Light

Episode #912 Quiz

The NSA @ Home
Date: 2023-02-28 | Length: 1.5 hrs | Episode page at twit.tv

About this episode

Microsoft mistakenly offered Windows 11 upgrades to unsupported Windows 10/11 systems, then revoked them. LastPass disclosed a targeted home-network compromise: malware exploited a vulnerable media app, captured a DevOps master password after MFA, and exfiltrated vaulted decryption keys. NSA home guidance urged updates, WPA3, segmentation, local-only admin, UPnP off, and reboots.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the specific flaw in some motherboard BIOSes that caused SpinRite to crash when probing larger USB drives?

Question 1

According to the episode, what was the specific flaw in some motherboard BIOSes that caused SpinRite to crash when probing larger USB drives?

Enumerating any USB drive caused the BIOS to randomize RAM because of power-management bugs Drives marked RED caused SpinRite to refuse BIOS calls until their partitions were repaired Reading sectors past the 137GB boundary corrupted main memory through the BIOS Reading sectors from the front of the drive overwrote SpinRite’s code segment in DOS

Question 2: What did LastPass say the attacker did on the DevOps engineer’s home computer to obtain the credentials needed for the second breach?

Question 2

What did LastPass say the attacker did on the DevOps engineer’s home computer to obtain the credentials needed for the second breach?

Exploited vulnerable third-party media software to implant keylogger malware Phished the engineer with a fake corporate login page to steal a cloud token Brute-forced the engineer’s multifactor authentication using repeated login attempts Abused a browser extension to extract the engineer’s vault contents directly

Question 3: What limit did Microsoft Edge Secure Network provide in its free tier as described in the episode?

Question 3

What limit did Microsoft Edge Secure Network provide in its free tier as described in the episode?

One gigabyte of data only while connected to public Wi-Fi Unlimited data for the first thirty days after activation Five gigabytes of data each month for signed-in users One gigabyte of data each month for signed-in users

Question 4: Which router-related practice did the NSA specifically recommend in the home-network guidance discussed in the episode?

Question 4

Which router-related practice did the NSA specifically recommend in the home-network guidance discussed in the episode?

Permit remote administration if the router supports WPA3 encryption Expose remote administration only through a VPN tunnel from the Internet Allow remote administration only from trusted guest devices on Wi-Fi Disable remote administration and manage it only from the internal network

Question 5: What did the NSA say about handling potentially non-persistent malicious code on home devices?

Question 5

What did the NSA say about handling potentially non-persistent malicious code on home devices?

Keep devices powered continuously to preserve security monitoring state Avoid reboots so volatile implants do not trigger recovery routines Schedule frequent reboots, including weekly router reboots Only reboot after firmware updates, because routine reboots are unnecessary

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.