Light

Episode #900 Quiz

LastPass Again
Date: 2022-12-06 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Australia’s new privacy bill raises breach fines to 50 million AUD or 30% of revenue for negligent data protection, while Ireland fined Meta for Facebook scraping that exposed 530 million users. Google revoked trusted roots after TrustCor’s spyware-linked interception role, rotated leaked Android platform certs, and LastPass reported a cloud-service intrusion.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: Under Australia's new Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022, what is the maximum fine described for companies that fail to safeguard customer data?

Question 1

Under Australia's new Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022, what is the maximum fine described for companies that fail to safeguard customer data?

Up to 30 million AUS plus mandatory breach remediation costs Up to the greater of 50 million AUD or 20% of global revenue Up to the greater of 50 million AUS or 30% of adjusted revenue Up to the greater of 5 million AUS or 10% of adjusted revenue

Question 2: What did Medibank say about the raw data it had analyzed from the REvil release?

Question 2

What did Medibank say about the raw data it had analyzed from the REvil release?

It appeared incomplete and hard to understand It contained only billing records and no personal data It was fully indexed and easy to search It was already normalized into a clean database schema

Question 3: Why did Mozilla and the other browser vendors pull TrustCor's root certificate from trust stores?

Question 3

Why did Mozilla and the other browser vendors pull TrustCor's root certificate from trust stores?

Because TrustCor stopped renewing its browser root-store application Because TrustCor failed to support modern TLS cipher suites Because evidence tied TrustCor to spyware and interception activity Because TrustCor's certificates had expired across all issued sites

Question 4: Which Android vendor names did Google cite as having platform certificates used to sign malware samples?

Question 4

Which Android vendor names did Google cite as having platform certificates used to sign malware samples?

Samsung, Sony, Qualcomm, and OnePlus Google, Motorola, Huawei, and Xiaomi HTC, Nokia, Oppo, and ZTE Samsung, LG, MediaTek, and Revoview

Question 5: What practical effect did a full SpinRite Level 3 pass have on the ThinkPad Helix SSD described in the episode?

Question 5

What practical effect did a full SpinRite Level 3 pass have on the ThinkPad Helix SSD described in the episode?

It reduced a full read scan from about three hours to about thirty minutes It eliminated all SMART warnings and doubled the drive's capacity It made the first read pass slower but improved only write speed It converted the SSD into a spinning-disk profile for faster outer tracks

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.