.1 and 16.2 beta?

Question 4

What limitation did the episode say applied to Apple's new AirDrop timeout feature in iOS 16.1.1 and 16.2 beta?

It only affected devices running the public beta It only affected AirDrop transfers to Apple Watch It only affected iPhones purchased in China It only affected devices enrolled in enterprise MDM

Question 5: How many nested hidden volumes per device did Shufflecake say it could manage?

Question 5

How many nested hidden volumes per device did Shufflecake say it could manage?

15 nested volumes 8 nested volumes 20 nested volumes 12 nested volumes

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.