Light

Episode #911 Quiz

A Clever Regurgitator
Date: 2023-02-21 | Length: 1.5 hrs | Episode page at twit.tv

About this episode

GoDaddy disclosed multi-year compromise from 2020 through 2022, with attackers exfiltrating source code, credentials, and deploying malware to redirect customer websites. The episode also covered Section 230’s algorithmic liability implications, Twitter’s retirement of SMS 2FA in favor of stronger methods, Bitwarden’s Argon2 adoption, and Cloudflare’s 71-million-request DDoS mitigation record.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the December 2022 GoDaddy incident specifically reported to do to customer websites on cPanel hosting servers?

Question 1

According to the episode, what was the December 2022 GoDaddy incident specifically reported to do to customer websites on cPanel hosting servers?

It intermittently redirected random customer websites to malicious sites It silently encrypted customer websites until a ransom was paid It replaced customer DNS records with attacker-controlled name servers It exfiltrated customer billing records from GoDaddy's payment systems

Question 2: What detail did the episode give as the likely reason GoDaddy could tie the 2020, 2021, and 2022 incidents together even while not identifying the threat actor?

Question 2

What detail did the episode give as the likely reason GoDaddy could tie the 2020, 2021, and 2022 incidents together even while not identifying the threat actor?

GoDaddy identified the actor by matching IP addresses to a known nation-state campaign Information obtained in the initial 2020 intrusion was later used in the 2021 and 2022 intrusions The same malware sample was publicly uploaded to VirusTotal after each intrusion The attackers reused identical stolen credit-card numbers across all three intrusions

Question 3: What was the key concern raised about the Supreme Court's review of Section 230 in the two cases discussed on the episode?

Question 3

What was the key concern raised about the Supreme Court's review of Section 230 in the two cases discussed on the episode?

Hosting providers might lose immunity for refusing to remove spam quickly enough Algorithmic recommendations might be treated as editorial publication activity Platforms might lose immunity for encrypting user messages at rest Search engines might lose immunity for storing cached copies of webpages

Question 4: Why did Twitter say it would stop allowing non-Twitter Blue subscribers to use SMS for two-factor authentication?

Question 4

Why did Twitter say it would stop allowing non-Twitter Blue subscribers to use SMS for two-factor authentication?

Twitter was eliminating all forms of two-factor authentication for free accounts SMS messages were no longer supported by mobile carriers worldwide Phone number-based 2FA had been used and abused by bad actors Authenticator apps had been proven less secure than text messages

Question 5: What distinguishing technique did Unit 42 cite as evidence that the V3G4 Mirai variant's three campaigns came from the same malicious actor?

Question 5

What distinguishing technique did Unit 42 cite as evidence that the V3G4 Mirai variant's three campaigns came from the same malicious actor?

The payloads all used identical ransomware notes and negotiation portals The malware used the same stolen certificate chain in every campaign The hardcoded C2 domains shared the same string and the shell scripts were similar Each campaign targeted the same cloud provider and the same customer subnet

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.